Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File:                     AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier:          pH/MeUdHWxWHBYGg8/35i41anWFlq4zXeTMAeAR81cs=
Subject key identifier:   AF:4F:44:6A:01:48:F8:19:F1:A1:0D:6F:73:C5:DF:0A:FA:D7:F8:CA
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer:       /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial:       01A1E027B5EC467F772DC92A4FE91E96C5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number:          148B
Signing time:             Sun 15 Nov 2026 17:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:01 +0000
Files and hashes:         1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: 4RNZ3g2GMBQnmGrBdSWHp3fc5AGwMVzHkYzHJyWiGHU=)
                          2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:27:b5:ec:46:7f:77:2d:c9:2a:4f:e9:1e:96:c5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
        Validity
            Not Before: Nov 15 17:01:01 2026 GMT
            Not After : Nov 16 17:01:01 2026 GMT
        Subject: CN=af4f446a0148f819f1a10d6f73c5df0afad7f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:29:f4:09:a7:9c:63:20:89:95:3d:8f:a4:
                    b2:bd:8a:4d:3c:ca:9f:28:1d:25:d8:19:e2:49:43:
                    92:68:b7:a1:e2:09:b7:c6:6f:3d:33:14:7e:ee:0b:
                    a7:f9:ad:18:e2:ba:6d:70:eb:2b:8c:a1:02:33:1f:
                    59:57:cb:11:a2:da:2e:e0:88:18:00:fc:ec:70:d8:
                    b3:cd:2b:e4:c0:21:de:65:60:75:76:ff:83:64:c8:
                    0b:0f:f8:dc:be:8d:35:9f:3c:2d:c1:15:cc:83:a4:
                    52:d6:7b:9a:12:aa:7f:9e:40:c3:b0:56:77:82:3f:
                    0f:e6:42:ef:87:c5:be:72:d2:ef:66:ff:a8:81:5e:
                    d7:13:47:e6:25:4d:b0:5b:b6:5f:21:39:46:1a:ed:
                    d0:31:00:ce:7e:64:97:4e:48:c4:43:d8:63:7d:91:
                    57:4f:0f:9a:99:57:93:3e:d3:c2:b1:9a:60:be:09:
                    45:99:35:08:c8:bb:06:d0:8e:b6:75:ea:1a:fd:02:
                    26:00:5e:b4:d5:41:96:85:3b:fc:a4:c4:c7:e8:35:
                    c7:f0:31:e1:47:38:2e:13:af:6d:ea:6d:c7:7e:f6:
                    2d:98:b7:52:e5:8f:bf:ca:18:62:10:31:76:67:f1:
                    49:dc:b9:66:3e:0c:d7:be:60:7d:23:06:88:3a:0c:
                    e7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4F:44:6A:01:48:F8:19:F1:A1:0D:6F:73:C5:DF:0A:FA:D7:F8:CA
            X509v3 Authority Key Identifier:
                keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7e:69:c6:f6:44:0a:df:92:28:1a:4a:f9:42:1e:ae:67:fd:
         ae:85:3e:fa:41:a5:bb:9c:89:09:23:61:f6:04:81:4c:87:b1:
         60:59:b0:39:c5:c0:c1:84:47:ca:36:92:93:dc:8c:9e:4b:c1:
         ef:ba:ee:cf:b8:88:c7:fd:fb:d8:48:37:c9:f6:63:f6:33:0e:
         16:b3:62:d8:11:fb:5d:5d:5b:32:5d:5e:73:94:1d:43:d3:4f:
         81:8a:d3:ad:89:31:25:c6:fc:cb:49:58:6c:85:65:31:66:80:
         50:03:11:bd:8c:d5:81:e1:8e:e6:03:34:92:7f:ff:0c:25:8b:
         84:e2:5d:e5:11:dc:22:1f:70:c3:1e:8e:7e:30:ee:a4:7e:1d:
         e6:86:55:5f:15:40:b2:f8:2e:2a:1a:7f:9e:0c:96:10:78:b6:
         06:c0:15:79:a1:d2:bc:02:7f:fd:ad:be:22:12:02:01:c8:51:
         c7:31:ed:39:a3:8a:27:ae:46:72:57:04:88:b5:bf:bc:f5:25:
         e6:ed:43:80:68:3b:29:7e:84:fc:1e:a4:e1:4a:2e:1c:51:0c:
         fb:d5:48:52:df:0c:c4:3e:6e:c2:8e:b9:42:e3:0a:28:33:82:
         58:88:b2:c5:a9:33:21:fe:05:bb:ba:b5:d9:05:df:93:f5:f0:
         c1:c1:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:27:06 2026 by rpki-client