Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File:                     akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier:          sqcfPCX2XCxcJC+RVdrxWkEW7yOFHM0xUKTDD6XJ/xE=
Subject key identifier:   C4:6A:BE:45:6F:93:BC:11:2F:93:72:5B:5C:C5:36:22:7E:3D:76:E5
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer:       /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial:       019F943764BB10F708BBF18A409FC708FFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 13:01:25 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:25 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:25 +0000
Files and hashes:         1: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: TwbaSsxzunktFhPXk83rqYy67UcQhXzgu0XyLAnkvUc=)
                          2: kQ4krfBNFrAm-Gpj-NcPo1I8HJU.roa (hash: xcXCXacGDJEJdBJRjIljHRys5jK6kgJsyEmuOcySy58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:64:bb:10:f7:08:bb:f1:8a:40:9f:c7:08:ff:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
        Validity
            Not Before: Jul 24 13:01:25 2026 GMT
            Not After : Jul 25 13:01:25 2026 GMT
        Subject: CN=c46abe456f93bc112f93725b5cc536227e3d76e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:8f:e0:6d:9c:42:60:8c:5b:08:34:7c:6f:
                    6f:c2:50:76:5b:64:ec:16:30:16:04:ac:04:73:a2:
                    ac:de:31:2f:d3:49:c0:3b:85:fe:15:3b:db:b9:af:
                    0e:e2:c5:2c:b7:b8:44:81:9b:67:2f:75:6c:4f:d4:
                    37:e7:a5:b5:cf:eb:1c:7e:07:bb:7f:57:94:e1:42:
                    25:3d:f0:3c:dd:1c:bd:a5:cf:e8:94:e8:48:d5:80:
                    1a:bf:0d:ce:76:6f:71:a7:ac:b5:f8:27:5a:56:70:
                    2a:f4:11:8c:8a:f2:a3:1c:95:52:04:4a:5a:cc:7d:
                    f5:d7:87:57:8a:b9:de:be:3c:d8:a0:1e:d5:5e:31:
                    da:61:66:cd:99:76:b6:9c:45:5e:32:9c:05:8b:0e:
                    95:25:72:6e:ff:63:6f:f1:b5:fa:6b:fd:fb:f0:dd:
                    f4:ca:2b:df:a8:50:77:84:bb:30:71:68:8b:e4:27:
                    c0:d0:01:8b:0c:b7:bf:99:47:9d:48:4f:ce:d2:df:
                    de:95:54:57:b7:34:4b:5d:bc:f3:0d:5f:63:0d:e6:
                    58:bc:00:6d:99:9e:f8:2b:b7:87:d0:fe:e0:c0:ac:
                    d9:8b:33:f2:dd:ed:14:64:7f:f1:9d:2c:3d:16:b3:
                    7b:c9:fd:6c:21:32:ab:20:b5:19:f6:49:b6:57:0a:
                    6a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:BE:45:6F:93:BC:11:2F:93:72:5B:5C:C5:36:22:7E:3D:76:E5
            X509v3 Authority Key Identifier:
                keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:81:76:d5:37:99:b1:4b:8d:52:0b:27:08:c5:f6:6b:dc:
         12:8a:6f:b0:89:23:c1:fa:c9:b2:6c:1a:eb:73:0f:59:39:23:
         c4:c6:34:58:1a:d4:f5:f5:34:d2:52:c6:05:d1:c8:cf:3f:17:
         11:2e:9f:cf:82:1c:78:2b:d0:ae:ee:85:41:a5:d8:a5:d0:2c:
         6f:2e:ef:9c:61:bf:b1:90:e3:df:11:32:cd:37:b3:4c:8a:64:
         88:0b:65:87:53:89:61:85:37:6b:c8:4f:cd:f3:07:7e:61:1f:
         4a:83:b9:e6:ca:92:a6:1d:b1:19:c0:9f:af:21:98:de:64:fa:
         74:73:d0:a5:cf:ec:f6:19:b6:74:32:27:c9:ef:f3:4b:a9:f7:
         17:8d:06:06:6d:24:83:22:a2:5d:28:4a:22:32:44:56:0b:3e:
         02:1d:f7:05:b3:09:f2:83:40:ff:e5:4d:77:f7:04:5c:65:ed:
         10:c0:6c:af:56:07:ad:cc:40:2c:4d:f2:95:6d:0b:b9:9f:5b:
         e1:fa:5e:6e:88:9d:8a:70:a7:a1:47:9d:b6:40:38:0c:9c:32:
         df:70:9c:9e:fb:a6:5f:e4:04:23:80:48:5a:c4:ba:9f:81:77:
         3b:e9:6a:9e:20:ed:9b:5c:55:7c:d9:da:61:fd:14:73:22:46:
         2f:2a:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:24 2026 by rpki-client