Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File:                     AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier:          cOKhF4s6gZhNOc/CqY+XkcY1Hnm9iTNJdNe9Ipu6RKo=
Subject key identifier:   5C:D5:63:38:1A:AD:D9:59:7D:A4:84:19:D5:65:45:75:6E:4D:00:B1
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer:       /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial:       01A0E73F8058AB94829AF43F644F9DDDF63E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number:          04E9
Signing time:             Mon 28 Sep 2026 09:01:33 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:33 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:33 +0000
Files and hashes:         1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: +Jwn0yaOXzDuUtYT7NMyLDo+N27RsZmqbu5G8xjyFMM=)
                          2: sh8M4KLHuLakVIud2TbaHMeCEjw.roa (hash: vWKdYFJEWQq1vzlyAwLNl/BBt4KHaNS4rv484R5g4EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:80:58:ab:94:82:9a:f4:3f:64:4f:9d:dd:f6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
        Validity
            Not Before: Sep 28 09:01:33 2026 GMT
            Not After : Sep 29 09:01:33 2026 GMT
        Subject: CN=5cd563381aadd9597da48419d56545756e4d00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:58:91:7a:7d:84:72:10:cb:3a:b4:2f:56:
                    11:74:8e:3a:41:a5:f6:0b:34:2d:ca:48:5a:1a:57:
                    66:11:f5:51:35:9c:67:50:2b:9c:47:94:2b:2e:9c:
                    f1:9a:e3:27:09:8c:23:32:6f:83:9f:6e:34:c8:a8:
                    39:ec:81:b9:ab:75:0e:b6:51:2c:83:a7:f9:b0:89:
                    da:c7:e2:12:90:4b:dd:7b:92:e8:ed:6b:dc:07:01:
                    17:d1:e8:dc:34:e4:74:bb:d3:a2:e2:a1:48:2f:34:
                    dc:d0:90:e1:b4:5a:2d:8f:a2:e6:6a:0b:19:10:23:
                    37:5f:3a:93:18:38:5b:c7:4d:96:3b:f3:33:5a:42:
                    c8:96:23:fb:57:c8:5e:7c:64:e6:fa:f1:66:35:33:
                    31:65:4a:14:79:68:7a:36:55:52:42:e1:67:0c:5a:
                    0d:b6:3f:76:da:ed:30:79:82:e8:a9:96:51:27:e8:
                    73:7c:f4:d9:d6:13:d3:ce:fc:bc:4e:bb:f7:60:c0:
                    b3:d8:91:b3:98:4f:30:28:32:40:8e:d2:f2:48:ad:
                    97:d6:cd:29:7d:10:2b:59:41:fc:34:f6:15:65:6a:
                    c8:9a:42:8f:d1:df:49:f7:55:62:af:25:af:72:c9:
                    19:b5:0f:d0:15:3a:b5:ad:68:77:bc:bf:a6:78:13:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D5:63:38:1A:AD:D9:59:7D:A4:84:19:D5:65:45:75:6E:4D:00:B1
            X509v3 Authority Key Identifier:
                keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:18:eb:20:12:05:6b:60:41:5c:35:05:bb:66:ea:09:09:
         5a:38:5e:25:47:88:21:be:a5:4d:cc:b9:3f:82:29:79:1e:f8:
         ca:21:9a:37:7f:7f:02:62:40:63:1a:4a:41:ca:6e:34:60:1d:
         a3:20:b9:93:45:d2:1a:26:23:f6:e7:4e:6e:d0:6f:cd:76:e0:
         cb:d9:74:8a:e3:bf:20:58:07:f7:1c:6b:c9:28:6c:e7:4d:46:
         9d:31:07:0a:32:b7:f0:68:a2:ae:47:b6:7c:f8:d0:c9:57:11:
         70:6b:44:21:8a:74:90:bd:eb:b5:a2:3c:94:4f:ff:44:06:10:
         ad:2d:32:c8:da:68:0b:ef:65:d9:56:01:61:46:cb:14:a4:c9:
         ef:c1:ac:43:c3:ed:1e:83:2d:97:e3:1b:9a:0c:2c:c7:40:93:
         a0:db:73:d0:5b:eb:18:58:86:0e:50:f5:51:34:6e:d2:42:ff:
         41:7c:61:12:0d:21:9e:5b:5d:c8:20:f5:d3:86:c9:b2:d9:c5:
         a6:c3:32:cf:2e:a1:cb:be:16:88:09:07:26:5b:5c:ce:40:25:
         ea:33:42:14:bb:65:df:54:a6:3f:98:3f:86:01:80:24:f3:f8:
         dd:26:36:69:f7:2d:98:03:e6:d9:c5:55:fa:58:11:68:26:09:
         70:8e:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:49:31 2026 by rpki-client