Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File:                     AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier:          R6Ca6EW4h3cRakmHxlqeH4SXTeIqfTTrxBbusPt0ra0=
Subject key identifier:   14:9E:34:78:8D:0A:27:B8:24:39:4B:7C:B9:EB:18:BC:66:C9:A5:F5
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer:       /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial:       01A0C40DD773F075DE1F58E7154AFD8A5990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number:          169A
Signing time:             Mon 21 Sep 2026 13:00:36 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:36 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:36 +0000
Files and hashes:         1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: h1I1TV5yiZ6mzgGrQvgS5y63VEBrQrZDytzClif3q/A=)
                          2: oko0jjQVhM1g4SJmXa1zHjF9DLY.roa (hash: OdA2/Wk2XJh4HpZKtiKeyh0J3e1XxtYP056tIDnTkI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:d7:73:f0:75:de:1f:58:e7:15:4a:fd:8a:59:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
        Validity
            Not Before: Sep 21 13:00:36 2026 GMT
            Not After : Sep 22 13:00:36 2026 GMT
        Subject: CN=149e34788d0a27b824394b7cb9eb18bc66c9a5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:97:65:96:d7:35:1b:3c:eb:0e:7f:8e:81:
                    71:71:cd:d1:2d:b7:9f:fd:6a:06:3d:8f:c6:00:91:
                    b4:a8:2a:f7:bc:dd:c5:71:53:fb:e4:f1:1d:bf:45:
                    84:d0:fc:c0:aa:77:03:f6:5a:a4:0c:af:cc:99:45:
                    90:d1:45:d0:fc:83:97:30:3a:05:b1:59:3b:ca:c0:
                    99:93:d0:77:82:87:2a:31:71:6a:6e:4a:25:00:35:
                    bd:af:92:e6:19:04:4c:50:d0:40:83:2b:9e:0a:e1:
                    6d:ad:63:d2:1b:9b:4d:c8:2d:4c:a5:81:37:e8:17:
                    a6:81:cf:72:90:b2:08:b5:b4:a9:88:b7:06:16:d4:
                    ec:2f:c7:73:56:30:44:3c:f2:59:c6:01:47:f3:cb:
                    29:99:46:12:a9:e0:cb:4c:74:51:17:b8:12:b4:e6:
                    40:ef:f1:c3:68:ce:0c:d9:34:48:d4:07:1c:f9:04:
                    5b:26:7c:21:73:3d:fd:36:9d:7a:b9:12:ac:c9:d6:
                    74:e5:ad:29:c2:14:26:0a:55:a9:33:b2:a4:a6:72:
                    5f:a6:77:e0:b8:89:00:16:af:3d:0e:09:f1:48:cf:
                    b7:47:5f:28:ac:f2:e6:31:a0:c3:cc:76:d9:c0:8c:
                    26:d9:8a:a7:43:a4:f7:8c:27:a5:f2:3b:92:71:d9:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9E:34:78:8D:0A:27:B8:24:39:4B:7C:B9:EB:18:BC:66:C9:A5:F5
            X509v3 Authority Key Identifier:
                keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:3c:1e:1f:bf:ce:3b:2a:c1:ae:4d:d2:fc:40:83:56:1a:e8:
         6f:7a:e7:9d:b3:02:be:ec:68:76:87:09:74:2f:45:8b:22:65:
         00:74:45:ca:eb:da:5a:8d:4c:3f:51:67:c8:93:84:99:78:66:
         31:94:ea:d8:71:eb:05:3c:11:10:75:11:64:f6:8b:da:ac:88:
         46:cf:3d:0d:9b:30:97:ac:1e:48:8d:60:d3:92:f7:cb:97:4e:
         4d:1a:11:3d:5a:c3:41:0d:f0:5c:cc:b2:43:3c:77:ae:d1:9d:
         70:e3:f8:7f:40:7b:d9:42:fc:f2:01:21:26:7b:0f:b8:07:f3:
         29:bd:03:b6:e2:5b:f6:40:c3:3e:7c:a4:8b:a5:df:10:83:68:
         ee:f6:c0:dc:cf:47:68:17:38:8a:34:f8:fa:27:6d:d8:39:d0:
         81:fe:07:84:a6:a8:cb:8f:60:3d:3d:7e:4c:0b:54:5d:ec:5f:
         f5:d5:f0:ae:e4:af:c4:39:f0:67:e2:20:08:d5:69:ff:85:9f:
         af:74:0a:11:65:67:c8:f2:a1:16:3e:1c:38:82:9c:64:9b:11:
         3c:55:8a:5a:25:75:13:37:c2:3e:af:95:bc:9d:96:92:d6:15:
         b8:df:20:05:19:75:a5:ce:10:66:34:d8:51:4e:58:ac:8e:9f:
         21:f9:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:39 2026 by rpki-client