Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          EjtWo7Y1bxEgyc1ArCeO77JUiSsfY93w7JBi3WOrgHU=
Subject key identifier:   CB:5B:63:4D:22:1C:DF:B1:F6:AC:5A:B7:5D:D2:CB:CD:42:D8:5C:21
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       01A1C40B6E3F9628C9DA77C4776E3D783247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          1AEB
Signing time:             Tue 10 Nov 2026 06:00:45 +0000
Manifest this update:     Tue 10 Nov 2026 06:00:45 +0000
Manifest next update:     Wed 11 Nov 2026 06:00:45 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: AnevLxfWlK4P1PYN2QRL6xRLOtTwkKdaKtE1oSHLuW8=)
                          2: o2sIQqxtrsXU4-sHgN1DBCyW2Do.roa (hash: OOS32X72fHPV4c6ntyzjKEpP2sDTlpCLbnwcUWRnCGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:0b:6e:3f:96:28:c9:da:77:c4:77:6e:3d:78:32:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Nov 10 06:00:45 2026 GMT
            Not After : Nov 11 06:00:45 2026 GMT
        Subject: CN=cb5b634d221cdfb1f6ac5ab75dd2cbcd42d85c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:bb:6c:1e:d0:a3:4a:3e:1e:14:50:7a:d7:
                    e5:ea:6b:e8:73:13:a3:ca:89:28:86:47:67:e4:ec:
                    7c:d5:ff:4f:23:05:53:ac:71:85:b9:30:03:31:dd:
                    31:28:c5:ab:ef:27:17:20:43:39:ec:03:41:5b:29:
                    24:e6:b7:ec:4f:d4:7f:61:a0:1b:51:57:eb:1d:c4:
                    ae:fd:2f:89:b8:96:98:dc:75:92:24:db:da:87:b6:
                    66:7f:bb:4d:9d:eb:1d:b7:71:f0:d5:be:ba:e0:32:
                    b8:c2:a2:76:46:84:b7:b3:f3:89:51:61:b8:5e:8c:
                    8a:ac:3b:48:38:47:42:af:21:15:ee:6e:92:be:dc:
                    c5:65:83:f3:04:85:d6:11:83:a8:52:e4:3a:b0:9e:
                    2f:46:30:11:b3:d2:5b:22:d4:eb:f7:8a:b1:16:68:
                    8d:d1:59:7f:b3:8e:3e:95:41:ce:31:79:1c:69:81:
                    a9:01:98:07:02:8e:1b:d1:0a:fd:dd:3b:55:15:91:
                    64:26:f1:f5:a4:6b:a0:98:76:64:e1:d4:e3:7f:7b:
                    a2:91:54:85:33:c2:92:af:5e:e1:89:19:f4:43:83:
                    93:d0:b4:29:c6:01:28:cc:64:b1:e5:ea:47:f2:80:
                    83:fc:dd:d9:33:99:09:09:ea:a4:3c:e7:d5:e9:96:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:63:4D:22:1C:DF:B1:F6:AC:5A:B7:5D:D2:CB:CD:42:D8:5C:21
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a0:28:0a:3b:2e:04:0b:a9:16:84:94:5c:47:43:5c:be:2c:
         d7:7d:c4:6a:b5:1a:d4:e2:04:e4:f7:f7:10:2b:fc:40:37:7a:
         5e:7d:0e:fb:90:63:de:aa:94:ad:36:33:b6:fe:43:3a:77:7e:
         85:d6:b9:7a:1b:03:d1:0d:29:1a:1b:31:2c:2b:9a:c5:70:18:
         f7:e0:ae:51:d0:75:58:2b:c6:b5:ca:1a:db:df:aa:1a:aa:42:
         9f:92:5b:27:1f:ed:ae:eb:73:55:5e:aa:5f:af:5f:95:38:cd:
         15:4a:12:46:6c:29:02:53:e5:1e:34:e5:90:1b:f5:48:fb:a8:
         b1:c1:ae:db:65:50:3a:db:ae:7f:6a:13:0f:c1:d7:3f:c5:0e:
         11:6d:e5:7d:65:18:f7:bc:c9:b0:97:84:cf:82:db:dc:8f:8f:
         9a:a4:df:8e:16:42:18:c2:82:88:49:f5:3c:8d:5c:59:29:13:
         9e:5e:d4:bf:67:57:4a:a7:06:c3:20:49:e3:d6:91:1e:4e:3e:
         c8:5b:46:95:86:f1:64:5a:28:1e:22:d1:55:b4:c9:06:e8:92:
         51:cd:77:58:ca:90:b2:3b:b5:86:d3:fd:04:10:81:63:3a:05:
         b9:bd:8f:2d:af:d9:a3:57:56:46:cf:c2:8e:e6:58:96:2f:3a:
         ef:74:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 09:21:07 2026 by rpki-client