Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File:                     AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier:          pOc+/DwNJ4Q5VZ49hS2Bm8ZomWFbNeCpoAntb+snUIY=
Subject key identifier:   86:19:7B:15:51:5C:C8:24:D2:67:BD:BB:4A:AD:B2:C7:3A:7F:43:A8
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer:       /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial:       019D98F5478F7BD52DBF4E021AF0227E90D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number:          14F6
Signing time:             Fri 17 Apr 2026 01:01:44 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:44 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:44 +0000
Files and hashes:         1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: GaqvkkWpscb2wOSrIZw07B4diwofRxx5SskFBrA9vko=)
                          2: oko0jjQVhM1g4SJmXa1zHjF9DLY.roa (hash: OdA2/Wk2XJh4HpZKtiKeyh0J3e1XxtYP056tIDnTkI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:47:8f:7b:d5:2d:bf:4e:02:1a:f0:22:7e:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
        Validity
            Not Before: Apr 17 01:01:44 2026 GMT
            Not After : Apr 18 01:01:44 2026 GMT
        Subject: CN=86197b15515cc824d267bdbb4aadb2c73a7f43a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:cc:82:f1:32:b5:8d:e7:ce:89:f1:bc:98:
                    41:93:06:28:8b:03:86:38:b6:90:8b:d8:06:2a:07:
                    d9:c1:9c:56:dd:af:23:73:72:aa:50:f8:43:3b:d8:
                    af:dc:3b:90:a3:35:b7:0e:98:ba:cc:ab:da:c0:f1:
                    57:59:4c:10:ec:18:74:0a:5b:80:dd:64:02:0a:17:
                    66:3d:97:63:a4:59:7e:8e:f1:34:2c:7e:d0:c9:c4:
                    59:f6:d9:b7:ca:44:29:72:2d:39:f5:08:00:53:d7:
                    72:f6:fc:ac:b7:26:58:da:ad:c4:74:1a:c5:d8:2e:
                    28:94:66:61:94:34:7d:cf:61:6f:73:ce:54:02:01:
                    81:a0:ed:c6:1e:e1:20:5f:08:66:a0:02:1a:58:65:
                    5b:f2:11:3e:fd:89:62:b2:dc:2b:73:ca:86:c5:84:
                    f9:3b:5a:57:36:67:94:93:ae:31:65:cf:f1:fd:3b:
                    c1:21:dd:bf:ae:08:05:86:19:51:1b:5d:f1:c1:3f:
                    a2:a5:06:ef:6a:90:2a:b3:65:05:3e:ca:df:f3:8e:
                    0f:1a:5e:bb:11:7a:21:6d:2b:65:42:98:36:5d:6a:
                    71:2c:f4:bd:7c:ba:c0:4e:71:63:67:8a:ab:f9:99:
                    99:11:b4:bd:ca:68:7a:31:9f:c2:a4:46:60:6a:c8:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:7B:15:51:5C:C8:24:D2:67:BD:BB:4A:AD:B2:C7:3A:7F:43:A8
            X509v3 Authority Key Identifier:
                keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:13:bf:84:5b:ab:43:70:f1:90:b1:94:a9:e4:62:f7:fa:fa:
         4c:cc:1e:11:ae:d7:5e:44:82:af:dc:81:76:dc:10:e8:b8:6b:
         ad:78:81:ea:52:63:25:76:e5:ff:f5:e0:99:54:e6:60:22:42:
         16:5e:fa:c1:fd:eb:f5:f1:72:74:ae:ef:1e:e7:9d:5d:67:cf:
         cc:ca:d4:6e:a5:9f:2b:46:02:43:ac:85:81:f9:27:12:f8:fd:
         03:50:ce:3d:4c:c0:1e:4f:95:bf:79:47:69:e2:a0:00:7e:75:
         ae:9f:9a:73:ce:aa:25:72:de:e3:0a:8f:0f:73:f4:0d:2d:f7:
         5e:0b:e0:db:a0:a3:28:e9:4c:dc:0b:79:fe:e3:f5:af:08:12:
         24:2a:e0:16:5a:43:1a:64:fc:d7:a0:23:d9:cc:8b:11:d3:25:
         0b:45:83:1f:d4:ed:8e:c8:8b:3a:59:33:28:c9:72:ba:c7:59:
         6f:41:b6:91:fc:52:14:bb:6b:4d:66:67:03:3c:ab:4b:5f:b2:
         9d:96:af:c5:9d:88:02:64:26:53:95:fc:60:24:69:82:a8:27:
         15:96:df:28:ff:61:5d:d6:1d:61:21:8d:eb:9a:4d:c0:1d:63:
         c4:70:65:ed:75:af:f6:2e:44:ac:fe:d3:ad:4c:e2:fc:b9:6c:
         c4:9c:c7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:40 2026 by rpki-client