Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          1qhabQXSeTmhfZVgKH+pZzdLdJHTrUPGzuzwIrc3cD0=
Subject key identifier:   79:32:47:26:55:05:AD:17:78:AB:A7:10:8E:8E:EB:11:AE:E5:21:8E
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       01A0C520A2B70CC2E94CEB2384ED111BE23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          18FC
Signing time:             Mon 21 Sep 2026 18:00:45 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:45 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:45 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: SLf7QVGfswZTsQQ6hE3e37HlNUA2QwHEPM844ucqdRo=)
                          2: To9dQnlzmHPfK3x9W-AWj_UHSq8.roa (hash: YpG1hJSyXQP2wME1UG5h51OZevZLv14I2jAEQWeHX/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:a2:b7:0c:c2:e9:4c:eb:23:84:ed:11:1b:e2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Sep 21 18:00:45 2026 GMT
            Not After : Sep 22 18:00:45 2026 GMT
        Subject: CN=793247265505ad1778aba7108e8eeb11aee5218e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:79:67:e5:86:c5:bd:3f:c4:81:20:31:15:
                    51:d3:39:70:af:a8:fb:10:cb:14:e0:3a:3f:f8:43:
                    54:7e:b2:cc:22:76:92:95:16:39:d0:f6:d6:71:81:
                    a3:ee:a3:66:bd:30:ce:fe:7e:3f:9d:bf:29:e2:c5:
                    6c:7d:0d:c9:7f:4b:b2:78:f9:21:9b:1e:76:95:a6:
                    36:74:66:32:7f:07:e2:77:a4:45:15:ad:78:59:da:
                    1b:d3:61:3d:7f:b8:56:80:f2:e6:46:84:9f:63:a1:
                    02:4e:09:e5:ea:67:93:0e:44:1f:64:44:fa:0f:cf:
                    80:73:7b:b3:32:df:75:eb:30:5c:98:79:94:21:b8:
                    47:a7:8b:5b:4e:2c:50:d3:a7:ae:30:66:ee:c7:98:
                    3d:dd:45:ac:2c:8d:dc:44:31:6e:5c:65:3a:da:d4:
                    3e:f8:80:51:02:48:ad:c3:b2:08:fc:67:0b:1e:a0:
                    22:7f:12:07:03:04:4c:8c:58:b5:ef:c1:89:24:3e:
                    bf:df:49:ab:a0:63:e5:f3:ce:7a:d5:44:67:32:6d:
                    d8:7a:42:56:cd:65:0f:cf:69:7b:7a:fc:eb:ea:3f:
                    0f:b0:c0:68:f4:90:3d:41:84:e6:1f:2e:f1:4c:0f:
                    e5:05:b1:67:8d:82:e2:5d:46:a6:0a:e6:20:84:21:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:32:47:26:55:05:AD:17:78:AB:A7:10:8E:8E:EB:11:AE:E5:21:8E
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:30:3d:3d:a3:b6:a3:15:a6:02:e1:c8:cd:05:60:f3:47:
         38:2a:a8:0f:65:b9:9b:bb:1e:8b:b0:ff:40:e2:fa:8c:99:54:
         3e:fe:5c:86:c4:40:28:e7:b7:90:6b:92:c7:42:35:2b:79:e9:
         76:05:b3:f1:24:e5:15:4e:56:15:1d:6d:95:a9:c2:01:78:76:
         6b:53:fa:aa:f8:c2:b8:9d:44:9f:a0:45:af:44:34:42:89:15:
         79:b1:77:3b:83:1b:ec:74:7a:18:a7:1c:05:2d:9d:0a:5a:8b:
         60:c2:32:11:1c:ea:43:08:b4:64:e0:32:c8:d5:14:f2:64:d1:
         0f:b1:10:bf:bd:00:a0:e7:45:f8:09:83:4f:ee:ba:f8:42:89:
         ea:14:fb:bb:26:67:92:b1:80:e0:d2:df:f5:fd:e6:d3:3d:30:
         25:a9:22:28:73:a4:d1:4e:cb:90:09:da:7f:10:dc:16:65:2c:
         21:db:8c:17:69:72:a2:2f:bc:9f:9b:44:7f:8e:23:1c:e1:78:
         ef:14:00:e0:e7:93:80:54:29:35:4e:f6:5b:c2:2a:ff:d7:cb:
         1d:06:1f:72:42:17:da:1d:4b:a0:3b:34:29:09:ca:5a:2b:7e:
         9d:1c:66:2b:7f:17:17:55:1c:38:36:09:c1:79:2f:89:65:89:
         1e:2e:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:23:13 2026 by rpki-client