Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File:                     AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier:          eUNgSq8Z2Eqz6TGQOszoG4Lp7Ii8y9AOQYt5mS+/Zh4=
Subject key identifier:   AC:F8:8C:0E:52:53:29:8D:42:C8:41:68:F7:5F:68:59:5F:7F:11:60
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer:       /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial:       019E1CB50949257F079B43DC9279135BE801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number:          15EF
Signing time:             Tue 12 May 2026 15:01:26 +0000
Manifest this update:     Tue 12 May 2026 15:01:26 +0000
Manifest next update:     Wed 13 May 2026 15:01:26 +0000
Files and hashes:         1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=)
                          2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: dAXF6j29nbqYcxyUULVGNjhfjyaw+glLTjL8PjuvtH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:09:49:25:7f:07:9b:43:dc:92:79:13:5b:e8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
        Validity
            Not Before: May 12 15:01:26 2026 GMT
            Not After : May 13 15:01:26 2026 GMT
        Subject: CN=acf88c0e5253298d42c84168f75f68595f7f1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:f6:cd:6e:68:aa:2f:80:4f:fc:02:e0:92:
                    7e:1e:d7:c8:81:3e:f6:2a:5b:75:a2:ec:04:0b:11:
                    69:d0:8e:42:b6:ab:3e:0f:32:17:69:a9:17:43:44:
                    0e:41:c2:72:e1:04:2f:30:f7:d4:9d:2b:2d:1b:ca:
                    b6:f2:04:40:e8:52:ba:76:9e:7f:8c:d9:7f:12:35:
                    b1:b9:ed:95:29:80:e6:38:e0:06:d2:37:dd:63:bd:
                    f3:34:8f:a6:85:fd:39:d6:50:bd:7a:d1:58:41:09:
                    7c:92:22:3d:f3:82:3c:24:74:a2:d4:57:d9:71:8d:
                    09:66:43:56:aa:c2:c2:d3:c8:aa:86:0d:82:27:eb:
                    c5:3b:8e:d4:7b:68:d8:95:eb:4c:76:8a:73:1b:89:
                    1c:da:c6:e8:02:c0:07:96:07:87:bd:d9:63:23:ca:
                    b8:51:f6:7c:53:85:5d:3d:66:84:c5:ec:bd:de:47:
                    92:e2:b0:3a:8d:aa:4c:79:56:b0:a0:cd:c0:eb:41:
                    01:3e:e3:25:50:2f:84:36:01:02:16:8a:75:54:75:
                    fe:b2:f1:fe:8f:6b:54:7e:b3:d6:2f:d0:3e:3b:7a:
                    22:5a:37:1c:b0:c2:68:87:95:5d:7e:8f:e7:e7:91:
                    39:a9:66:61:88:b6:43:de:e8:38:88:8d:c1:ae:16:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F8:8C:0E:52:53:29:8D:42:C8:41:68:F7:5F:68:59:5F:7F:11:60
            X509v3 Authority Key Identifier:
                keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:8a:c9:03:f5:a4:e7:fc:1d:09:1c:a2:67:e4:2f:47:26:
         8a:c1:0e:64:d8:fc:e2:7f:5c:dd:45:20:08:96:f7:35:a7:c5:
         b6:25:ff:86:d9:b2:ac:16:f5:a1:29:6f:a4:f9:a2:c2:3d:ec:
         0a:48:08:17:ca:ed:3e:11:72:a9:76:3b:a2:71:bd:f0:93:8f:
         a5:3c:2d:81:eb:b8:f8:09:d6:16:22:fe:ce:35:c4:5c:c6:96:
         82:a9:97:b0:ea:a7:41:10:e8:49:6c:dc:fe:79:d6:eb:1d:3e:
         e4:28:da:75:37:5d:bf:9d:05:26:eb:13:73:a6:3f:5d:0c:7c:
         4f:85:3d:c2:40:fe:c3:d2:0f:79:90:04:89:cb:9a:2d:06:ca:
         ad:40:30:2f:25:f9:e9:25:1d:63:a4:2b:de:a3:ca:ad:0f:b7:
         a5:96:d2:a9:28:1b:bf:ac:f3:91:de:53:d5:91:88:1f:de:52:
         97:61:55:78:bf:5f:25:fc:49:64:1c:b1:3f:0e:fc:21:d0:2a:
         9f:f6:e2:99:c4:de:95:ef:46:81:ef:40:88:d4:8e:20:40:d0:
         4d:ba:69:80:39:f2:45:55:3f:f4:72:76:b5:d8:8c:e7:8c:f2:
         24:59:15:66:e1:1e:74:4e:e3:07:9a:6a:0f:b0:e9:3e:f2:c8:
         a2:0f:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:51 2026 by rpki-client