Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          e8fGBY5fye9c8WoqfCpNmCkX5JITynHgEycWK9bDJJY=
Subject key identifier:   36:5F:CD:17:C4:31:53:C7:81:42:04:02:8A:5F:3B:06:8B:1B:93:62
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       01A0D383957DC92D846573E62317905FD8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          1A69
Signing time:             Thu 24 Sep 2026 13:03:31 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:31 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:31 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: 1GcxDnFEp0Q7QZ9dc3CHM86Eg6ArEHo+PBSQ9LhGwTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:95:7d:c9:2d:84:65:73:e6:23:17:90:5f:d8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: Sep 24 13:03:31 2026 GMT
            Not After : Sep 25 13:03:31 2026 GMT
        Subject: CN=365fcd17c43153c7814204028a5f3b068b1b9362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:aa:f9:51:82:e4:58:9b:8d:cb:aa:2f:8a:
                    80:76:af:68:55:77:b5:0c:c4:ed:3b:d2:e1:44:6c:
                    83:2c:bd:a5:13:da:36:1d:5d:cd:cb:1c:82:cb:9c:
                    55:75:14:a1:31:3e:43:45:8e:5e:fa:6c:fa:25:9b:
                    49:40:4c:11:ab:28:ed:44:7c:97:ad:f9:82:2d:2e:
                    48:10:5b:2a:0d:98:70:dc:73:2a:4c:07:55:b4:4b:
                    73:46:8e:e4:07:34:ab:f5:24:4e:18:a9:f2:a5:36:
                    4b:0f:4f:35:fd:53:14:3a:1c:77:66:c4:60:74:a4:
                    22:26:51:81:3b:2c:00:47:2c:1e:26:90:75:01:31:
                    87:2e:74:12:33:59:d7:1a:3c:4f:d8:2d:49:d7:03:
                    e0:98:1e:b2:1b:1c:46:7d:76:26:22:60:fe:d7:f6:
                    e1:e1:06:58:0d:a1:05:99:24:16:53:75:06:c1:19:
                    43:ff:60:3c:9b:99:50:a3:02:c1:d0:97:fa:50:65:
                    39:14:ed:a4:21:7f:20:da:6b:a0:31:a8:75:26:a4:
                    d9:a4:6d:32:67:c6:a8:f1:71:a9:79:7f:ac:4a:c8:
                    46:4b:9f:74:0c:51:9f:f6:07:19:64:a7:d0:39:ca:
                    99:51:ac:0e:24:f8:53:20:05:ef:10:e1:29:4c:d2:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:CD:17:C4:31:53:C7:81:42:04:02:8A:5F:3B:06:8B:1B:93:62
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8f:ae:30:1f:f9:17:f9:37:48:31:af:5e:39:79:b9:af:47:
         b2:7c:7a:bf:78:4d:34:14:a7:a2:f5:16:09:81:1a:5f:ee:19:
         03:0d:b5:14:bb:90:5a:f8:d7:d2:b4:95:9e:39:9e:d6:33:ba:
         5d:0e:3c:ef:f1:65:d1:f8:55:d2:05:eb:06:0c:ad:e9:d5:9c:
         ce:fa:a3:91:98:fd:54:7c:62:3f:b8:0f:82:0a:d2:db:3f:33:
         c4:65:5e:21:be:d7:cc:e0:13:61:7a:9b:dd:34:b2:14:13:ca:
         9b:54:d5:4f:b7:11:6d:40:a6:ee:25:0e:fe:d0:8e:b4:84:8d:
         0e:46:ad:13:77:c0:73:04:b7:72:18:d4:f2:d5:89:ce:f1:30:
         8f:62:c9:2a:1d:d2:09:e6:24:2d:eb:dc:a7:22:3e:04:81:78:
         94:b1:57:f0:1d:55:e9:97:f0:ef:64:e3:73:71:e1:7d:32:41:
         6a:2d:fe:e5:b4:cc:ab:45:52:3a:39:2a:84:26:2b:c3:13:46:
         40:e7:a3:ef:b0:64:c1:51:77:bc:84:35:71:73:6d:ce:33:c6:
         d2:dd:f4:b5:8a:80:0f:13:f5:5c:29:76:77:d6:72:fe:6a:54:
         cf:50:fe:71:3a:e0:5a:5b:4a:66:7b:ff:15:2c:78:ae:24:f8:
         42:b3:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:59:26 2026 by rpki-client