Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
File:                     AURLjJMub2XrHJyZmhreW9iskRY.mft (raw, json)
Hash identifier:          8rzVXpO8e7BAMBVGxcdbD8ybosHBDGQ8nCMBNdsWo3s=
Subject key identifier:   0A:E6:42:44:3E:DE:40:BA:85:A7:C6:62:FE:33:98:99:EE:1E:94:D6
Authority key identifier: 01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16
Certificate issuer:       /CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
Certificate serial:       01A1DF151F1FC1D66209B97006AC7370E4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
Manifest number:          01DC
Signing time:             Sun 15 Nov 2026 12:01:05 +0000
Manifest this update:     Sun 15 Nov 2026 12:01:05 +0000
Manifest next update:     Mon 16 Nov 2026 12:01:05 +0000
Files and hashes:         1: AURLjJMub2XrHJyZmhreW9iskRY.crl (hash: u2LYfJ8ZLGTFKceglj0z3HHYXx48F9EA3HoZim0dvNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:15:1f:1f:c1:d6:62:09:b9:70:06:ac:73:70:e4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01444b8c932e6f65eb1c9c999a1ade5bd8ac9116
        Validity
            Not Before: Nov 15 12:01:05 2026 GMT
            Not After : Nov 16 12:01:05 2026 GMT
        Subject: CN=0ae642443ede40ba85a7c662fe339899ee1e94d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:0c:9c:d7:55:0d:7b:1e:ac:8e:02:85:88:
                    f8:07:12:ed:dc:36:7b:ac:db:5c:eb:db:74:49:df:
                    9f:73:6f:f8:7e:4b:b6:f8:e2:c2:81:79:e0:b6:4b:
                    94:a6:07:bc:7a:02:d5:fe:e4:56:67:ef:d5:22:22:
                    40:d7:98:7b:fa:07:a2:af:c7:8c:39:b0:4a:10:57:
                    13:1c:e8:51:33:57:c8:8d:af:8c:3b:69:42:97:ee:
                    82:ce:d2:28:e2:98:08:74:3c:08:05:9b:a2:0b:90:
                    5c:da:bb:e2:1e:35:f4:a6:ef:a6:bd:a0:bf:36:1e:
                    b3:3e:0f:e9:b5:aa:6a:ff:9e:54:8c:20:8f:ac:e1:
                    d7:b8:90:63:39:9f:ad:c2:53:68:a4:dd:ec:1e:23:
                    48:41:fb:56:a7:06:18:92:d9:33:c1:58:d7:73:02:
                    14:d5:89:2b:97:e4:40:2d:5b:2c:dc:a0:ec:26:62:
                    bc:f2:03:56:04:d1:a8:e2:96:62:1c:c3:0c:c3:9a:
                    29:8c:5b:28:01:76:3c:47:5e:1d:ea:ea:43:cc:3d:
                    6b:b0:27:b5:16:91:72:6d:5c:ec:82:19:93:ec:35:
                    b9:a8:da:d7:c4:64:9a:43:ba:aa:34:d1:e3:22:20:
                    bf:0a:d8:41:38:4d:20:ee:6b:5b:14:80:f1:ca:2c:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:42:44:3E:DE:40:BA:85:A7:C6:62:FE:33:98:99:EE:1E:94:D6
            X509v3 Authority Key Identifier:
                keyid:01:44:4B:8C:93:2E:6F:65:EB:1C:9C:99:9A:1A:DE:5B:D8:AC:91:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AURLjJMub2XrHJyZmhreW9iskRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/419865-916e-4b24-893d-6fa730180772/1/AURLjJMub2XrHJyZmhreW9iskRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:a6:48:39:7d:9d:a6:10:d9:56:df:f1:ee:f4:ca:3a:bc:
         2a:7c:6a:1b:c1:20:76:db:07:50:26:f4:b7:33:cb:84:18:b0:
         28:e7:6f:09:88:d5:86:d7:0b:f3:c8:55:8b:90:04:8d:c2:55:
         9c:9f:77:4f:d3:7b:ad:b4:90:be:f7:21:18:2a:08:de:2b:30:
         d1:25:51:5f:f9:a5:ed:ee:dd:81:b7:fd:2b:01:25:03:75:66:
         df:76:5c:32:d1:a9:97:5b:b6:6a:6d:c2:08:c7:de:51:77:86:
         1b:28:e9:cc:c4:04:57:ba:08:93:ab:80:f9:35:02:6f:34:c9:
         7d:6e:9a:39:3e:d5:57:ee:e3:7a:85:75:8e:ec:31:ff:15:f7:
         71:6d:e5:29:ac:fe:e4:36:2c:b7:7f:b9:ed:67:ec:ea:a2:cf:
         6a:0c:5b:3f:43:50:fa:f1:e6:04:76:28:82:c1:db:80:63:56:
         fc:d7:72:47:5a:dd:ae:32:04:62:ae:a5:60:c9:93:49:82:ca:
         97:df:33:c3:c2:5d:22:f6:78:cb:37:7b:72:c0:69:27:fb:30:
         57:75:e1:8c:4f:0b:c6:a0:f8:f4:f3:a4:6e:26:4e:84:2f:3d:
         05:b6:45:89:76:ea:00:dd:4e:f7:d7:08:5d:e3:a1:dc:f0:37:
         19:86:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:52:31 2026 by rpki-client