Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
File:                     AUcceelkLK72p0N_H3TFR4rlISk.mft (raw, json)
Hash identifier:          gmrGM/DxHsDZjMGXEIHYZuaVPCLR+YEr0EDKi/7aRLA=
Subject key identifier:   27:79:7F:AF:41:E3:E0:6D:B6:DB:BB:6C:3D:A1:C4:13:82:A4:91:86
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       019ED42BCE1D7A4E839CC7B2CBFEFDA31BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 06:01:41 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:41 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:41 +0000
Files and hashes:         1: AUcceelkLK72p0N_H3TFR4rlISk.crl (hash: Ad+89IEfUGXIrQFNljHZU8cHX0oiJPold6l3HtKIsq0=)
                          2: gyKjgff4xPWR_xT3GYAWWCaM6V8.roa (hash: ACevHK+TApBdgqAMhe+oNyBWSjnTVbZ12xWe5OgMvkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:ce:1d:7a:4e:83:9c:c7:b2:cb:fe:fd:a3:1b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Jun 17 06:01:41 2026 GMT
            Not After : Jun 18 06:01:41 2026 GMT
        Subject: CN=27797faf41e3e06db6dbbb6c3da1c41382a49186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:57:e4:66:a0:c9:28:9e:1b:b7:f0:8a:c4:
                    76:cf:5f:cc:9f:25:c8:37:f5:2c:80:23:17:ba:1b:
                    15:92:19:e4:7a:ec:ea:1a:b1:ee:f0:63:85:24:09:
                    78:b2:e9:2f:2b:29:c2:3b:75:5e:12:da:43:8d:4d:
                    91:85:28:9c:05:0a:7f:2f:98:1a:53:ce:2d:88:8a:
                    29:a9:d3:ec:17:4a:bb:b4:83:7e:34:1a:f1:e0:57:
                    88:dc:1a:51:78:b7:78:97:ba:6f:8c:5a:a2:d6:10:
                    6b:c0:9c:63:5a:27:ab:c9:69:ad:82:eb:3f:77:5d:
                    81:19:7c:7a:b3:3c:fb:b9:64:99:3a:ba:26:fd:0c:
                    0c:02:fc:ba:0d:a1:50:3c:a5:bf:08:2c:ef:b7:51:
                    3b:78:ab:ad:70:f3:78:37:90:11:dc:e7:34:99:ad:
                    63:59:62:b4:48:f7:34:10:6d:e4:e2:c8:63:67:71:
                    d1:8c:17:20:b8:bd:d3:3f:7d:d1:fb:f9:41:7a:ba:
                    dc:63:b3:ae:1a:69:5a:96:1b:49:58:37:db:7d:eb:
                    91:61:c0:ee:c7:5d:32:99:48:f0:dd:36:f7:bc:80:
                    82:36:93:a8:84:7d:c6:9e:ad:5d:49:22:1c:c6:88:
                    c5:56:55:e2:bc:f6:6f:bf:90:fd:b3:eb:8b:fc:a8:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:79:7F:AF:41:E3:E0:6D:B6:DB:BB:6C:3D:A1:C4:13:82:A4:91:86
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:8e:63:84:3f:10:64:1e:d9:29:ef:a9:20:90:d8:35:c8:
         89:6f:8c:5b:07:f5:05:73:2f:76:9b:8b:95:5e:6c:95:5c:8d:
         a1:57:b3:90:a5:1d:87:02:97:e2:01:9a:88:2e:38:c1:2f:22:
         2f:9d:24:44:80:e4:4f:ff:5b:97:a2:fe:11:d9:b7:7c:86:89:
         c5:2d:9b:7b:99:06:14:07:01:10:d9:08:eb:be:b2:76:c7:90:
         a2:1c:ac:64:86:68:73:a7:0d:1b:2b:c8:29:14:8a:a0:95:d5:
         da:6b:9b:20:9b:f1:ed:e8:71:61:2d:c4:f0:82:e0:b1:7e:38:
         b7:5e:54:25:77:1e:6d:11:99:30:18:b1:41:95:1d:7d:83:b2:
         7f:c3:57:85:1f:c1:7b:1a:d6:ca:40:94:b1:75:ba:18:74:7e:
         63:f8:f8:22:da:71:02:a5:d5:18:0e:89:35:b1:93:25:4d:d9:
         27:a4:d2:a0:2c:2c:c2:f9:00:af:67:9a:f6:47:43:7a:3e:f5:
         e9:40:3a:c4:53:9a:58:ec:46:30:ce:57:7a:2d:62:38:30:5c:
         72:01:95:79:9f:78:0d:3d:f5:02:84:26:3f:4d:4f:d4:55:df:
         90:f6:6d:5d:03:8b:4e:cf:d1:f4:f1:64:f7:44:02:83:fc:5c:
         6b:2d:1a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK84dek6DnMeyy/79oxvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl
NTIxMjkwHhcNMjYwNjE3MDYwMTQxWhcNMjYwNjE4MDYwMTQxWjAzMTEwLwYDVQQD
EygyNzc5N2ZhZjQxZTNlMDZkYjZkYmJiNmMzZGExYzQxMzgyYTQ5MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RZX5GagySieG7fwisR2z1/MnyXI
N/UsgCMXuhsVkhnkeuzqGrHu8GOFJAl4sukvKynCO3VeEtpDjU2RhSicBQp/L5ga
U84tiIopqdPsF0q7tIN+NBrx4FeI3BpReLd4l7pvjFqi1hBrwJxjWieryWmtgus/
d12BGXx6szz7uWSZOrom/QwMAvy6DaFQPKW/CCzvt1E7eKutcPN4N5AR3Oc0ma1j
WWK0SPc0EG3k4shjZ3HRjBcguL3TP33R+/lBerrcY7OuGmlalhtJWDfbfeuRYcDu
x10ymUjw3Tb3vICCNpOohH3Gnq1dSSIcxojFVlXivPZvv5D9s+uL/KhxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd5f69B4+Btttu7bD2hxBOCpJGGMB8GA1UdIwQY
MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt
OWQyZDlmNmVlZTkzLzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz
LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVByOY4Q/
EGQe2SnvqSCQ2DXIiW+MWwf1BXMvdpuLlV5slVyNoVezkKUdhwKX4gGaiC44wS8i
L50kRIDkT/9bl6L+Edm3fIaJxS2be5kGFAcBENkI676ydseQohysZIZoc6cNGyvI
KRSKoJXV2mubIJvx7ehxYS3E8ILgsX44t15UJXcebRGZMBixQZUdfYOyf8NXhR/B
exrWykCUsXW6GHR+Y/j4ItpxAqXVGA6JNbGTJU3ZJ6TSoCwswvkAr2ea9kdDej71
6UA6xFOaWOxGMM5Xei1iODBccgGVeZ94DT31AoQmP01P1FXfkPZtXQOLTs/R9PFk
90QCg/xcay0aiA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:08:21 2026 by rpki-client