Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          xKHE57ODNNAjxgXwQfDQUrl/mpmstHxw02hTNDefRA4=
Subject key identifier:   70:1A:13:07:77:77:54:E2:EC:81:38:FA:E1:5D:A8:C3:B4:4F:A3:24
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       019D98186453AB5171B6E91C24972CABD63E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          1757
Signing time:             Thu 16 Apr 2026 21:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:28 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: MdiOFy2I5gwiUJu5yoNdvk+KM1UfAkccyafh4BJcB/Q=)
                          2: To9dQnlzmHPfK3x9W-AWj_UHSq8.roa (hash: YpG1hJSyXQP2wME1UG5h51OZevZLv14I2jAEQWeHX/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:64:53:ab:51:71:b6:e9:1c:24:97:2c:ab:d6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Apr 16 21:00:28 2026 GMT
            Not After : Apr 17 21:00:28 2026 GMT
        Subject: CN=701a1307777754e2ec8138fae15da8c3b44fa324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:8f:88:d1:7f:77:57:02:4a:15:7f:64:07:
                    b6:23:26:3c:23:55:df:31:86:e8:71:0a:2a:9f:13:
                    d1:19:ee:9a:a6:15:99:ed:1a:97:22:8c:11:46:20:
                    94:07:48:fc:a5:ad:ef:ef:a4:a6:cc:bd:60:a9:79:
                    e8:e9:ab:76:57:b9:9a:52:43:85:bd:a0:e7:04:36:
                    70:3f:6b:62:ee:b5:cc:cd:3d:ff:d9:08:19:07:29:
                    5e:64:c0:06:42:05:2b:24:a8:1e:53:c9:19:23:22:
                    57:82:a7:b4:90:92:a5:33:0f:b0:69:8c:bb:fc:ba:
                    08:c0:90:04:92:4d:d6:83:45:05:2f:45:fd:4b:dd:
                    8c:fe:ff:b2:b5:3f:7f:ea:62:8a:1d:05:fb:b2:ff:
                    13:ea:6a:45:3d:2e:9d:c8:2d:22:b2:bd:52:e3:f1:
                    b0:08:cf:0c:a1:40:2a:1b:eb:b7:dd:c6:51:4d:a0:
                    86:7c:92:68:d3:d5:32:71:94:2d:9b:47:5b:03:da:
                    99:df:df:5c:3a:e4:7a:75:11:9a:a0:5f:87:ce:86:
                    4c:25:b0:ed:b0:d5:5d:59:49:e7:7f:44:d7:82:14:
                    65:a3:fe:0e:7d:f5:7a:6d:cf:29:38:72:49:77:6c:
                    d4:98:a9:35:92:26:52:34:b8:21:57:6c:68:5d:86:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:13:07:77:77:54:E2:EC:81:38:FA:E1:5D:A8:C3:B4:4F:A3:24
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:f7:16:24:0b:45:af:8f:58:74:fd:63:33:ff:3c:71:c4:
         12:c0:32:a8:c3:6f:97:8e:73:88:43:89:6f:ab:4f:8c:b2:6c:
         eb:f3:94:62:e7:19:78:88:73:43:55:45:18:69:e6:be:85:e3:
         9d:9a:f9:17:a8:dd:fd:ae:2f:f2:fd:9c:07:d9:30:27:b9:f9:
         27:7c:9d:1d:f4:57:cd:6b:bc:18:b4:59:ea:5a:ce:1d:8f:6c:
         35:55:57:bd:88:b7:e1:aa:bb:c0:cf:c2:01:94:c8:8d:b3:2b:
         dc:82:ce:e9:78:29:f3:f5:7a:cc:fe:f8:0a:7e:8f:3f:3f:2e:
         72:b6:c7:fb:79:95:c7:24:a2:f9:c0:8a:33:f7:d8:b0:b1:22:
         9d:e2:7d:4f:06:db:bd:96:7f:02:f2:09:6d:b4:1d:db:8a:0f:
         7d:86:12:df:be:56:4d:4c:20:5b:20:2a:29:79:0c:c2:ab:db:
         2a:2c:68:6a:68:4b:f0:2e:2e:c3:f1:55:3d:14:82:19:06:89:
         c0:53:16:e7:2a:70:37:d1:2b:d3:a0:ee:8d:5c:f3:e6:fd:b9:
         ea:a9:c4:ad:a1:e4:0b:9a:bc:e4:31:26:85:f1:f3:fe:5d:37:
         3f:0b:80:00:46:86:e6:6f:ce:b8:81:f7:c8:d0:4f:8c:ef:be:
         fe:99:d1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGGRTq1FxtukcJJcsq9Y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1
ZTc1MTMwHhcNMjYwNDE2MjEwMDI4WhcNMjYwNDE3MjEwMDI4WjAzMTEwLwYDVQQD
Eyg3MDFhMTMwNzc3Nzc1NGUyZWM4MTM4ZmFlMTVkYThjM2I0NGZhMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkaPiNF/d1cCShV/ZAe2IyY8I1Xf
MYbocQoqnxPRGe6aphWZ7RqXIowRRiCUB0j8pa3v76SmzL1gqXno6at2V7maUkOF
vaDnBDZwP2ti7rXMzT3/2QgZByleZMAGQgUrJKgeU8kZIyJXgqe0kJKlMw+waYy7
/LoIwJAEkk3Wg0UFL0X9S92M/v+ytT9/6mKKHQX7sv8T6mpFPS6dyC0isr1S4/Gw
CM8MoUAqG+u33cZRTaCGfJJo09UycZQtm0dbA9qZ399cOuR6dRGaoF+HzoZMJbDt
sNVdWUnnf0TXghRlo/4OffV6bc8pOHJJd2zUmKk1kiZSNLghV2xoXYblWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAaEwd3d1Ti7IE4+uFdqMO0T6MkMB8GA1UdIwQY
MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt
ZDg0YjJiMWU5MTMzLzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz
LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdn3FiQL
Ra+PWHT9YzP/PHHEEsAyqMNvl45ziEOJb6tPjLJs6/OUYucZeIhzQ1VFGGnmvoXj
nZr5F6jd/a4v8v2cB9kwJ7n5J3ydHfRXzWu8GLRZ6lrOHY9sNVVXvYi34aq7wM/C
AZTIjbMr3ILO6Xgp8/V6zP74Cn6PPz8ucrbH+3mVxySi+cCKM/fYsLEineJ9Twbb
vZZ/AvIJbbQd24oPfYYS375WTUwgWyAqKXkMwqvbKixoamhL8C4uw/FVPRSCGQaJ
wFMW5ypwN9Er06DujVzz5v256qnEraHkC5q85DEmhfHz/l03PwuAAEaG5m/OuIH3
yNBPjO++/pnRdA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:36 2026 by rpki-client