Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          BpULBmpQzqkO0B/VpfZVdc1tmwGp28zvri7bSPi1DmM=
Subject key identifier:   6A:D0:F0:83:64:78:79:9D:50:BE:9E:07:2B:EA:9B:C3:8F:16:B3:39
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       019CAC0FE8429283C5A96E67685F794EE21D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 01:00:49 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:49 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:49 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: CiHVfQJQmTiaU11Dl2GdrDUyjWtFUTaTKTNyAzyQjGQ=)
                          2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e8:42:92:83:c5:a9:6e:67:68:5f:79:4e:e2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Mar  2 01:00:49 2026 GMT
            Not After : Mar  3 01:00:49 2026 GMT
        Subject: CN=6ad0f0836478799d50be9e072bea9bc38f16b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:24:13:35:77:82:08:0c:70:4d:34:69:83:
                    3e:c5:6b:e0:42:a5:01:99:59:ad:64:23:ae:a2:31:
                    b6:d1:ce:b9:82:48:f8:42:63:2e:f0:88:0d:44:07:
                    28:e3:1c:51:36:9d:c9:58:3d:d5:15:a6:d6:43:d4:
                    95:bd:1a:51:66:0f:c3:23:8e:f8:57:3a:2f:d1:2f:
                    ad:48:48:1a:99:8b:e6:0c:26:46:a9:e4:4a:38:97:
                    61:54:ca:20:d1:62:35:9b:cb:a5:72:16:c6:d5:22:
                    b7:c9:08:92:02:7c:df:11:bd:27:70:68:0e:4a:3d:
                    06:c8:3a:bf:4d:bc:25:63:70:4a:95:f1:15:d7:00:
                    51:2d:e8:73:4e:0f:e2:3f:80:58:6a:fb:ee:d4:27:
                    4c:f9:82:15:08:29:81:0f:e8:4b:cc:9e:42:76:92:
                    7e:0a:fd:46:e2:a1:97:94:07:3b:96:9f:c9:ed:2a:
                    56:13:72:15:76:07:be:f4:47:99:59:96:04:68:0a:
                    2e:e2:cd:83:65:cf:a7:18:39:b8:48:51:cc:d4:84:
                    b4:4b:b2:43:ad:d5:6a:18:b8:9c:50:db:b6:e3:9c:
                    e8:78:eb:37:6e:53:e2:e3:8e:48:6a:05:36:9c:e3:
                    27:57:d3:28:f7:ae:ef:03:7a:ed:60:54:d1:2a:3f:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D0:F0:83:64:78:79:9D:50:BE:9E:07:2B:EA:9B:C3:8F:16:B3:39
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:90:69:a8:98:c0:4f:49:39:1a:77:00:2d:38:23:17:b0:
         6a:20:e5:61:c2:92:43:80:09:31:50:3e:c3:8f:56:e7:b8:9d:
         44:d6:b2:75:c9:4d:bc:52:a1:45:11:26:3f:e6:b7:f9:ae:00:
         82:2f:14:dc:8f:e4:0b:64:11:ac:a8:24:30:ea:89:11:c6:46:
         e9:36:5b:81:a4:c9:50:76:31:bb:1a:89:3b:45:e2:d4:42:c0:
         32:0c:f1:d5:14:51:0e:73:2b:89:a9:65:84:b7:26:d4:9a:59:
         9f:7a:61:37:a3:5a:8f:cd:e7:a8:5c:a6:ce:17:7a:37:e8:cd:
         26:5f:46:82:37:b8:b1:de:bc:20:a7:3c:d5:05:2c:68:4a:a3:
         c5:95:d6:b8:60:8a:a2:f3:9b:7a:ee:1d:5b:2b:69:71:9e:b6:
         9f:15:df:a3:b8:ee:0d:9d:a1:b6:1a:ae:12:80:d7:92:1f:e2:
         dc:96:77:59:ce:28:c4:fd:00:e0:45:1d:30:b0:ca:e4:18:f3:
         85:33:26:93:3b:34:3a:7a:c8:da:f0:5b:b1:1e:8d:41:fd:71:
         09:05:d9:03:ad:25:72:d9:28:96:d3:a2:eb:32:d3:8b:30:ee:
         0b:8a:ce:38:be:63:78:a6:d8:9c:5c:c8:d4:bc:e9:50:37:b8:
         34:a2:05:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+hCkoPFqW5naF95TuIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk
YjkwYjUwHhcNMjYwMzAyMDEwMDQ5WhcNMjYwMzAzMDEwMDQ5WjAzMTEwLwYDVQQD
Eyg2YWQwZjA4MzY0Nzg3OTlkNTBiZTllMDcyYmVhOWJjMzhmMTZiMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8UkEzV3gggMcE00aYM+xWvgQqUB
mVmtZCOuojG20c65gkj4QmMu8IgNRAco4xxRNp3JWD3VFabWQ9SVvRpRZg/DI474
Vzov0S+tSEgamYvmDCZGqeRKOJdhVMog0WI1m8ulchbG1SK3yQiSAnzfEb0ncGgO
Sj0GyDq/TbwlY3BKlfEV1wBRLehzTg/iP4BYavvu1CdM+YIVCCmBD+hLzJ5CdpJ+
Cv1G4qGXlAc7lp/J7SpWE3IVdge+9EeZWZYEaAou4s2DZc+nGDm4SFHM1IS0S7JD
rdVqGLicUNu245zoeOs3blPi445IagU2nOMnV9Mo967vA3rtYFTRKj/bbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrQ8INkeHmdUL6eByvqm8OPFrM5MB8GA1UdIwQY
MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt
Yzk2YzJjZTg1OWU1LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1
LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcKQaaiY
wE9JORp3AC04IxewaiDlYcKSQ4AJMVA+w49W57idRNaydclNvFKhRREmP+a3+a4A
gi8U3I/kC2QRrKgkMOqJEcZG6TZbgaTJUHYxuxqJO0Xi1ELAMgzx1RRRDnMriall
hLcm1JpZn3phN6Naj83nqFymzhd6N+jNJl9Ggje4sd68IKc81QUsaEqjxZXWuGCK
ovObeu4dWytpcZ62nxXfo7juDZ2hthquEoDXkh/i3JZ3Wc4oxP0A4EUdMLDK5Bjz
hTMmkzs0OnrI2vBbsR6NQf1xCQXZA60lctkoltOi6zLTizDuC4rOOL5jeKbYnFzI
1LzpUDe4NKIFHw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:08 2026 by rpki-client