Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File:                     AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier:          Asb64VkMIJfJhm1RRpMVPGTYZ5a5v5bGYeBXzGj9V+o=
Subject key identifier:   5B:18:4C:49:53:AC:E2:C6:6E:06:87:21:26:EA:BB:72:F0:C4:C5:62
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer:       /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial:       01A0C8FD2236FE911D22038C1C60DE07CFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 12:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:27 +0000
Files and hashes:         1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: QWnpX3TytLtgzKsvHbBPJWCtQFLlPWfcwv4L+qNhaJk=)
                          2: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (hash: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:22:36:fe:91:1d:22:03:8c:1c:60:de:07:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Validity
            Not Before: Sep 22 12:00:27 2026 GMT
            Not After : Sep 23 12:00:27 2026 GMT
        Subject: CN=5b184c4953ace2c66e06872126eabb72f0c4c562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:15:b7:c5:80:94:d6:0d:34:cf:4e:1f:84:
                    36:b1:c3:09:9c:b5:15:9e:93:d1:38:59:70:ad:5c:
                    ef:e4:c5:2f:af:95:4c:89:7e:c5:3f:b2:54:d6:39:
                    ad:14:4a:f8:ee:05:64:67:b2:c8:82:34:74:96:0e:
                    19:d4:2e:24:87:67:b6:c7:b4:2c:7b:5b:60:07:03:
                    f2:00:34:27:70:7e:6d:37:fa:05:ad:9c:b2:ec:08:
                    68:7b:ab:fe:47:37:0d:42:4f:41:3f:26:d9:b6:6f:
                    ff:69:c4:ca:85:c9:92:a2:59:43:27:fb:61:da:3c:
                    03:07:08:35:56:80:57:06:1a:ab:37:e0:95:6f:7b:
                    a3:1d:cc:6b:1d:6a:a1:e9:5d:34:f1:9a:0e:19:23:
                    48:5b:97:b9:77:11:9c:25:e6:86:02:b7:e5:ea:50:
                    34:97:99:c0:d0:d9:4a:2f:21:0f:2a:0b:4f:7a:2c:
                    f6:58:30:e0:aa:71:31:b7:09:a8:e5:a0:c3:06:49:
                    9f:b4:cd:71:ee:4c:0d:d4:f9:18:ed:b0:9a:62:db:
                    c6:8b:8d:16:9e:a6:a1:9b:10:7b:13:7f:b7:3b:04:
                    a7:0c:79:72:b7:fb:78:99:13:77:5c:39:d1:80:70:
                    12:7f:bb:f4:25:2d:c8:a0:cf:cf:fc:91:08:a6:82:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:4C:49:53:AC:E2:C6:6E:06:87:21:26:EA:BB:72:F0:C4:C5:62
            X509v3 Authority Key Identifier:
                keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b8:00:97:50:14:10:09:d2:09:7a:f1:b3:85:11:a1:67:e4:
         63:d9:eb:b9:60:56:57:62:71:ec:f4:92:21:ba:3f:ff:68:ae:
         d5:5f:0f:18:f4:26:7c:da:7a:4d:bd:61:9a:f4:62:bc:89:96:
         48:9b:e3:e7:27:0f:f0:39:c8:83:14:56:2f:69:fe:4a:fa:c9:
         bc:55:95:11:f0:89:ad:a7:7b:d9:67:03:e6:26:77:65:51:a9:
         cf:cb:9f:4b:d0:b3:7e:5a:6f:8e:56:bd:72:99:06:57:f2:cf:
         8a:74:7c:8a:2c:f5:ba:64:00:fb:fd:fa:7c:8c:c4:6f:eb:5e:
         35:a4:e3:a8:a2:2b:d2:9f:7f:96:93:8a:1c:87:45:5b:de:bd:
         0b:5f:2e:c6:c8:50:df:05:db:b2:84:75:83:2c:05:de:ce:59:
         89:f1:25:b2:4a:4b:13:e5:e6:40:e0:b9:4e:07:ee:81:50:77:
         18:26:19:4c:ff:cd:e2:db:1c:1b:97:18:f8:cc:b7:e7:2d:45:
         cc:68:09:04:be:39:e3:c7:4e:1a:04:5d:6f:3c:3e:c0:2d:7c:
         2e:bb:4d:aa:73:25:82:e7:ef:8c:4d:14:80:b8:f8:3c:1a:2d:
         d5:51:00:69:10:ac:08:49:7b:bd:cd:fb:b0:02:9c:20:44:50:
         6e:bf:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:51:10 2026 by rpki-client