Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
File:                     ahjtHt_p75yYdyAyDp28ketQWa0.mft (raw, json)
Hash identifier:          wbSAoBi1xZ3VxebzHlbxc5y55R/OEVhCqB3zvuq6QME=
Subject key identifier:   6E:C8:35:B4:E6:27:4F:8C:D7:FE:F8:8B:38:8E:CB:B7:93:6F:08:37
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Certificate issuer:       /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial:       01A108B8B5B140EDD3F7E3B50E1A522513EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
Manifest number:          0259
Signing time:             Sun 04 Oct 2026 21:01:25 +0000
Manifest this update:     Sun 04 Oct 2026 21:01:25 +0000
Manifest next update:     Mon 05 Oct 2026 21:01:25 +0000
Files and hashes:         1: ahjtHt_p75yYdyAyDp28ketQWa0.crl (hash: Ga38racCI34vTA/VuJJFV1w4llkHvcfGh+YFPJxXbFg=)
                          2: cVgf6zYHcxsLW9bXFfBT2wbbXtY.asa (hash: e9U9Ggfq0Q0bxFuYqJQPA4Kvtu4sRsMsGLECB9T3Dnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:b8:b5:b1:40:ed:d3:f7:e3:b5:0e:1a:52:25:13:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
        Validity
            Not Before: Oct  4 21:01:25 2026 GMT
            Not After : Oct  5 21:01:25 2026 GMT
        Subject: CN=6ec835b4e6274f8cd7fef88b388ecbb7936f0837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:f5:ae:b8:1e:eb:a2:02:bc:2c:c1:7b:a4:
                    a8:67:0c:b8:41:03:f1:19:19:c6:ed:3d:48:d0:11:
                    c2:47:05:37:82:e4:64:41:b1:c4:c8:f1:9c:b3:ca:
                    b3:8e:99:de:04:3b:9f:f7:bb:e9:09:a6:72:0a:47:
                    26:46:4d:cf:ab:3c:7d:18:fe:5d:71:28:45:ad:70:
                    ef:42:8a:ac:52:05:b3:b9:99:08:3c:c3:ee:93:33:
                    8c:26:1e:d0:92:42:83:76:0b:d2:60:9a:86:5d:f4:
                    1b:06:bb:f7:a0:18:48:d3:04:6f:5c:1f:00:57:ac:
                    19:50:d9:23:1c:04:33:aa:41:89:f1:a9:21:90:3b:
                    f3:85:5d:39:41:14:fa:ce:62:6a:ed:84:82:e5:52:
                    8c:dc:7d:91:0d:d6:d7:84:dc:52:22:7f:98:79:81:
                    7d:74:2e:7f:26:7f:d1:0a:cf:e7:c4:79:6a:b3:76:
                    08:98:b6:63:21:6a:91:4f:8b:ab:be:64:e4:e7:ff:
                    b0:e9:af:8c:c6:71:51:e4:35:70:ea:55:b8:6f:7c:
                    af:2d:da:2e:c0:81:2f:17:96:af:3d:e7:7b:87:5c:
                    82:46:6d:d9:e0:80:07:e6:e5:65:12:f8:a8:e3:eb:
                    b2:24:2c:7d:74:74:41:96:cb:a4:92:a5:b4:70:f3:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:35:B4:E6:27:4F:8C:D7:FE:F8:8B:38:8E:CB:B7:93:6F:08:37
            X509v3 Authority Key Identifier:
                keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7a:dd:ae:99:40:7a:ed:93:20:4a:49:f8:2d:87:65:27:7b:
         51:4a:14:c3:90:df:29:20:52:d6:52:5c:af:51:a2:14:7f:b8:
         bb:18:7d:da:f5:d5:11:87:a8:c5:5d:c1:7f:00:9b:9c:3b:4e:
         4e:ba:01:56:7a:a6:7f:f2:3c:90:d5:9d:24:4e:8f:9f:54:51:
         4b:d9:12:72:68:0f:31:2a:4a:52:42:bd:b0:a1:a7:cc:87:22:
         c9:7d:3d:dc:6c:6d:e7:05:bf:67:8a:e1:9f:2b:95:27:9b:43:
         9a:28:fe:68:e2:9a:f5:01:67:60:ee:d1:97:a2:9a:13:5c:6c:
         75:d8:0d:e8:36:20:55:16:a2:4b:e4:fc:1f:1c:92:4e:a0:6c:
         91:58:c2:b6:88:d1:f7:3e:1c:1f:a3:0b:84:74:92:e4:73:02:
         58:a5:cd:ae:7c:5f:74:00:d6:03:0a:2b:25:3a:26:d3:05:51:
         f9:97:6a:85:8b:81:d5:42:f9:99:5c:c6:4e:61:53:c0:24:9f:
         56:a5:a4:2c:4a:90:7c:de:76:e4:c8:50:50:6c:3a:af:fb:79:
         ea:97:1e:0f:75:75:33:8e:65:30:60:a9:f4:b7:53:28:c9:1c:
         68:57:8b:f8:bf:65:a3:cb:89:47:7e:b9:3b:2a:9b:de:eb:d7:
         5c:1a:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:42:16 2026 by rpki-client