Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File:                     AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier:          aFB5ojk0a2QwLJ2Hxbw+pdAcPxqtGuDMIsnLXESVkeo=
Subject key identifier:   01:35:FE:57:37:3B:A5:A8:6A:9F:4F:C2:C4:90:9C:60:44:58:D5:6B
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer:       /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial:       019FAA50FCBCA37515AB071C8E0A665FBBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 20:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:01 +0000
Files and hashes:         1: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: J6JotzNs5906d0UVO7Z7gFtBqRKpFKniDzfTRBb2MzU=)
                          2: uJRDK81LaOJPqwaMH3aOr8mzVc0.roa (hash: kDLHQO0Rz/R4i/HPTjDis1WgRXCxP6QcVEL1nIljmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:fc:bc:a3:75:15:ab:07:1c:8e:0a:66:5f:bb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
        Validity
            Not Before: Jul 28 20:01:01 2026 GMT
            Not After : Jul 29 20:01:01 2026 GMT
        Subject: CN=0135fe57373ba5a86a9f4fc2c4909c604458d56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ee:8d:18:b7:95:7c:75:27:b1:01:30:ae:69:
                    0f:67:0b:2d:77:63:65:94:51:5c:d5:ce:39:41:1d:
                    82:8b:d2:d4:62:92:d5:56:b4:33:4b:e8:1e:d9:b7:
                    f3:75:e6:38:5e:1d:5f:a3:a2:97:77:3a:88:5d:21:
                    fa:28:f6:50:a4:36:4e:9d:4d:49:25:f6:c4:e3:fb:
                    b5:13:c1:91:cd:e5:ea:2c:20:6d:df:25:0e:4c:ab:
                    73:b8:c0:c5:8c:f4:43:5c:66:b2:b2:e1:20:11:3d:
                    14:d6:d4:88:a7:0a:5a:a0:15:60:5a:0c:36:61:67:
                    28:5f:9b:b7:14:90:c3:c7:55:89:84:5b:c5:cc:40:
                    8b:41:43:90:7c:47:58:1e:1b:c5:9b:54:a9:b9:88:
                    52:dc:97:9c:f5:ab:0f:5c:7d:c6:2e:bc:47:ae:ae:
                    d9:a7:0d:b0:be:37:64:64:d4:7e:1b:0b:03:c3:51:
                    9a:5d:de:15:5f:0c:fc:d0:98:fc:c3:b8:e0:a0:88:
                    37:80:9c:7f:f7:40:0a:ce:00:72:dc:4e:50:a9:9b:
                    e4:4a:68:a5:9f:44:5d:26:a7:9e:70:11:8d:58:89:
                    dd:75:d1:9b:70:45:43:b7:3f:90:fe:79:f6:0c:1b:
                    68:3f:74:39:20:1e:71:6d:21:ea:d7:36:a5:f6:e6:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:FE:57:37:3B:A5:A8:6A:9F:4F:C2:C4:90:9C:60:44:58:D5:6B
            X509v3 Authority Key Identifier:
                keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b1:59:92:12:db:f9:13:49:1e:3f:ca:88:af:bb:7d:d6:7e:
         c9:11:70:89:e3:94:b7:22:b7:aa:9d:92:28:cb:a0:e0:23:da:
         26:b9:8c:da:57:e3:ce:7c:95:6b:4f:5d:f2:29:0d:3b:85:29:
         83:3c:8f:38:4e:22:6e:06:15:c4:c6:0f:4b:76:ba:35:85:ff:
         8e:94:41:52:23:93:cb:9a:c8:6f:c5:87:9b:f6:9d:d1:f3:c6:
         2f:86:5f:48:0b:80:1a:cc:84:05:1a:e2:23:9e:78:ff:58:eb:
         27:1a:9c:96:78:41:8f:45:89:1b:be:9c:b0:a9:2d:84:13:9b:
         00:ca:62:9e:85:a4:0c:a3:7b:89:73:b3:bf:73:a3:7c:12:09:
         94:81:09:aa:de:6f:22:7c:58:08:9c:01:f0:c7:86:f9:b2:0e:
         ea:26:77:36:65:04:31:5b:6c:75:fa:3f:47:2e:55:aa:42:58:
         d4:d9:e8:a7:d3:e1:d0:5a:1b:b5:61:36:d1:2a:07:19:37:d4:
         2c:4a:07:51:30:40:ee:f0:ee:15:9a:81:5b:49:30:2f:a6:38:
         53:62:b3:f6:2b:48:93:75:50:f2:8e:24:9b:3a:1b:c6:b6:88:
         b7:37:20:1f:f5:60:48:ad:99:dc:98:3f:b3:d1:c5:8d:fa:1c:
         44:dd:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:07 2026 by rpki-client