Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          qMRqvRB24c9fhbG6ReLpdxinWPhOZ7cjUyROyT9bGcs=
Subject key identifier:   9E:EB:21:3F:F1:F4:83:24:2F:B7:E5:DA:DF:2D:DA:7D:9A:21:29:18
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       01A0C8584F296567FC26C107D9E2346DC888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          1A64
Signing time:             Tue 22 Sep 2026 09:00:25 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:25 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:25 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: NCnfIjQB0SOL5JAkvdw2antA8DQPK/I8NSTJWQo/qPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:4f:29:65:67:fc:26:c1:07:d9:e2:34:6d:c8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: Sep 22 09:00:25 2026 GMT
            Not After : Sep 23 09:00:25 2026 GMT
        Subject: CN=9eeb213ff1f483242fb7e5dadf2dda7d9a212918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:0a:01:03:39:70:77:37:21:65:57:27:26:
                    f8:4c:d4:42:76:18:a2:f2:52:07:77:50:b2:91:a5:
                    1b:1a:51:f8:71:5e:2c:77:cd:51:af:72:80:0a:ec:
                    32:c6:56:42:1a:1f:bf:98:22:97:67:ac:fa:a5:f0:
                    de:64:ba:32:91:74:2f:12:d2:f9:f8:cc:4b:70:2e:
                    7a:55:3e:fe:4e:b2:37:ea:7a:fa:a8:06:99:d7:68:
                    f3:58:7e:6d:3d:80:26:10:4a:77:8a:3b:5e:bc:a8:
                    58:05:19:ed:8c:3a:a2:93:88:74:c9:18:22:0b:e5:
                    33:0d:50:88:8a:b2:2b:bf:d9:dd:b4:4f:ad:9c:7e:
                    3c:82:b4:44:81:e3:fe:3d:a9:c4:e1:46:1e:24:95:
                    3a:61:c9:5d:1a:f0:73:30:fc:a0:4b:3e:97:7f:1e:
                    dd:6a:5b:0d:64:fd:f5:ab:57:5d:b8:2c:4b:52:c2:
                    4d:ac:b0:96:f6:09:01:5f:5d:2a:d9:f7:32:4c:0d:
                    41:df:58:8a:ca:a3:cd:34:6c:32:a5:30:08:d2:83:
                    7a:8f:e8:59:7b:89:92:1b:5b:e5:a5:c2:2f:ea:d8:
                    9b:73:af:83:a6:d7:62:a4:5f:ee:01:36:dd:7c:63:
                    f2:b7:27:5e:06:0d:0d:cf:6c:76:54:f8:99:0f:0f:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EB:21:3F:F1:F4:83:24:2F:B7:E5:DA:DF:2D:DA:7D:9A:21:29:18
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:08:af:0f:99:a3:8f:c7:c2:11:6e:5f:dc:f2:f2:91:b2:
         79:2e:df:c3:9d:f4:ee:a6:91:1b:45:8d:73:d7:8c:3e:6e:3b:
         f4:f6:fe:d5:9e:45:aa:5e:22:26:20:4b:41:80:db:aa:84:13:
         e3:e4:d0:6f:6b:cc:c1:75:ed:1b:85:a0:6f:da:45:12:6c:fb:
         cc:f6:f3:c4:b0:8b:dd:3c:cf:c7:af:16:e6:fb:f0:1a:fc:af:
         b7:7b:89:72:90:fe:07:08:2b:a9:f5:af:ae:7d:92:81:4f:7e:
         90:e4:b3:f5:d9:98:c3:c8:10:19:60:b9:54:3f:be:41:71:a7:
         86:e5:60:07:6b:6b:79:cc:a2:e1:33:16:9e:3c:ef:48:b9:3b:
         25:4e:c8:25:bb:b8:f2:88:ef:e9:4f:3a:4d:f7:5f:86:5d:40:
         8c:a9:14:03:04:63:ff:af:37:02:f0:b6:50:3a:14:9a:da:43:
         87:e4:48:1c:51:bd:d8:49:53:ad:9b:fb:bc:34:a3:9a:34:ee:
         c3:f8:23:b5:cb:fb:05:9d:82:e0:a7:08:6c:86:a1:15:58:8b:
         f3:29:83:96:94:35:0c:ac:07:d7:52:cb:81:55:d4:7f:1f:8b:
         8f:43:d3:c8:84:f8:8b:fa:82:a6:ad:0e:85:d5:72:a7:cc:a9:
         5c:90:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:57:32 2026 by rpki-client