Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File:                     AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier:          8xgHKYd/X3iefgkqFtzwk0xUk5S1eJGzo4MPMb4yUR4=
Subject key identifier:   EF:DB:24:AE:2E:02:28:84:B2:18:B6:FC:5A:05:E5:60:5C:4D:4A:65
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer:       /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial:       01A0D98389E944C3272AF1DF33B7B5EE5CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 17:01:11 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:11 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:11 +0000
Files and hashes:         1: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: qWFlXB/BEGgF9djcrSg7pt7N7D3wgU9G3V56740rcSs=)
                          2: uJRDK81LaOJPqwaMH3aOr8mzVc0.roa (hash: kDLHQO0Rz/R4i/HPTjDis1WgRXCxP6QcVEL1nIljmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:89:e9:44:c3:27:2a:f1:df:33:b7:b5:ee:5c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
        Validity
            Not Before: Sep 25 17:01:11 2026 GMT
            Not After : Sep 26 17:01:11 2026 GMT
        Subject: CN=efdb24ae2e022884b218b6fc5a05e5605c4d4a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:b0:2e:1a:9a:3d:66:77:bf:f5:34:bd:b1:
                    2d:ff:30:4c:92:f4:56:27:98:ce:a2:9f:5b:cb:66:
                    72:08:c1:c3:31:78:ae:de:83:ed:dd:a5:67:fb:90:
                    3f:31:cd:4a:55:39:fb:2d:68:57:ff:cc:72:89:13:
                    78:19:18:93:60:8e:52:e5:09:84:f7:7e:2d:68:06:
                    f9:e1:23:27:13:58:ee:d0:02:59:cb:e4:b0:50:d2:
                    6f:29:e6:69:c0:9d:81:db:bc:9d:a2:93:61:91:a2:
                    db:a8:4b:0c:0f:90:c0:ae:6c:84:48:8e:ca:8d:b2:
                    7a:80:2e:1f:da:f8:63:5f:9b:51:eb:d8:e0:b7:db:
                    9c:19:f5:0a:92:b3:cd:0f:7b:54:6e:86:db:82:dd:
                    bd:e6:e0:99:e2:d2:2c:5a:a7:f9:b7:44:f2:18:23:
                    2b:4f:3e:8f:6d:78:37:7b:b1:63:1b:99:fd:81:8f:
                    73:0a:ce:c0:98:0b:26:39:98:d4:f8:d4:9e:e6:c9:
                    ca:c3:9c:65:31:e2:da:1b:f2:cd:b5:e2:ef:1c:96:
                    03:9f:2b:50:c1:0e:6d:89:e8:4e:24:85:c1:6d:d1:
                    44:e3:b8:f3:a3:11:2b:39:e5:1a:53:5e:b8:5e:5f:
                    04:54:d2:ed:42:0b:88:cd:b3:7f:7b:3e:31:0b:8d:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:24:AE:2E:02:28:84:B2:18:B6:FC:5A:05:E5:60:5C:4D:4A:65
            X509v3 Authority Key Identifier:
                keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:be:cf:83:56:70:86:13:5d:ee:69:d6:bb:34:09:96:44:
         63:b0:1b:a0:f6:3a:00:75:57:63:69:fd:94:d3:53:2e:92:02:
         86:d5:de:22:8e:b2:55:c6:ed:08:fa:6b:76:f5:d1:3d:67:9d:
         32:13:0d:9f:31:6f:5a:c4:a9:d7:9e:56:1c:75:cd:1c:4b:15:
         96:92:57:da:15:09:ed:b9:51:4f:c9:2f:54:90:31:18:fc:b1:
         8a:2d:37:cb:8a:3d:d4:1e:2f:23:a2:89:50:b7:aa:8a:ba:96:
         66:a6:40:de:87:b2:ec:ba:47:bc:47:5d:0b:a1:20:5a:19:dc:
         b1:d4:68:87:e6:39:d2:09:3e:62:5f:c7:d4:c0:d5:9d:a5:e8:
         fc:57:b2:07:d0:54:78:f5:d1:62:97:32:60:e8:84:31:21:62:
         26:e3:36:22:43:16:53:29:ee:bf:55:dd:d6:5c:fa:0f:4d:52:
         66:bd:df:f1:52:b6:7b:2d:84:17:fb:93:38:e6:77:f3:79:a6:
         07:61:17:df:53:93:fa:a7:d8:b4:8b:9b:1d:52:cc:82:23:38:
         56:08:62:02:80:38:85:57:99:fe:e2:31:c2:a7:08:53:26:3c:
         7a:b5:60:4f:21:6f:01:c2:10:06:85:44:e5:fb:19:2a:74:8e:
         36:28:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:33:13 2026 by rpki-client