Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File:                     AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier:          08tWSsZ2NIwfF3Mfk5XDmLB12jOxQQDiS/221TkX6tA=
Subject key identifier:   A8:4E:ED:8D:5E:41:A5:21:AF:69:F5:AB:FC:8E:6F:9B:D9:D6:A0:0F
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer:       /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial:       019FAA1A513AFB8F714D74D46A1AEC2C346B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number:          19D0
Signing time:             Tue 28 Jul 2026 19:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:19 +0000
Files and hashes:         1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: FaJ41stdD0AkXS7qh+W64C4C3T96CY8A+ZM9/vezmXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:51:3a:fb:8f:71:4d:74:d4:6a:1a:ec:2c:34:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015921784488add9a05661ff11787ec754e605e5
        Validity
            Not Before: Jul 28 19:01:19 2026 GMT
            Not After : Jul 29 19:01:19 2026 GMT
        Subject: CN=a84eed8d5e41a521af69f5abfc8e6f9bd9d6a00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3a:94:78:31:0c:d2:ee:88:da:78:7e:43:e4:
                    19:60:5e:27:98:46:9c:7d:2a:43:83:66:2b:9f:b5:
                    da:15:1c:d1:e3:40:63:9e:36:30:48:c5:a6:70:38:
                    ce:61:d3:de:b5:44:d0:f4:7d:8a:4a:4c:79:8a:e3:
                    33:ae:d6:d1:7a:56:04:8e:3d:98:08:ad:47:43:6d:
                    ea:00:97:80:07:66:ce:f7:3b:6b:21:8b:6d:b2:c3:
                    d5:5f:99:1b:36:6f:35:33:a2:0b:73:15:b6:8f:fe:
                    2f:ae:68:f8:f0:24:19:4a:d7:60:3b:e4:0f:ba:05:
                    f9:54:4c:43:9d:9c:17:92:3a:b6:57:c8:03:61:db:
                    35:9f:92:53:91:72:76:a4:3d:55:21:be:57:8e:6d:
                    93:2d:b9:2c:fb:e0:d4:84:2a:d6:63:09:9f:bd:ed:
                    6a:b7:1f:eb:22:8c:c5:df:1c:3a:bf:b3:e7:dc:95:
                    49:68:ee:81:fb:82:8d:e0:ef:79:a1:41:4e:f4:8e:
                    c2:7c:26:a9:3f:78:bc:da:e3:ab:38:69:aa:8a:cd:
                    2a:21:26:11:2f:58:32:fb:3e:56:18:04:38:98:b9:
                    1a:57:a0:71:6e:5b:20:26:aa:d8:47:f7:f9:6c:34:
                    51:64:be:86:d9:e8:43:73:57:1b:01:68:3a:55:a2:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4E:ED:8D:5E:41:A5:21:AF:69:F5:AB:FC:8E:6F:9B:D9:D6:A0:0F
            X509v3 Authority Key Identifier:
                keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:d3:80:21:25:53:09:55:4c:3c:15:4a:8d:e5:3f:fd:b0:
         2c:4d:d1:73:d4:3e:3d:d7:3e:c0:76:f0:98:f0:03:34:0f:a9:
         1d:ce:11:b8:9f:5a:03:2c:02:77:7b:aa:05:94:6f:0d:0f:4d:
         c2:36:55:b8:bf:18:00:4e:1e:09:ff:56:cd:5c:2a:a8:27:6b:
         61:39:26:6a:c5:44:01:e2:f7:e5:38:8d:f9:4f:e5:e0:45:5b:
         6a:ca:36:72:dc:79:f8:e4:21:38:41:0f:1a:36:56:f4:f0:b9:
         3d:e5:48:1e:8b:4d:30:68:7c:28:8e:d9:e2:9d:97:80:70:b1:
         9b:e8:4b:0b:49:ca:7e:d2:4c:84:5d:8e:ce:58:e7:4f:97:29:
         9b:ee:8f:66:38:42:5d:b7:e0:bc:4f:0e:bc:52:30:57:bf:52:
         a1:7b:73:67:02:69:3e:19:a3:a0:37:d8:16:04:5d:50:9a:7b:
         36:73:c3:aa:dd:5e:e4:e0:3e:ab:1d:78:75:2d:58:24:40:67:
         25:c6:55:af:c1:de:bf:cc:29:46:62:00:02:9d:ce:fb:5a:6c:
         4a:1c:0e:e3:30:0f:a8:76:d9:73:1f:37:28:44:5d:7f:3d:2d:
         01:97:22:f9:02:41:a1:da:e1:c3:56:92:f6:41:16:7b:e8:4f:
         66:26:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:57 2026 by rpki-client