Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File:                     AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier:          JKAKbJiX+hzwR+7QqMwBY+cTC2395dhBd+HtgecNbxk=
Subject key identifier:   E6:4E:FD:A5:8A:6C:95:E0:5B:A5:F4:AD:BB:5D:A3:1F:38:A3:99:02
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer:       /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial:       019EC25C7BAA8BFFB36703E9B80FD7762A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number:          04A0
Signing time:             Sat 13 Jun 2026 19:01:41 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:41 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:41 +0000
Files and hashes:         1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
                          2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: WYZr08NqWr1Gj8ZxDim6y5RRn54u+F/ieKV4UgqJX5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:7b:aa:8b:ff:b3:67:03:e9:b8:0f:d7:76:2a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
        Validity
            Not Before: Jun 13 19:01:41 2026 GMT
            Not After : Jun 14 19:01:41 2026 GMT
        Subject: CN=e64efda58a6c95e05ba5f4adbb5da31f38a39902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:95:b9:cf:64:4f:43:eb:29:20:57:01:1a:
                    6c:22:a4:2c:45:1f:a7:f7:50:49:f7:89:50:0a:03:
                    36:26:3e:65:8c:2a:6a:61:1f:34:79:11:8c:1f:5d:
                    fd:c4:2d:71:88:4c:1b:bf:64:4f:1e:17:17:63:76:
                    75:cc:ed:24:cd:24:db:3b:d1:07:5f:18:f0:fc:1e:
                    1d:e0:e7:31:81:53:80:0e:aa:4c:87:d1:6f:bc:1f:
                    58:87:e9:0c:65:ed:38:6a:42:b6:f5:8d:97:3b:49:
                    fa:27:86:b0:8b:54:27:2e:af:b7:eb:fc:29:67:d9:
                    fa:93:5b:2a:1a:f2:be:ae:3e:f4:f1:4e:f7:4b:26:
                    3d:2d:f8:16:9e:01:78:ce:cb:96:d9:76:e5:0d:c0:
                    fc:fd:61:36:fc:ad:dc:fa:86:ef:b2:a7:b0:7c:79:
                    13:79:06:6d:46:8d:1a:b5:7f:59:a2:22:35:bd:f7:
                    4e:10:cb:58:da:61:47:5c:3b:d5:f0:44:f5:9f:8f:
                    60:c7:41:a8:9a:11:07:d2:92:bd:8e:f9:1d:d2:ef:
                    5b:9c:14:34:48:46:da:84:08:c4:5d:d0:8c:78:58:
                    85:e3:f7:68:6f:9c:92:8b:ac:37:16:a5:f5:12:80:
                    6f:b1:cf:a7:3a:f8:12:b0:c3:11:50:ec:c0:f8:65:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4E:FD:A5:8A:6C:95:E0:5B:A5:F4:AD:BB:5D:A3:1F:38:A3:99:02
            X509v3 Authority Key Identifier:
                keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:89:6f:44:94:6e:9a:92:04:81:69:e6:15:5c:a1:5b:e5:
         9b:b6:9e:ef:b3:89:dd:ea:e8:6a:28:ca:fe:3d:94:ee:9a:b2:
         21:8d:06:a1:9c:aa:68:7b:ca:b0:d4:f4:a0:a0:04:e1:ed:e2:
         dc:5c:16:b9:eb:2a:fc:44:4c:8a:d0:7e:07:2c:83:3f:b4:d8:
         77:8a:ce:3b:8e:29:16:9a:ba:ca:df:fb:e5:09:1f:c6:9b:4a:
         84:27:ef:47:c4:bf:e7:2b:c6:63:6a:03:65:0e:4c:46:29:44:
         4a:48:e9:78:10:9f:20:83:68:6a:3d:bf:74:4f:5e:77:d1:ef:
         62:ab:2e:c6:1a:ef:3f:81:43:c1:0d:84:4e:c5:a5:0b:e7:03:
         88:e0:7b:ff:c3:39:ac:a6:7a:5c:5b:fb:42:67:69:36:ba:90:
         e2:09:bf:59:2d:a2:9b:ca:9b:03:9f:8f:c5:fa:8c:c4:c6:77:
         31:da:32:ce:5b:59:49:df:d3:71:e1:e7:f1:41:b8:d5:cf:fd:
         ad:69:40:1c:1a:39:77:2e:42:f6:ae:98:93:97:c6:29:07:bf:
         a3:e0:4d:6d:1c:94:97:1d:bb:84:b7:5e:ef:42:9d:bb:bc:fe:
         b3:d9:6c:49:39:1b:78:ee:79:3c:ea:39:07:5c:d5:c9:43:53:
         25:5a:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:51 2026 by rpki-client