Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          +xWehHbcGJzSIcgX61eHh4P1gyW0ui3TqNQbjYLUrtI=
Subject key identifier:   67:C9:7D:6C:D1:8D:20:FE:96:6D:9D:6A:3E:60:BD:6F:C4:E3:C1:B5
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       019EBEED162C503E2FDF7E7C2CB899D1147A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          08CA
Signing time:             Sat 13 Jun 2026 03:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:09 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: YamRhUmEk+C7z53pYZTAg9GETPKm+YPitLfImmes1T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:16:2c:50:3e:2f:df:7e:7c:2c:b8:99:d1:14:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Jun 13 03:01:09 2026 GMT
            Not After : Jun 14 03:01:09 2026 GMT
        Subject: CN=67c97d6cd18d20fe966d9d6a3e60bd6fc4e3c1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:4b:75:04:41:f0:42:70:a6:b4:f4:5c:00:
                    03:1a:85:54:bf:ec:f0:4c:38:1c:3e:09:f5:01:00:
                    12:00:7e:64:eb:d0:cb:7d:d9:72:80:c4:dc:d4:30:
                    5e:bc:e8:46:6f:c3:2b:b1:95:2d:60:5b:22:c1:a0:
                    44:86:07:e8:29:27:14:90:36:b3:db:21:d0:c4:08:
                    4b:6f:b5:9f:2e:af:6d:8b:d5:5c:19:2d:d1:fe:43:
                    28:a5:8e:26:91:44:6c:6e:df:21:8b:d7:5f:ba:dd:
                    17:17:58:e4:5b:7f:26:09:e3:23:32:56:d3:df:21:
                    65:5e:8d:bf:21:cc:f9:8d:21:57:b6:ad:f9:e2:23:
                    53:41:eb:78:af:f7:19:71:94:4e:4c:6a:e5:38:a4:
                    ec:b7:5f:37:8a:7f:f2:c8:36:4a:44:c0:43:6e:93:
                    b0:01:e9:d0:51:c5:21:6d:f5:2d:bd:de:73:fd:ce:
                    31:d3:af:f8:85:47:16:5f:28:e9:b5:87:f2:9c:ab:
                    fc:1d:64:0d:79:32:f8:27:2d:b2:d8:54:d3:f5:16:
                    34:15:62:67:ae:5f:dc:c5:45:3f:aa:77:36:4d:9e:
                    cb:33:24:7b:e3:1b:de:ca:79:fc:a4:6e:c9:74:1f:
                    27:67:2d:1c:4b:d2:ff:19:94:00:7d:09:34:18:db:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:7D:6C:D1:8D:20:FE:96:6D:9D:6A:3E:60:BD:6F:C4:E3:C1:B5
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:a9:27:02:b1:89:80:79:29:2c:c4:69:61:f9:c3:d3:93:
         6b:81:60:6d:1a:5a:2a:65:65:17:38:bb:48:da:a5:77:c0:57:
         c7:7c:09:3f:86:e0:e6:02:2d:9c:02:e5:be:81:ed:58:0b:f8:
         cb:27:65:16:d9:18:6e:8f:c6:bb:1b:78:43:ef:b3:8f:9e:a8:
         61:fa:49:0b:b4:ce:70:db:a0:b7:5c:fe:56:e6:f3:df:3d:52:
         ee:6c:e4:ee:dc:ad:46:4e:ad:26:fd:cd:8c:a5:81:b0:73:75:
         3b:43:9c:4f:7b:5f:24:72:59:be:ad:ea:c4:74:21:88:2e:70:
         b0:8d:92:1d:f4:a2:cc:ce:d2:6d:c7:38:0d:92:73:92:0c:e8:
         a4:53:dc:be:fd:6b:73:33:c9:9b:16:c8:a4:5b:dd:d4:7e:1b:
         46:8f:65:23:ef:86:27:ab:46:c8:7a:4b:66:93:dc:71:fa:6e:
         ff:50:bb:3f:8c:f4:7a:5d:4f:dd:da:03:a2:a9:43:3c:48:d4:
         30:7c:af:2c:97:76:6e:79:a0:ab:13:ec:83:2b:4a:b8:d2:c7:
         c9:ee:ae:52:0d:d1:c0:e7:a2:49:01:70:1a:5b:02:6f:fa:27:
         6b:30:33:58:e4:93:7c:e0:1d:e1:41:70:3d:6b:ce:9a:d4:e7:
         33:1f:6c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:32 2026 by rpki-client