Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File:                     afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier:          7ZTTygUM6jc0ZEgb4BV0q/Z3CrLHqhqKc01514GdFaA=
Subject key identifier:   79:8A:7C:D2:7B:E5:41:88:1F:60:2C:EC:87:85:D2:6A:DA:41:9D:66
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer:       /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial:       019D99990827B401D973A9E20A76ACFEFC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number:          077B
Signing time:             Fri 17 Apr 2026 04:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:36 +0000
Files and hashes:         1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: UE6FC46Rdik+dTJdxss3AavmSSSVnVoCW6hKJW1C+Ik=)
                          2: eNYwFKvhTYAKwUVHqfcOhm_redw.roa (hash: h0zFFTvlVNTqfoPE4dwnvafuj6T5qC/XkjacHGe2Fjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:08:27:b4:01:d9:73:a9:e2:0a:76:ac:fe:fc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
        Validity
            Not Before: Apr 17 04:00:36 2026 GMT
            Not After : Apr 18 04:00:36 2026 GMT
        Subject: CN=798a7cd27be541881f602cec8785d26ada419d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:64:e7:5d:36:92:11:4d:2f:41:2d:d7:45:
                    a6:c6:e9:ca:cc:42:b8:95:9f:8c:d5:96:26:3f:26:
                    2f:7c:cc:dd:fc:75:f7:09:fe:89:0f:d9:36:63:49:
                    db:37:ba:d7:93:d5:3b:6f:ec:e3:67:45:79:0e:b6:
                    16:c8:69:b8:b7:9b:df:e7:f3:eb:72:e5:8a:59:e7:
                    10:b6:a6:18:db:4d:2c:50:cf:93:7b:88:6f:15:de:
                    0d:fb:2f:de:00:87:75:df:11:fb:75:ba:1a:5a:93:
                    aa:32:27:b6:dc:2c:7c:18:91:15:b5:e8:68:48:47:
                    3a:7f:ea:d7:21:c4:59:47:45:43:b2:60:d7:93:98:
                    70:00:89:4a:0e:fe:a4:11:3a:9d:25:30:76:30:e3:
                    92:92:55:2f:26:56:cd:5f:f2:da:cc:41:a4:0d:31:
                    56:2f:67:72:27:ed:78:3e:e9:3b:2b:30:32:59:1d:
                    39:54:12:d4:a5:cd:b3:d4:3a:85:03:3b:75:e5:8e:
                    b4:b1:3e:e0:ee:cd:fe:08:03:02:27:31:9a:ac:81:
                    4a:72:f6:2c:48:55:6e:59:cf:b9:9a:ec:0e:fd:a1:
                    a4:b6:2d:45:9b:cd:97:71:a7:d7:2b:29:4d:5a:ab:
                    95:02:71:eb:ab:9a:79:d9:22:99:23:0e:fa:e7:43:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:7C:D2:7B:E5:41:88:1F:60:2C:EC:87:85:D2:6A:DA:41:9D:66
            X509v3 Authority Key Identifier:
                keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:d7:28:2d:ee:3a:9a:8f:6c:30:f3:3c:c5:5a:6c:6f:86:
         c7:b0:72:d7:b2:85:c3:ed:02:6a:13:5b:3a:36:b8:f8:6d:5e:
         77:92:fe:72:70:16:c8:e0:94:6f:97:a2:81:29:fc:62:18:0f:
         17:57:ce:02:3e:2c:b1:da:a5:21:6c:97:86:bd:75:41:39:24:
         70:31:6d:9f:ae:49:b5:4a:a0:c8:4d:0e:8d:11:65:91:75:45:
         01:d3:9f:5c:4a:06:59:7b:24:c6:0b:72:53:64:e8:01:0b:41:
         c4:29:e5:eb:6d:b6:77:a1:5e:6a:d3:8a:72:ab:ff:65:65:32:
         4a:34:e9:03:4d:9f:e9:5b:ad:11:d1:10:bf:de:ac:67:94:8d:
         35:7a:cd:fd:ce:2b:ae:6a:a1:14:eb:ad:48:0b:37:c8:9d:7e:
         eb:7c:fd:00:41:87:9d:93:37:ab:5e:f1:a2:77:2b:4d:c8:d7:
         85:9b:71:b5:35:4e:25:98:e8:51:9e:a6:34:e2:6d:fd:ec:ca:
         7c:8c:12:16:8a:12:25:58:e7:3a:d0:7c:20:5d:3b:cd:f5:11:
         5b:7d:7e:85:36:1d:db:c6:8c:57:ea:8b:f0:53:4c:33:fc:bd:
         90:d2:56:05:98:dc:21:b9:78:5d:42:92:60:e6:36:a6:6a:e2:
         1f:9a:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:04 2026 by rpki-client