Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File:                     AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier:          3YV3k3XSq/NFhtzlB7j13lbbEqZIbOP3U37QCwO1hg4=
Subject key identifier:   5C:2A:20:4B:E7:11:87:0F:05:DF:33:59:24:DB:38:65:C5:C7:85:5F
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer:       /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial:       019EBE7F7EB925F144EAF0757C8B9D194743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 01:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:26 +0000
Files and hashes:         1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: awgeOFWf0u3zU22avHQbh4E5ucygAYQ4IqEJiJXNQdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:7e:b9:25:f1:44:ea:f0:75:7c:8b:9d:19:47:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
        Validity
            Not Before: Jun 13 01:01:26 2026 GMT
            Not After : Jun 14 01:01:26 2026 GMT
        Subject: CN=5c2a204be711870f05df335924db3865c5c7855f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:66:c1:7f:42:63:0f:9e:d7:8d:f9:ed:a1:
                    28:28:6b:47:57:c8:cc:61:29:94:35:88:ba:19:ac:
                    63:67:41:76:51:09:d3:d0:52:b8:44:b3:10:1a:27:
                    46:b9:05:c6:cb:42:d4:a8:a2:18:b4:d6:36:b4:72:
                    06:d0:57:19:e0:b6:36:7e:4e:fa:26:2f:46:d9:9a:
                    04:aa:e9:ab:69:f3:43:94:76:5e:23:73:48:69:f2:
                    4d:ad:0f:cd:1d:64:ea:73:78:66:41:65:01:e4:b9:
                    78:da:d9:d9:cf:ab:85:30:a7:6e:25:1e:a8:df:23:
                    14:ce:82:13:91:89:f5:df:a4:ae:14:f3:50:63:d7:
                    b4:51:6b:0a:2c:8d:10:9e:d3:a2:3c:ea:83:cb:be:
                    e4:ed:0e:e9:6e:82:1e:76:16:bc:c2:63:71:e3:4d:
                    70:1c:d5:08:72:d7:9d:a7:56:a7:7e:45:41:d5:28:
                    41:63:b3:a8:f9:b7:37:c4:b0:69:ce:2a:a2:4a:1d:
                    ae:2a:9f:c1:dd:c4:23:f7:a0:2b:74:bb:e9:35:52:
                    a1:f7:7f:0e:f7:78:68:a4:65:ff:fb:06:7b:6a:5d:
                    21:62:ac:da:7a:55:23:f6:e0:b7:56:44:54:98:09:
                    66:b3:59:07:2a:65:40:85:25:1f:c8:76:62:01:4f:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:20:4B:E7:11:87:0F:05:DF:33:59:24:DB:38:65:C5:C7:85:5F
            X509v3 Authority Key Identifier:
                keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4b:8f:fb:ce:33:e1:50:27:00:ef:c6:b1:75:b8:dc:5f:00:
         53:f0:0e:cb:45:97:94:59:7e:d3:64:11:11:fc:ee:05:e4:f7:
         e0:bd:f3:3a:0c:ed:a9:62:52:7f:a2:5b:9a:42:a3:1a:06:7a:
         d6:e6:fe:2f:d5:76:c6:a0:6f:b0:58:1d:f2:a3:79:52:fa:c2:
         1e:9b:12:9a:47:33:cf:b4:67:b5:a6:46:c2:ad:ed:d6:27:c7:
         1a:c1:16:01:aa:94:40:58:e5:be:97:57:cb:53:fe:f0:ac:e9:
         fb:8a:3b:af:49:2c:f0:ae:77:20:e8:2d:0d:9f:aa:e9:ed:d5:
         d2:1d:be:a6:90:49:6d:67:28:80:0d:28:51:a1:65:71:3e:b4:
         dc:21:3a:e6:50:0d:70:a0:06:0c:f9:c0:07:5c:08:cf:8d:19:
         a5:a1:74:71:89:34:88:03:2f:80:d7:00:f7:95:68:bc:e1:b4:
         55:d1:1a:03:1a:74:4c:b3:20:18:20:4b:fc:44:8e:5d:75:ef:
         3b:44:3e:e5:34:de:72:19:1e:39:ed:0f:45:ef:6e:f1:65:5d:
         5f:10:19:ee:6a:6b:37:bb:2a:be:e3:36:b4:f6:50:ce:0b:d2:
         8b:17:1d:d3:2a:26:fc:36:c2:f4:72:1b:bc:de:0e:44:11:25:
         4e:b3:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:22 2026 by rpki-client