Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File:                     AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier:          ExonBvqjWrIu4uMRpkTnYEH/ietbzx2XhPQRec1Lg+U=
Subject key identifier:   06:DB:99:A2:27:28:18:53:05:C1:C9:7B:54:64:65:03:56:77:22:CD
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer:       /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial:       019CA9B3A9444E547CCCDAC651FA758B5992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 14:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:49 +0000
Files and hashes:         1: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: iDm2bpzCL4N0DwaFW8WDbtV9Dkuv6f31vA9j/y83m94=)
                          2: uJRDK81LaOJPqwaMH3aOr8mzVc0.roa (hash: kDLHQO0Rz/R4i/HPTjDis1WgRXCxP6QcVEL1nIljmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:a9:44:4e:54:7c:cc:da:c6:51:fa:75:8b:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
        Validity
            Not Before: Mar  1 14:00:49 2026 GMT
            Not After : Mar  2 14:00:49 2026 GMT
        Subject: CN=06db99a22728185305c1c97b54646503567722cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:f1:46:3a:f8:44:52:94:65:bf:3b:81:13:
                    32:3f:51:c9:c4:b9:71:a6:8b:e0:31:50:2a:a2:65:
                    22:ef:fe:37:be:27:25:eb:87:1a:39:e1:0f:3c:89:
                    7e:eb:30:d0:c4:06:ef:ef:7b:0a:c0:f0:b5:f3:7c:
                    dc:05:01:06:26:1b:f5:e9:74:f3:e7:78:a0:e0:95:
                    68:22:28:b7:8b:6b:f4:db:24:82:0a:4c:8a:00:c0:
                    f9:7b:8f:a7:e3:33:2c:de:d2:a1:36:30:e7:23:ac:
                    f3:92:b7:4a:5b:bf:60:e3:52:ea:53:71:c4:34:fa:
                    a3:c7:45:17:36:03:1a:d3:10:ee:f6:0b:0b:f2:d7:
                    72:c1:67:31:27:ee:85:44:e4:f5:ca:9e:28:19:2f:
                    01:97:74:3f:b1:0e:bc:45:79:9a:0f:cb:82:34:1a:
                    5a:52:ca:1f:61:cb:99:5d:38:12:52:e2:c5:f7:88:
                    bf:9e:3e:bd:75:ea:b8:9c:ae:f6:d0:eb:91:ed:3b:
                    4a:11:93:df:4a:03:8b:79:15:21:08:5d:21:a2:1c:
                    56:90:3d:17:2f:94:c5:29:df:08:f5:e1:de:e2:fb:
                    e3:27:b6:49:75:69:ec:13:27:9d:78:ca:6c:33:ce:
                    5c:91:ea:62:af:ca:f2:da:67:8a:1c:99:48:3a:aa:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:99:A2:27:28:18:53:05:C1:C9:7B:54:64:65:03:56:77:22:CD
            X509v3 Authority Key Identifier:
                keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:db:72:92:66:85:d6:3c:d8:85:97:ca:55:3a:fa:8d:28:
         af:b0:d4:ae:0a:e9:50:8d:f8:6c:3a:16:b3:51:6d:04:c0:98:
         65:82:94:8f:1a:97:77:18:7f:c4:af:a6:55:3e:a3:64:8a:7f:
         02:da:3c:54:7f:1a:f7:ec:dd:2e:af:ec:50:15:ed:ea:55:63:
         1a:14:62:ef:7f:fd:55:9f:7c:be:ac:f3:ef:29:33:d0:b3:fe:
         48:18:e1:26:f3:5e:ca:06:af:00:8e:72:cf:0e:e8:57:1c:2b:
         d8:fa:f1:ac:a0:99:00:32:14:af:ae:6a:ab:0d:f2:85:69:76:
         65:df:59:2d:02:31:4c:96:58:e8:f6:be:af:59:1d:dc:ad:b9:
         e7:22:c8:77:27:01:eb:b4:c5:74:b9:03:13:a8:5a:7e:2a:31:
         98:05:a0:9b:1d:a9:14:e5:9f:c2:a6:c9:67:e8:17:43:59:02:
         0a:58:07:c1:ef:fd:f2:70:19:b5:66:c4:53:9f:d4:1b:5c:92:
         eb:f3:58:29:0f:70:b8:ba:a5:8f:a6:38:06:41:7b:0f:31:40:
         c5:4b:93:af:11:10:9b:75:b8:dd:d2:d1:4b:a2:34:f9:af:ff:
         6c:9c:7a:f8:e3:0a:03:23:f3:92:2a:bf:a8:df:50:16:57:5c:
         24:37:e0:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps6lETlR8zNrGUfp1i1mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy
YTc5ZTkwHhcNMjYwMzAxMTQwMDQ5WhcNMjYwMzAyMTQwMDQ5WjAzMTEwLwYDVQQD
EygwNmRiOTlhMjI3MjgxODUzMDVjMWM5N2I1NDY0NjUwMzU2NzcyMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SrxRjr4RFKUZb87gRMyP1HJxLlx
povgMVAqomUi7/43vicl64caOeEPPIl+6zDQxAbv73sKwPC183zcBQEGJhv16XTz
53ig4JVoIii3i2v02ySCCkyKAMD5e4+n4zMs3tKhNjDnI6zzkrdKW79g41LqU3HE
NPqjx0UXNgMa0xDu9gsL8tdywWcxJ+6FROT1yp4oGS8Bl3Q/sQ68RXmaD8uCNBpa
UsofYcuZXTgSUuLF94i/nj69deq4nK720OuR7TtKEZPfSgOLeRUhCF0hohxWkD0X
L5TFKd8I9eHe4vvjJ7ZJdWnsEyedeMpsM85ckepir8ry2meKHJlIOqpuJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbbmaInKBhTBcHJe1RkZQNWdyLNMB8GA1UdIwQY
MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt
YjM4OTViOTYyYzUyLzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy
LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+XbcpJm
hdY82IWXylU6+o0or7DUrgrpUI34bDoWs1FtBMCYZYKUjxqXdxh/xK+mVT6jZIp/
Ato8VH8a9+zdLq/sUBXt6lVjGhRi73/9VZ98vqzz7ykz0LP+SBjhJvNeygavAI5y
zw7oVxwr2PrxrKCZADIUr65qqw3yhWl2Zd9ZLQIxTJZY6Pa+r1kd3K255yLIdycB
67TFdLkDE6hafioxmAWgmx2pFOWfwqbJZ+gXQ1kCClgHwe/98nAZtWbEU5/UG1yS
6/NYKQ9wuLqlj6Y4BkF7DzFAxUuTrxEQm3W43dLRS6I0+a//bJx6+OMKAyPzkiq/
qN9QFldcJDfgxA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:42 2026 by rpki-client