Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File:                     AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier:          mtFw+isl+kcLPy/lV/bddelpXHjmhwAhiyvjc7ou3ko=
Subject key identifier:   A0:B0:5F:35:3D:71:74:86:03:2B:84:B5:B7:A8:EC:FF:72:F1:AA:9C
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer:       /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial:       019CAAC6E1C7D5DC6C27EE58581FDDF41B09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number:          0D82
Signing time:             Sun 01 Mar 2026 19:01:26 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:26 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:26 +0000
Files and hashes:         1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: 1w4TE1Ciep0v3JBqp7wHbbGOplOn7Giyn9DxinL6T+Q=)
                          2: OoyL6bjrpv7zlvqenv5ZgNB0gGE.roa (hash: Tm9hWa2oiDIAZqLLnYyHl8n9xWir4VblcdnhJ8WlcHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:e1:c7:d5:dc:6c:27:ee:58:58:1f:dd:f4:1b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
        Validity
            Not Before: Mar  1 19:01:26 2026 GMT
            Not After : Mar  2 19:01:26 2026 GMT
        Subject: CN=a0b05f353d717486032b84b5b7a8ecff72f1aa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:28:20:2e:42:7e:b6:73:26:6d:3f:40:d1:
                    48:06:09:56:37:bd:c4:b8:cd:5b:f4:88:63:75:99:
                    a2:b8:c8:cd:1a:87:14:75:00:36:8b:fd:5c:99:28:
                    b1:d7:36:28:a9:55:c9:62:9c:dc:84:9d:5a:2e:a5:
                    46:79:6f:9b:6a:d3:a8:32:12:23:75:ea:75:81:25:
                    53:f9:ad:64:12:97:f5:d6:04:06:a6:d9:91:ce:0f:
                    8f:73:7c:f0:bf:fd:9c:63:6e:44:c0:75:58:64:75:
                    26:60:0a:42:93:ed:7a:05:82:38:de:0f:87:58:a2:
                    a3:a1:7e:10:a7:45:e9:f3:d4:e0:9f:eb:d3:6e:30:
                    88:90:0a:ca:41:e1:14:76:df:56:38:e2:79:ce:11:
                    5e:e8:52:da:43:b2:05:a9:6e:c6:32:49:c8:8b:d8:
                    bb:8b:f0:05:45:68:4e:0c:73:e7:76:a5:33:e3:0f:
                    ac:20:d4:bd:00:3f:9e:99:a5:c8:fb:14:e8:05:4e:
                    ff:9e:79:a5:28:e0:e6:c6:1c:c0:36:04:57:2c:19:
                    43:c0:60:df:ba:28:f5:19:5c:30:25:21:dd:14:97:
                    ce:0e:9b:f3:a6:57:9e:8d:a0:4b:76:52:5e:bb:0b:
                    a9:ea:ad:09:5f:69:97:3c:91:50:64:89:05:59:a3:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B0:5F:35:3D:71:74:86:03:2B:84:B5:B7:A8:EC:FF:72:F1:AA:9C
            X509v3 Authority Key Identifier:
                keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:98:26:07:5f:89:6d:28:b0:5d:02:04:be:b4:91:1d:e9:32:
         4a:e9:89:a8:9e:bd:29:b8:0e:92:67:f8:2f:99:d6:19:da:70:
         4a:56:6a:69:a5:ac:b4:eb:34:5f:ad:ef:e2:3c:43:d1:87:dd:
         8f:30:2c:42:23:e1:20:c4:23:ad:0f:2d:0d:0b:d0:e9:a6:5b:
         1b:d0:f2:98:58:58:e0:65:b9:13:d0:88:b3:d4:15:ee:85:b8:
         91:21:d2:b3:d8:14:d7:3e:da:e0:87:9e:04:b5:fc:62:c5:8c:
         be:bc:9e:68:40:b3:8d:ad:99:2e:4d:08:36:5d:7e:9c:b1:b3:
         bc:0c:b1:63:18:29:f6:37:f5:7c:fa:e2:66:c0:ca:71:63:a8:
         5f:91:33:0e:00:3d:75:a9:c3:72:c3:c8:3d:93:26:c5:e4:11:
         d6:58:df:49:0d:5a:fb:d7:51:13:eb:08:42:a3:08:67:e0:33:
         f1:aa:df:0f:00:f6:bc:ba:73:77:d8:24:6b:1c:01:f6:a1:71:
         6a:cd:ee:92:f2:0c:9c:31:64:08:9f:e5:c3:bb:3e:f5:a0:d7:
         66:a7:15:c4:42:96:4c:9f:d1:9c:98:9f:49:1e:5f:b4:31:b3:
         90:b8:ea:b3:1e:ed:86:32:97:da:36:1c:73:2b:3f:21:db:82:
         38:71:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:50 2026 by rpki-client