Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          ye6F7w0yFVeB34lYY9skGu8Ixsa/13/fNYt+evE3IvM=
Subject key identifier:   44:5A:1E:2A:19:5C:C9:D7:28:45:F6:E6:75:CF:05:3E:AA:37:A8:8B
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       019F8F100294618350F24F8F305123DA8E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          19C1
Signing time:             Thu 23 Jul 2026 13:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:18 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: BIeAcnjNKuzMNTW1mgSu/RDo6C9BZpeqxCQw3JHs8s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:02:94:61:83:50:f2:4f:8f:30:51:23:da:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Jul 23 13:00:18 2026 GMT
            Not After : Jul 24 13:00:18 2026 GMT
        Subject: CN=445a1e2a195cc9d72845f6e675cf053eaa37a88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:4c:8d:63:82:af:d7:7f:62:2b:3e:ef:40:
                    27:0b:b4:8a:d2:f0:3a:39:1f:44:70:ed:c9:64:f1:
                    67:84:be:e0:89:e7:37:79:da:67:1d:97:0b:65:49:
                    93:02:c9:e6:12:2e:d8:1f:60:fa:db:91:90:d5:b2:
                    f2:bd:79:fb:34:74:6c:75:81:62:07:6a:bf:7a:6d:
                    f7:1c:e7:ce:0c:a6:e3:6c:55:87:4f:2c:80:dd:e2:
                    b6:82:45:5f:4d:6a:32:5b:ee:6b:25:f5:0e:79:da:
                    79:95:97:72:c5:e3:70:28:fa:e4:a1:fe:30:09:fa:
                    93:b0:9d:3b:97:93:44:d3:a4:1a:53:cb:61:cf:9b:
                    08:e5:43:7d:10:71:02:80:0d:d1:99:fa:4d:33:6b:
                    bf:e4:64:09:33:c2:80:2a:c2:c3:c6:cd:9e:d4:49:
                    c8:14:d6:5f:df:fb:fb:ed:3b:a9:c5:c6:b5:0d:fb:
                    6c:72:a9:48:1a:a0:b3:14:6e:92:54:6f:9c:0b:68:
                    30:c5:35:b7:ba:5c:72:9d:7d:78:98:ab:dc:5a:2d:
                    04:b8:3e:c3:53:81:93:78:61:51:f6:7e:4f:d3:76:
                    08:1d:bc:b2:c0:2e:36:20:a6:fb:1a:4f:76:d0:55:
                    bd:a5:98:98:8a:7e:be:be:1b:c5:93:47:1b:91:3c:
                    f2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:1E:2A:19:5C:C9:D7:28:45:F6:E6:75:CF:05:3E:AA:37:A8:8B
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:94:b5:29:11:39:dc:6a:ee:b7:f7:9f:bb:7e:fb:fe:5e:9e:
         ec:3e:62:1e:f7:f7:cf:a0:fb:91:7d:4f:a4:87:b7:2a:fe:99:
         6e:cd:45:97:df:07:a8:9d:12:94:7b:06:b1:b0:4f:b2:f2:c3:
         b3:d4:ec:c2:9d:ec:de:cf:03:61:d2:0d:de:8f:95:80:1d:63:
         f9:05:67:6a:ef:8b:b9:ad:54:51:0b:1e:5d:23:a1:d6:1d:48:
         69:63:ab:ff:f2:22:5b:32:73:7e:f8:de:a6:c7:0a:77:86:26:
         4a:2b:96:1f:a8:14:cf:92:03:d9:e5:3e:10:c6:01:56:d8:20:
         1f:d1:02:51:34:fb:32:52:6f:9f:a1:d0:4a:4c:f0:4d:ec:1e:
         2e:7b:64:f6:c6:2e:99:5f:af:56:81:03:b0:bf:78:e5:4f:3d:
         5c:96:fd:53:6a:3f:81:46:f5:5a:d0:05:74:9e:10:1f:c3:4d:
         5a:07:dd:0c:03:94:e2:be:ac:44:15:ec:a1:55:7b:74:1f:9e:
         b2:34:cf:35:aa:59:e9:0f:b5:f7:3f:db:66:ad:07:f5:2f:62:
         7e:79:55:b9:e0:a9:b3:c2:67:01:7a:7c:65:c9:33:07:fa:81:
         da:5a:a6:8b:ee:e2:e1:a7:09:5b:34:20:70:41:a4:b5:d8:03:
         b2:5a:de:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEAKUYYNQ8k+PMFEj2o5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTI2Y2E4YzUxZmQxZWViMjdjMmE3ODRkYmYyMGJkMmE0
OTkxOWUwHhcNMjYwNzIzMTMwMDE4WhcNMjYwNzI0MTMwMDE4WjAzMTEwLwYDVQQD
Eyg0NDVhMWUyYTE5NWNjOWQ3Mjg0NWY2ZTY3NWNmMDUzZWFhMzdhODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLVMjWOCr9d/Yis+70AnC7SK0vA6
OR9EcO3JZPFnhL7giec3edpnHZcLZUmTAsnmEi7YH2D625GQ1bLyvXn7NHRsdYFi
B2q/em33HOfODKbjbFWHTyyA3eK2gkVfTWoyW+5rJfUOedp5lZdyxeNwKPrkof4w
CfqTsJ07l5NE06QaU8thz5sI5UN9EHECgA3RmfpNM2u/5GQJM8KAKsLDxs2e1EnI
FNZf3/v77Tupxca1DftscqlIGqCzFG6SVG+cC2gwxTW3ulxynX14mKvcWi0EuD7D
U4GTeGFR9n5P03YIHbyywC42IKb7Gk920FW9pZiYin6+vhvFk0cbkTzyfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERaHioZXMnXKEX25nXPBT6qN6iLMB8GA1UdIwQY
MBaAFACSbKjFH9HusnwqeE2/IL0qSZGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQt
YzE5NTU4NTQ5MDBjLzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQtYzE5NTU4NTQ5MDBj
LzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5S1KRE5
3Grut/efu377/l6e7D5iHvf3z6D7kX1PpIe3Kv6Zbs1Fl98HqJ0SlHsGsbBPsvLD
s9Tswp3s3s8DYdIN3o+VgB1j+QVnau+Lua1UUQseXSOh1h1IaWOr//IiWzJzfvje
pscKd4YmSiuWH6gUz5ID2eU+EMYBVtggH9ECUTT7MlJvn6HQSkzwTeweLntk9sYu
mV+vVoEDsL945U89XJb9U2o/gUb1WtAFdJ4QH8NNWgfdDAOU4r6sRBXsoVV7dB+e
sjTPNapZ6Q+19z/bZq0H9S9ifnlVueCps8JnAXp8ZckzB/qB2lqmi+7i4acJWzQg
cEGktdgDslreFQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:30 2026 by rpki-client