Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File:                     AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier:          OfMYiuLd/c/1+5Mc3RH0EHR7YarNYdgR3aOb67MyiM4=
Subject key identifier:   53:C5:1C:52:AB:D8:53:99:48:04:BC:B6:26:03:5F:4A:6C:2B:DA:6F
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer:       /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial:       019FAA50FD1E05C3CA77DF247E7711CCE7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number:          1296
Signing time:             Tue 28 Jul 2026 20:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:02 +0000
Files and hashes:         1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: fCqqkaI3mBdibBWq73fnUtCbUCujzleHy0ZfJIV4Uxc=)
                          2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:fd:1e:05:c3:ca:77:df:24:7e:77:11:cc:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
        Validity
            Not Before: Jul 28 20:01:02 2026 GMT
            Not After : Jul 29 20:01:02 2026 GMT
        Subject: CN=53c51c52abd853994804bcb626035f4a6c2bda6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:40:2f:79:b8:ce:f4:48:ab:47:d3:10:fa:
                    e3:0b:34:b6:6a:e8:a7:0a:64:43:f2:57:40:41:67:
                    88:c6:0a:71:25:0e:3e:64:94:ab:5e:69:e9:92:56:
                    7b:9e:2b:31:07:54:d3:51:0d:ac:00:a7:81:83:ac:
                    70:05:04:77:cd:4d:27:e8:c0:e0:29:b4:64:4b:96:
                    be:d5:0b:b9:37:f0:f3:03:9f:a0:c3:4c:62:83:81:
                    21:29:cd:56:20:e2:d0:95:25:58:85:95:ca:12:5f:
                    cf:6f:52:fb:dc:17:42:0d:1e:2d:a5:75:f3:73:30:
                    5f:a5:6c:34:5b:ef:12:d2:95:48:9b:15:e3:a2:6d:
                    e7:a7:d6:10:53:03:88:91:e5:c3:bb:04:be:22:f0:
                    da:1b:4f:62:ce:58:b1:b7:79:8f:d1:aa:15:92:22:
                    16:6c:25:2f:2d:9a:60:52:75:3f:95:cd:3f:c6:b2:
                    0a:b8:0c:fd:05:6b:ef:da:0b:77:29:28:8b:58:e0:
                    d3:6e:fa:54:d3:8a:3f:40:bd:99:b9:9f:cf:eb:69:
                    10:5f:25:42:87:d8:73:aa:2f:e5:46:94:6f:ae:56:
                    af:7d:fd:c3:e2:9d:21:41:10:88:dc:41:54:34:9d:
                    26:0d:27:b3:ce:19:04:3e:d7:00:12:f3:4a:c0:08:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:1C:52:AB:D8:53:99:48:04:BC:B6:26:03:5F:4A:6C:2B:DA:6F
            X509v3 Authority Key Identifier:
                keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:d3:e1:4b:23:5f:63:38:67:02:57:78:3c:44:8d:84:08:
         51:64:63:c4:49:60:1d:d3:e5:8c:4d:6d:15:7d:be:d6:be:c3:
         8b:4e:3f:dc:a3:31:c0:07:6a:da:ba:8c:70:47:8b:eb:ae:2d:
         47:15:8a:0c:de:02:11:05:1e:4c:dd:cf:c8:4d:32:dd:09:2d:
         1c:bb:cb:2a:13:75:83:d7:32:a8:b7:00:f8:52:43:d2:9a:b7:
         d5:58:27:53:35:8d:6b:b3:6a:a6:9f:f4:8b:f0:3b:fd:f8:ec:
         66:7c:a9:b8:dc:41:cd:3e:10:55:45:5e:b0:cf:9f:70:3c:30:
         a7:48:da:20:b9:66:eb:eb:6a:d0:93:52:ff:1d:6d:18:e3:bd:
         35:f7:3c:58:ee:ca:0b:5d:44:4a:00:fa:67:cc:02:30:f3:97:
         53:0c:81:ec:c3:bb:8d:a7:77:71:af:61:0e:c7:0b:88:3d:7c:
         ae:ff:b4:5a:c7:f9:98:5f:c9:53:27:54:fd:1c:5f:7c:b0:b8:
         5c:89:f7:f0:e3:ad:7f:7f:7e:e4:b9:e2:af:0a:55:1e:78:da:
         11:81:9a:a3:da:7e:59:19:c0:85:4c:99:9f:57:64:7d:45:56:
         f7:18:ca:85:49:4d:23:5e:82:34:ba:b2:d3:4a:20:7d:bf:94:
         1a:a6:f0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUP0eBcPKd98kfncRzOfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5
YjRmODYwHhcNMjYwNzI4MjAwMTAyWhcNMjYwNzI5MjAwMTAyWjAzMTEwLwYDVQQD
Eyg1M2M1MWM1MmFiZDg1Mzk5NDgwNGJjYjYyNjAzNWY0YTZjMmJkYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu1AL3m4zvRIq0fTEPrjCzS2auin
CmRD8ldAQWeIxgpxJQ4+ZJSrXmnpklZ7nisxB1TTUQ2sAKeBg6xwBQR3zU0n6MDg
KbRkS5a+1Qu5N/DzA5+gw0xig4EhKc1WIOLQlSVYhZXKEl/Pb1L73BdCDR4tpXXz
czBfpWw0W+8S0pVImxXjom3np9YQUwOIkeXDuwS+IvDaG09izlixt3mP0aoVkiIW
bCUvLZpgUnU/lc0/xrIKuAz9BWvv2gt3KSiLWODTbvpU04o/QL2ZuZ/P62kQXyVC
h9hzqi/lRpRvrlavff3D4p0hQRCI3EFUNJ0mDSezzhkEPtcAEvNKwAj36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPFHFKr2FOZSAS8tiYDX0psK9pvMB8GA1UdIwQY
MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt
OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2
LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRvT4Usj
X2M4ZwJXeDxEjYQIUWRjxElgHdPljE1tFX2+1r7Di04/3KMxwAdq2rqMcEeL664t
RxWKDN4CEQUeTN3PyE0y3QktHLvLKhN1g9cyqLcA+FJD0pq31VgnUzWNa7Nqpp/0
i/A7/fjsZnypuNxBzT4QVUVesM+fcDwwp0jaILlm6+tq0JNS/x1tGOO9Nfc8WO7K
C11ESgD6Z8wCMPOXUwyB7MO7jad3ca9hDscLiD18rv+0Wsf5mF/JUydU/RxffLC4
XIn38OOtf39+5LnirwpVHnjaEYGao9p+WRnAhUyZn1dkfUVW9xjKhUlNI16CNLqy
00ogfb+UGqbwRQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:33:30 2026 by rpki-client