Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File:                     AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier:          atZ7drYznVVf6yLyzPx+7y71ZH96kopJd3fulwoa/0M=
Subject key identifier:   D5:6C:19:79:77:45:E7:AF:32:F5:1B:BA:06:92:D7:75:64:C2:4B:F0
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer:       /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial:       019E1C46EC3599167B9E4652B802F19F5455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number:          1901
Signing time:             Tue 12 May 2026 13:01:10 +0000
Manifest this update:     Tue 12 May 2026 13:01:10 +0000
Manifest next update:     Wed 13 May 2026 13:01:10 +0000
Files and hashes:         1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: dL7xz5FG/Wdb+6rvIfEBnYIfjmW1PlpNiXQZviCS8Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:ec:35:99:16:7b:9e:46:52:b8:02:f1:9f:54:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
        Validity
            Not Before: May 12 13:01:10 2026 GMT
            Not After : May 13 13:01:10 2026 GMT
        Subject: CN=d56c19797745e7af32f51bba0692d77564c24bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:e7:7e:2e:08:38:90:dd:6c:4c:8b:58:38:
                    25:e3:6a:ab:c1:41:f8:b7:ed:3e:8d:ed:14:35:e8:
                    f4:0b:8e:92:67:9d:23:b6:38:83:0d:02:36:ca:fe:
                    b2:bc:24:b9:19:50:57:4f:cd:f1:bc:3f:2b:93:1b:
                    35:63:8c:19:7e:21:56:f0:fe:63:99:fa:4f:06:4e:
                    27:fb:29:85:4b:3d:5b:c2:a1:f4:2e:97:1e:ea:f0:
                    50:ed:87:7e:8a:8f:1d:42:1a:69:d8:d1:18:27:64:
                    75:61:e3:99:75:b8:37:63:90:94:d9:98:1c:4f:a0:
                    bd:d3:53:b0:72:01:75:e8:6d:34:37:4c:b4:b8:2c:
                    95:97:6c:9a:67:2c:63:a3:4d:91:21:e3:57:6a:45:
                    0c:66:c4:23:bd:0c:cf:45:e5:31:27:6e:d3:66:7d:
                    fd:f3:11:b9:e0:eb:c4:84:3f:7d:98:7b:e0:a1:24:
                    d9:1a:8c:d5:30:1e:29:35:1c:52:98:ea:cf:51:83:
                    e9:9a:70:d9:4d:ed:eb:ea:29:77:58:d7:9f:78:63:
                    ae:65:e3:78:68:16:55:10:fa:66:b6:73:f8:df:12:
                    c2:9e:b6:d6:88:b3:3c:76:83:3a:ae:35:87:fc:bd:
                    a1:25:a1:8e:02:dc:7b:ad:90:49:2d:df:88:8e:ca:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6C:19:79:77:45:E7:AF:32:F5:1B:BA:06:92:D7:75:64:C2:4B:F0
            X509v3 Authority Key Identifier:
                keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:48:76:08:a1:88:ed:e6:60:89:41:7e:c9:f8:af:58:b3:f8:
         fc:e1:b4:03:19:9e:ee:0a:9c:c9:d5:16:40:31:63:93:40:17:
         49:17:23:78:41:16:0d:2d:52:d2:c0:0d:c7:56:8a:10:64:1d:
         aa:2b:5d:05:fa:3c:9e:05:d7:24:32:1b:34:1f:cc:f8:7f:ab:
         56:78:59:5a:14:c2:f8:20:93:39:15:2f:7c:8c:ea:03:d1:1b:
         68:0d:d1:ac:8c:f8:16:bd:93:9b:21:d9:7d:75:50:81:5e:65:
         96:56:c7:f8:04:c1:05:b2:d3:c5:ec:da:33:33:de:ce:d1:17:
         d6:2e:86:d7:f1:69:1b:57:25:ff:6c:07:1a:75:4b:eb:14:17:
         a1:37:f0:a1:82:ef:3f:ef:45:0b:24:3b:29:23:c3:1a:ba:ea:
         48:55:61:3f:f5:fa:bf:09:39:55:09:b7:ce:2e:f8:05:ab:ff:
         9a:10:d5:f7:81:4a:2b:8c:ae:b4:e4:e2:cb:85:31:93:67:5d:
         00:87:b6:8f:31:34:aa:fb:57:70:a4:16:74:d2:58:6c:36:52:
         ef:a5:07:ca:35:18:fa:dc:78:83:db:5f:75:4b:3b:05:f8:31:
         f1:9d:aa:31:fb:c8:b3:08:d6:3e:4c:96:fc:71:34:33:23:17:
         4b:9b:3c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRuw1mRZ7nkZSuALxn1RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMTY5MmE2OTUwMTdmYjVjNGJmOGMyMzgwNzhmMzAzZDhm
YmYwODcwHhcNMjYwNTEyMTMwMTEwWhcNMjYwNTEzMTMwMTEwWjAzMTEwLwYDVQQD
EyhkNTZjMTk3OTc3NDVlN2FmMzJmNTFiYmEwNjkyZDc3NTY0YzI0YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlbnfi4IOJDdbEyLWDgl42qrwUH4
t+0+je0UNej0C46SZ50jtjiDDQI2yv6yvCS5GVBXT83xvD8rkxs1Y4wZfiFW8P5j
mfpPBk4n+ymFSz1bwqH0Lpce6vBQ7Yd+io8dQhpp2NEYJ2R1YeOZdbg3Y5CU2Zgc
T6C901OwcgF16G00N0y0uCyVl2yaZyxjo02RIeNXakUMZsQjvQzPReUxJ27TZn39
8xG54OvEhD99mHvgoSTZGozVMB4pNRxSmOrPUYPpmnDZTe3r6il3WNefeGOuZeN4
aBZVEPpmtnP43xLCnrbWiLM8doM6rjWH/L2hJaGOAtx7rZBJLd+IjspgvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVsGXl3ReevMvUbugaS13VkwkvwMB8GA1UdIwQY
MBaAFAIWkqaVAX+1xL+MI4B48wPY+/CHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUt
NDhkMjVjMGE0OTVmLzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUtNDhkMjVjMGE0OTVm
LzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0h2CKGI
7eZgiUF+yfivWLP4/OG0Axme7gqcydUWQDFjk0AXSRcjeEEWDS1S0sANx1aKEGQd
qitdBfo8ngXXJDIbNB/M+H+rVnhZWhTC+CCTORUvfIzqA9EbaA3RrIz4Fr2TmyHZ
fXVQgV5lllbH+ATBBbLTxezaMzPeztEX1i6G1/FpG1cl/2wHGnVL6xQXoTfwoYLv
P+9FCyQ7KSPDGrrqSFVhP/X6vwk5VQm3zi74Bav/mhDV94FKK4yutOTiy4Uxk2dd
AIe2jzE0qvtXcKQWdNJYbDZS76UHyjUY+tx4g9tfdUs7Bfgx8Z2qMfvIswjWPkyW
/HE0MyMXS5s8ww==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:06 2026 by rpki-client