Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File:                     Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier:          sAgTGBPvhGCzh7qvGogFbXF+EMiTjQZgV8EOentwpZY=
Subject key identifier:   7C:CB:F1:A7:D5:D9:19:67:4E:94:D7:CF:6E:0C:05:2C:E1:C6:59:B3
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       019E1F1135379C95B806201F0FC450BDF3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number:          067F
Signing time:             Wed 13 May 2026 02:01:21 +0000
Manifest this update:     Wed 13 May 2026 02:01:21 +0000
Manifest next update:     Thu 14 May 2026 02:01:21 +0000
Files and hashes:         1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: D5F8Lz0VYOcn7P/6m9I7+SZz/m/kmZzuzrkR47beIxw=)
                          2: hOzUFEchirVSZu4kGiThKl20Lag.roa (hash: H5zzg9d1gpHKYOjHoQCkEIEH4mlnH12RrDwh03hHnuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:35:37:9c:95:b8:06:20:1f:0f:c4:50:bd:f3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: May 13 02:01:21 2026 GMT
            Not After : May 14 02:01:21 2026 GMT
        Subject: CN=7ccbf1a7d5d919674e94d7cf6e0c052ce1c659b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:a5:c6:4f:d7:f8:9b:68:3a:4b:5c:5d:6d:
                    86:60:0c:d2:01:a6:30:9a:a9:82:38:a6:84:13:7e:
                    06:5e:66:34:f6:05:6c:79:13:a0:e8:5c:90:c7:ed:
                    ec:12:39:48:98:88:1e:5d:b8:eb:37:fe:b2:8c:04:
                    20:30:b5:33:c8:64:02:fc:ea:90:ff:ed:4d:83:88:
                    a6:a1:dc:13:31:59:11:6e:1a:8d:f7:2a:20:e4:44:
                    5d:f1:d7:e8:88:82:47:4d:fc:f1:31:32:ef:53:22:
                    11:71:c6:9c:53:8d:cc:95:ac:41:82:d1:51:1f:28:
                    e8:77:aa:a2:72:2f:77:a4:ed:c7:56:c0:52:d4:2b:
                    4f:21:3f:21:48:92:9b:6d:f3:7b:de:ae:fa:13:7d:
                    8f:0a:86:7c:9c:1a:58:cd:52:22:7d:59:fa:9b:34:
                    05:e8:94:b1:8b:6f:c0:31:44:5b:d6:74:2f:fb:88:
                    6f:1b:39:5f:e5:f8:25:76:9a:68:32:90:e7:7c:5a:
                    e6:5e:76:47:f1:88:ef:00:a9:9f:23:5a:75:ca:9f:
                    9f:90:a2:e0:6c:17:de:19:c6:cf:71:aa:a0:d9:4c:
                    37:66:6b:26:ce:ed:da:6a:27:d6:b2:7d:6e:ba:fd:
                    42:42:77:d1:f7:4a:d0:50:07:51:ce:ea:45:f0:d2:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:F1:A7:D5:D9:19:67:4E:94:D7:CF:6E:0C:05:2C:E1:C6:59:B3
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:b1:bf:3c:2c:e1:81:be:fd:e4:cc:13:6f:03:e3:66:65:
         5e:d3:62:79:74:9c:d1:98:43:c1:40:ed:10:aa:ed:9a:69:35:
         46:3e:10:90:84:52:48:11:26:b1:d9:14:22:45:83:17:b5:41:
         c3:62:fd:13:b9:c0:84:97:73:3b:52:b1:e9:29:e4:d2:16:77:
         3f:e1:37:e6:04:2a:a5:13:64:b1:13:0e:82:9d:69:1b:d3:ac:
         3f:b7:ba:4c:ec:ae:73:40:35:bb:fd:11:3f:28:a9:bc:66:f3:
         9d:b1:56:8e:52:54:6b:f3:ba:6a:f8:d8:dc:77:6c:57:fd:53:
         2b:eb:7c:6e:ef:20:04:b3:e0:89:46:1f:df:c6:3f:7a:46:d4:
         1a:f5:da:3d:04:a7:79:50:b4:b4:3c:85:86:2b:f0:13:ba:31:
         fb:b7:bb:ab:50:19:e1:39:e2:a2:f2:54:9a:38:da:4c:1f:57:
         c8:c3:1e:d1:ba:54:06:62:70:2a:03:f9:4c:8f:4b:db:e1:c3:
         6e:73:09:c6:aa:d1:fa:a8:e1:7f:cc:e4:b9:f9:ca:99:aa:d3:
         e1:40:52:0b:83:f8:25:b8:70:ad:8b:b5:fd:1a:ac:27:a9:29:
         7b:8d:fc:c8:b4:09:16:4f:02:98:1a:2f:0f:f4:04:be:91:a9:
         60:7c:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:47 2026 by rpki-client