Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File:                     avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier:          3fkJjCRWmlb0TnzdatN4j7xx8/SyKWnTJspk3l91noo=
Subject key identifier:   51:FA:4B:27:77:5A:66:EA:1C:5B:9A:54:9C:75:12:20:EF:3B:46:ED
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer:       /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial:       019D9999740F1730D778DD2248C65809FC4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number:          0FA1
Signing time:             Fri 17 Apr 2026 04:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:03 +0000
Files and hashes:         1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: yAUOvGVv0rgCehR0QC/AKrGcPjdXLwtRsHCqdcyeTsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:74:0f:17:30:d7:78:dd:22:48:c6:58:09:fc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
        Validity
            Not Before: Apr 17 04:01:03 2026 GMT
            Not After : Apr 18 04:01:03 2026 GMT
        Subject: CN=51fa4b27775a66ea1c5b9a549c751220ef3b46ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:39:80:cb:dc:ca:3a:57:04:0a:3c:6a:dc:
                    fc:00:e2:91:90:0b:3c:d1:49:c9:d5:08:bc:21:cf:
                    0d:f1:ca:6b:92:cc:a3:34:c3:5c:0a:c9:85:18:18:
                    4a:60:26:4c:62:ab:7f:eb:ef:12:f4:cb:dc:10:17:
                    03:73:db:c1:e8:9e:c8:d7:8b:d9:5a:e4:3c:6e:bf:
                    6d:a5:c2:87:11:98:f9:89:4f:60:00:39:c7:1b:a7:
                    d9:c1:ae:63:5c:a4:21:71:fa:73:76:6e:42:ab:ff:
                    af:79:ba:7e:be:a5:7c:97:45:79:aa:5b:25:1c:2a:
                    f4:90:1d:f7:43:02:65:84:e3:f3:22:09:18:db:68:
                    76:4b:19:33:07:4f:4b:b9:f2:b8:0d:9b:1f:75:bb:
                    f9:68:3c:f9:64:d1:6f:39:37:2b:f5:31:49:90:2a:
                    2c:ed:19:cd:91:d3:2f:98:fd:fd:1f:1e:92:32:6b:
                    96:d1:1b:1d:74:72:2b:da:a7:c5:64:14:4a:61:f2:
                    21:c9:d9:d2:6a:43:47:dc:01:97:c6:e2:46:9d:a8:
                    06:b8:43:68:7d:86:04:f1:ce:c6:8f:34:b0:1e:9c:
                    4b:18:ce:ea:3b:56:5a:30:b3:d8:39:a4:27:05:b4:
                    d3:87:52:f2:eb:69:01:16:37:7b:2e:79:1f:41:e6:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FA:4B:27:77:5A:66:EA:1C:5B:9A:54:9C:75:12:20:EF:3B:46:ED
            X509v3 Authority Key Identifier:
                keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:5b:43:5b:e0:2d:7f:be:26:f0:f3:87:b1:5e:f1:1f:b4:
         1e:44:94:b8:8b:b3:42:6e:79:e0:91:19:53:3f:9f:3d:62:ef:
         13:a8:27:1a:24:ed:81:31:f7:d2:bd:9f:7c:db:d8:c1:c7:b3:
         5e:c8:e2:24:68:fe:57:3c:21:06:14:a9:af:c1:68:b4:32:db:
         ec:20:f5:6c:b9:71:d7:60:b4:b0:e5:64:e5:87:08:04:f2:21:
         f5:49:c4:ca:a9:05:b0:e7:a5:72:42:a4:5b:ac:d4:b3:01:dd:
         44:5b:0a:fc:d2:d5:8f:68:4f:57:73:86:3f:a4:4a:d6:f5:35:
         63:f6:f2:80:51:0e:22:dc:e7:d9:40:57:bb:21:25:90:a7:9a:
         c5:3a:83:72:71:11:39:f4:65:2e:6a:92:31:71:36:40:95:22:
         60:ff:8d:31:d7:6c:16:fe:1a:db:8e:5a:2a:22:fc:54:d8:3b:
         64:c0:58:37:18:41:14:d1:7e:db:41:6a:af:7a:4a:ea:48:3e:
         ec:04:a3:b1:04:47:c8:b3:61:f1:a3:64:09:b2:64:50:ef:dc:
         56:a0:44:08:57:09:c1:cf:76:25:42:00:d3:0d:1b:0f:68:5a:
         5c:f7:e2:04:b4:4f:f6:ca:8d:57:87:23:cf:ce:7f:70:0b:95:
         f5:7f:47:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----