Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File:                     AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier:          wqlhA3JCmEu6RkDLiU6pR2bEzTK7AeLjJ0gtGgCOs7I=
Subject key identifier:   FA:CD:C3:5A:06:48:31:14:FF:80:5A:94:10:25:67:1B:90:5A:BA:70
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer:       /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial:       019EBEEC76682F57778FA3334806EBCFD7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 03:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:28 +0000
Files and hashes:         1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: mQvhdbcOrFYIuAd4Lurd9x8S4yTmsQPG7AUzrNWJYAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:76:68:2f:57:77:8f:a3:33:48:06:eb:cf:d7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
        Validity
            Not Before: Jun 13 03:00:28 2026 GMT
            Not After : Jun 14 03:00:28 2026 GMT
        Subject: CN=facdc35a06483114ff805a941025671b905aba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:44:4a:73:ac:aa:bb:a0:a7:00:77:68:a2:
                    4f:d6:19:0c:12:a3:40:48:c4:44:8c:5c:8c:c6:56:
                    d3:14:ad:30:7c:b0:de:f4:ee:d6:fa:a7:60:67:c3:
                    59:2a:bb:ee:f2:2b:b4:8a:c1:4d:a5:51:3c:76:f3:
                    dc:12:93:42:7c:55:c5:96:ae:3e:a6:c6:d5:a6:a6:
                    b1:7f:b4:92:88:dc:ef:81:5d:57:3f:da:ea:a9:d4:
                    32:df:a0:0f:ac:49:55:2c:43:95:7f:90:84:fc:ea:
                    7f:66:af:4a:7a:35:76:9b:08:0d:ed:91:bf:e8:69:
                    46:8d:62:22:dd:95:af:c1:db:10:a1:6b:aa:95:a3:
                    2f:4b:3e:50:c7:20:50:94:02:d6:d0:41:af:08:c7:
                    9e:2c:ce:eb:8d:64:7b:ee:b0:68:09:a3:b7:27:63:
                    82:70:b9:a1:75:89:f1:21:9c:2e:2b:3a:55:7e:4d:
                    d7:bf:91:e8:74:76:56:1b:30:44:f9:0e:af:9e:5f:
                    4f:db:02:8b:ed:2c:65:0d:64:53:7b:fe:b3:7c:e5:
                    ad:56:cb:bd:5e:24:61:c7:9f:f5:ee:4a:01:80:87:
                    3e:d1:24:a7:51:76:c1:24:e1:b7:17:33:5b:56:22:
                    3e:89:c6:e5:14:28:af:73:6c:c9:84:07:9c:7d:37:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CD:C3:5A:06:48:31:14:FF:80:5A:94:10:25:67:1B:90:5A:BA:70
            X509v3 Authority Key Identifier:
                keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:4f:11:f2:b1:0d:08:6c:af:92:14:4c:3a:00:6b:14:51:
         f6:3b:de:ea:1f:c5:f3:08:cc:5c:25:fa:59:13:ca:7a:32:5a:
         c5:4a:b4:81:1b:39:52:9c:98:00:11:30:82:2c:da:d0:d5:a8:
         5d:58:74:21:85:aa:c5:24:5a:fb:fc:77:71:a7:e5:4b:39:30:
         12:df:03:67:01:28:03:78:af:8c:71:0e:32:91:61:35:57:96:
         96:cd:9c:df:b4:60:fb:d2:39:fd:29:70:b1:58:fd:2d:65:fb:
         22:97:43:fb:1a:24:0b:28:b9:cf:4f:67:aa:a2:ad:0a:8b:41:
         a5:77:32:c4:4a:52:56:6c:0d:b3:63:c3:ac:ed:ad:27:54:d1:
         c9:c1:9f:dd:03:7f:40:f5:f1:77:00:26:46:b3:e4:57:db:ea:
         4a:21:1c:e2:13:f8:42:4a:07:ae:ee:dc:24:f8:9b:47:b4:3a:
         03:f3:00:d7:5c:77:0d:4c:a7:2a:89:cf:7f:30:8c:c2:bc:db:
         49:fe:82:13:bf:1c:7d:91:10:3d:83:b9:af:b6:aa:50:be:4f:
         40:62:bc:17:dc:31:9c:b5:8d:30:6a:7e:bd:c4:76:59:05:bb:
         8d:24:a4:aa:19:51:f5:cf:a6:ec:f7:a7:a4:25:04:b6:ec:e7:
         2c:f9:4d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7HZoL1d3j6MzSAbrz9fUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGY3YjdkNTFlNTA4MTgwZWU3M2NlZGRiZGQ5NTVjMzk3
NzQ4MjIwHhcNMjYwNjEzMDMwMDI4WhcNMjYwNjE0MDMwMDI4WjAzMTEwLwYDVQQD
EyhmYWNkYzM1YTA2NDgzMTE0ZmY4MDVhOTQxMDI1NjcxYjkwNWFiYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDdESnOsqrugpwB3aKJP1hkMEqNA
SMREjFyMxlbTFK0wfLDe9O7W+qdgZ8NZKrvu8iu0isFNpVE8dvPcEpNCfFXFlq4+
psbVpqaxf7SSiNzvgV1XP9rqqdQy36APrElVLEOVf5CE/Op/Zq9KejV2mwgN7ZG/
6GlGjWIi3ZWvwdsQoWuqlaMvSz5QxyBQlALW0EGvCMeeLM7rjWR77rBoCaO3J2OC
cLmhdYnxIZwuKzpVfk3Xv5HodHZWGzBE+Q6vnl9P2wKL7SxlDWRTe/6zfOWtVsu9
XiRhx5/17koBgIc+0SSnUXbBJOG3FzNbViI+icblFCivc2zJhAecfTfx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrNw1oGSDEU/4BalBAlZxuQWrpwMB8GA1UdIwQY
MBaAFAFPe31R5QgYDuc87dvdlVw5d0giMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQt
YzRjNTFmY2ZmNDk3LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xN2FhNjctOGZlNC00YTQzLWFhZGQtYzRjNTFmY2ZmNDk3
LzEvQVU5N2ZWSGxDQmdPNXp6dDI5MlZYRGwzU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAng1PEfKx
DQhsr5IUTDoAaxRR9jve6h/F8wjMXCX6WRPKejJaxUq0gRs5UpyYABEwgiza0NWo
XVh0IYWqxSRa+/x3caflSzkwEt8DZwEoA3ivjHEOMpFhNVeWls2c37Rg+9I5/Slw
sVj9LWX7IpdD+xokCyi5z09nqqKtCotBpXcyxEpSVmwNs2PDrO2tJ1TRycGf3QN/
QPXxdwAmRrPkV9vqSiEc4hP4QkoHru7cJPibR7Q6A/MA11x3DUynKonPfzCMwrzb
Sf6CE78cfZEQPYO5r7aqUL5PQGK8F9wxnLWNMGp+vcR2WQW7jSSkqhlR9c+m7Pen
pCUEtuznLPlNcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:54 2026 by rpki-client