Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          LOhkw4xjmphffd0AvxHDOROzl4AoQQVWX1DFR06TRQU=
Subject key identifier:   AB:61:25:39:AE:E3:9B:9B:A6:33:87:41:E9:8D:6A:49:1C:E0:CD:F1
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       019EC0A41F4B8690FE7FEFCC06DC3461DA28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          0A22
Signing time:             Sat 13 Jun 2026 11:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:41 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: hP5itzY5dLynge0zl3P6R9mxw0J5n34jTHYnylhVlyE=)
                          2: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (hash: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=)
                          3: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:1f:4b:86:90:fe:7f:ef:cc:06:dc:34:61:da:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Jun 13 11:00:41 2026 GMT
            Not After : Jun 14 11:00:41 2026 GMT
        Subject: CN=ab612539aee39b9ba6338741e98d6a491ce0cdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:db:df:64:58:bf:f8:7a:d5:f4:67:25:91:
                    01:fc:65:33:f4:b4:8e:16:a9:e6:0c:a1:21:74:b9:
                    b2:19:a2:53:ae:7a:da:fc:45:47:cc:37:d4:8e:26:
                    ca:69:4b:61:a7:b8:e7:96:77:66:98:8a:e4:97:ab:
                    8e:75:df:0d:d0:d3:e8:cf:64:89:46:2b:6c:8f:2d:
                    4a:9e:1f:5b:f2:de:72:e8:9d:bb:ea:79:15:bc:02:
                    0f:79:82:19:75:67:71:28:fe:5f:99:cb:a1:ea:1d:
                    9d:1b:6f:c3:25:cf:53:86:35:2c:e3:22:27:e3:0b:
                    71:f0:2b:17:ab:d1:9f:b8:65:54:91:05:c9:b8:af:
                    c9:52:36:20:b0:ec:ec:19:28:18:2b:cf:c2:27:a7:
                    0b:4d:3b:46:ad:12:81:8e:38:b6:a4:d3:ed:b5:f4:
                    e4:21:1c:4f:9c:56:9f:34:21:a8:1d:c0:78:10:7f:
                    80:34:ab:ae:bd:d9:d4:73:ab:4d:71:59:de:53:4c:
                    cd:c6:72:17:4a:51:22:70:ed:fb:69:ff:8d:5c:dd:
                    fc:ef:3d:b7:c2:12:dd:c7:9b:ae:59:95:2b:7f:ce:
                    23:c8:c7:19:18:dc:1a:83:4a:c0:35:f0:d0:c4:eb:
                    d9:fa:9d:d5:98:36:a8:33:9f:96:48:9a:b1:fe:24:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:25:39:AE:E3:9B:9B:A6:33:87:41:E9:8D:6A:49:1C:E0:CD:F1
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:da:e2:e7:7b:eb:17:26:8c:89:35:a2:23:10:b7:8f:ef:
         3f:25:a7:ea:6e:fc:5e:f0:7c:15:1e:bb:96:b6:5a:f2:60:0f:
         92:5f:9f:cf:ef:d0:a2:de:91:e2:e3:43:1c:eb:b1:d5:e6:6e:
         ba:ad:a8:51:58:9a:fc:b1:f0:96:11:a4:2c:7d:8e:7f:28:c7:
         ca:77:c8:8d:72:1b:fa:63:b3:97:fa:fa:1f:8a:51:0e:56:7a:
         38:17:ed:8b:5b:4d:89:9b:75:78:8a:e3:d1:7f:d8:dc:02:e4:
         4c:50:ec:8c:d1:66:8a:d0:14:8e:44:ab:0d:dc:b3:99:c6:12:
         1e:c8:ec:2c:38:8d:0d:d3:52:0a:08:ba:df:39:e5:b3:42:0e:
         32:6c:12:b3:69:0b:2a:24:80:4d:a2:85:39:52:b5:d5:07:09:
         94:16:e8:93:06:1a:c4:9f:e1:46:5a:e1:74:c9:ee:2e:81:25:
         10:f5:df:60:e5:5d:4d:e8:a1:aa:86:63:55:96:d8:d8:f9:74:
         d2:07:bc:ac:3b:19:6b:21:58:c8:4a:d1:84:21:1f:6a:51:22:
         b6:4d:e1:6b:3c:15:52:97:7a:3d:38:f5:6b:8a:f8:51:ec:05:
         d0:b0:89:ec:da:53:e9:b1:d6:30:48:35:ef:d2:11:54:bd:c3:
         00:91:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:42 2026 by rpki-client