Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File:                     AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier:          mJOOz3BKUo5VMYaJ+9mxR3ua8MrXmUGx/lEQI/qAqqI=
Subject key identifier:   18:F5:18:38:95:6B:1C:D1:5B:49:E4:1B:1A:6C:23:00:F5:B7:13:46
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer:       /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial:       019D28848AF9EB412D4090D731A20C10D548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number:          A6
Signing time:             Thu 26 Mar 2026 05:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:08 +0000
Files and hashes:         1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: zgViGc6Ost0/01j+zxZcfw06qiDK0AJH37/U1Lf26IU=)
                          2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:8a:f9:eb:41:2d:40:90:d7:31:a2:0c:10:d5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
        Validity
            Not Before: Mar 26 05:01:08 2026 GMT
            Not After : Mar 27 05:01:08 2026 GMT
        Subject: CN=18f51838956b1cd15b49e41b1a6c2300f5b71346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:37:9f:f2:0c:03:a4:5f:51:13:fe:08:c6:
                    77:7b:c4:dd:f0:99:34:a1:8b:75:c0:77:46:6a:1b:
                    24:a1:67:39:04:b5:40:67:b5:0c:05:60:56:d0:38:
                    1d:99:b8:2b:fa:11:26:3b:cd:a3:2e:28:5d:1d:e5:
                    b3:40:e3:21:d3:90:f5:6c:14:e9:00:2a:60:67:66:
                    be:76:06:f5:f8:eb:6d:25:06:45:58:1b:c0:10:a7:
                    51:07:2c:da:f7:c7:9b:e7:36:ff:27:d9:b2:5f:a5:
                    93:05:90:d5:22:81:92:fa:07:e6:09:24:10:d1:5b:
                    cd:4d:93:cc:3a:3d:e5:63:ca:a1:67:38:a4:79:3f:
                    07:ee:69:a8:e7:b4:8c:92:99:78:6c:10:d1:21:5d:
                    46:d2:0a:d1:5c:98:44:c7:2b:e5:37:f1:67:cf:ac:
                    86:f4:c5:74:00:54:1c:6a:b6:9f:14:85:c9:1b:ca:
                    fb:f0:14:f6:a2:75:84:e1:2d:27:0c:50:3f:bb:15:
                    d7:57:ab:93:3b:99:74:09:40:a5:b2:4f:d0:db:5a:
                    78:15:ca:a7:8e:9a:c6:cb:77:e0:e1:3d:9e:74:5b:
                    87:68:2d:47:f5:36:2d:81:82:d8:50:7c:84:fb:36:
                    6c:49:6c:37:33:96:bf:d2:90:71:3c:08:ed:58:6c:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:18:38:95:6B:1C:D1:5B:49:E4:1B:1A:6C:23:00:F5:B7:13:46
            X509v3 Authority Key Identifier:
                keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:e4:d7:6e:ea:e2:c8:7b:95:74:6a:44:2c:d8:41:c3:7d:
         2e:97:1f:6c:b6:f8:69:37:06:bc:c4:28:3b:33:1f:8b:bb:f7:
         c4:fa:5a:9c:01:f4:cb:1b:94:a9:ba:b1:b3:f6:d0:d8:2e:61:
         07:ef:1e:7a:d3:55:69:20:fa:12:60:6f:7e:00:23:e3:60:5a:
         7c:c5:97:17:b4:a8:41:ac:44:40:cd:42:69:2c:37:73:6b:f8:
         10:f5:9f:68:ab:55:a0:09:e8:f8:09:66:ac:4c:42:52:00:9a:
         3f:76:ff:2d:95:fe:e4:12:9c:09:5a:31:37:09:6b:bc:3e:73:
         4c:92:db:11:52:aa:50:de:d8:23:4c:02:d0:84:1b:11:3c:68:
         95:c9:0c:8d:11:f0:ac:48:68:96:01:05:40:52:bc:e0:7d:85:
         fc:d7:8f:85:82:08:63:bc:c3:38:fe:19:32:2c:aa:cb:f6:6d:
         e9:16:e2:56:56:36:0a:e6:95:c0:30:04:9e:fc:c2:db:44:61:
         d0:97:18:f2:f7:93:15:11:ef:de:5d:2f:02:0d:69:80:66:cc:
         55:b3:aa:c6:14:80:6f:ca:41:10:3f:1c:2e:a3:02:1b:03:67:
         ba:9e:ab:2b:e5:8e:33:49:7e:a7:8a:3d:c5:a5:3a:61:b1:cf:
         db:48:8e:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohIr560EtQJDXMaIMENVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZTVlZTNmZGIxNjk1MzU0MTllNzk0ZWU4YzgxM2Q5Mjkz
NTgxY2EwHhcNMjYwMzI2MDUwMTA4WhcNMjYwMzI3MDUwMTA4WjAzMTEwLwYDVQQD
EygxOGY1MTgzODk1NmIxY2QxNWI0OWU0MWIxYTZjMjMwMGY1YjcxMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNg3n/IMA6RfURP+CMZ3e8Td8Jk0
oYt1wHdGahskoWc5BLVAZ7UMBWBW0Dgdmbgr+hEmO82jLihdHeWzQOMh05D1bBTp
ACpgZ2a+dgb1+OttJQZFWBvAEKdRByza98eb5zb/J9myX6WTBZDVIoGS+gfmCSQQ
0VvNTZPMOj3lY8qhZzikeT8H7mmo57SMkpl4bBDRIV1G0grRXJhExyvlN/Fnz6yG
9MV0AFQcarafFIXJG8r78BT2onWE4S0nDFA/uxXXV6uTO5l0CUClsk/Q21p4Fcqn
jprGy3fg4T2edFuHaC1H9TYtgYLYUHyE+zZsSWw3M5a/0pBxPAjtWGy9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj1GDiVaxzRW0nkGxpsIwD1txNGMB8GA1UdIwQY
MBaAFALl7j/bFpU1QZ55TujIE9kpNYHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXVYdVA5c1dsVFZCbm5sTzZNZ1QyU2sxZ2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iZDYwZDctOTZmZC00MTI4LThiOGIt
ZDdlMjg3ZDg2ZmNlLzEvQXVYdVA5c1dsVFZCbm5sTzZNZ1QyU2sxZ2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iZDYwZDctOTZmZC00MTI4LThiOGItZDdlMjg3ZDg2ZmNl
LzEvQXVYdVA5c1dsVFZCbm5sTzZNZ1QyU2sxZ2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB/k127q
4sh7lXRqRCzYQcN9LpcfbLb4aTcGvMQoOzMfi7v3xPpanAH0yxuUqbqxs/bQ2C5h
B+8eetNVaSD6EmBvfgAj42BafMWXF7SoQaxEQM1CaSw3c2v4EPWfaKtVoAno+Alm
rExCUgCaP3b/LZX+5BKcCVoxNwlrvD5zTJLbEVKqUN7YI0wC0IQbETxolckMjRHw
rEholgEFQFK84H2F/NePhYIIY7zDOP4ZMiyqy/Zt6RbiVlY2CuaVwDAEnvzC20Rh
0JcY8veTFRHv3l0vAg1pgGbMVbOqxhSAb8pBED8cLqMCGwNnup6rK+WOM0l+p4o9
xaU6YbHP20iO3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:18:52 2026 by rpki-client