Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          2dLcCppMRyGVDYpUd7B26YxZv2s/8FvAZV/CmJaOftw=
Subject key identifier:   E1:8F:F3:7B:9E:2C:85:CE:BF:4E:A4:1B:BF:FA:DC:9E:CE:DE:82:D2
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       019FA974D4566D218D02DC3A5AA1D915B357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          19FD
Signing time:             Tue 28 Jul 2026 16:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:33 +0000
Files and hashes:         1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
                          2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: Ix7h5fl/8b1GTMIa+FGYBu9OwyyTVbKfKgeWy0HfxlA=)
                          3: H1KxXkqZfOMz2T0T89-BrBE5VBs.roa (hash: 5203tsZCts099zZy2toRHEDTl1Xyfa7Z86N2Mg2UGgg=)
                          4: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (hash: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=)
                          5: T3bly-tZ9XID-SOloXwH3hTsc_E.roa (hash: aeV/m0RLRp31h+Weu05/IHsjHV2WSBXJFEz0Mww+iyc=)
                          6: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=)
                          7: X0L_WIFrHSaQewTifeIRhTrccl4.roa (hash: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=)
                          8: hVqZbaQ8MeHQybRpaRLjUblswSg.roa (hash: pSX41/t7TR6ni7qxXv88Dsw/Pbc7wwCKoNbXNgfg/qs=)
                          9: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (hash: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=)
                          10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:d4:56:6d:21:8d:02:dc:3a:5a:a1:d9:15:b3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Jul 28 16:00:33 2026 GMT
            Not After : Jul 29 16:00:33 2026 GMT
        Subject: CN=e18ff37b9e2c85cebf4ea41bbffadc9ecede82d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:95:5e:bb:e8:25:3e:47:53:0a:9b:d5:a8:
                    17:34:c8:5d:63:a5:31:72:d6:87:00:1c:8b:32:a1:
                    ff:2a:39:4a:ba:bb:ae:3d:bc:d1:25:2c:36:24:29:
                    65:98:f9:4f:a6:15:97:ec:e8:6e:b1:4d:85:56:59:
                    0b:de:82:f7:db:4a:10:50:08:0f:88:89:c7:d7:06:
                    ba:9a:75:7a:82:23:82:22:4a:ec:50:ad:21:06:fd:
                    13:4f:68:cb:39:8d:09:c3:a4:ca:c1:14:b7:a1:c2:
                    80:e8:aa:63:1d:dd:39:48:e8:07:f2:0f:1b:a4:e9:
                    68:96:72:6c:92:68:92:21:33:14:34:75:51:c8:47:
                    17:72:83:70:b5:a6:6e:e8:ee:3b:63:44:16:40:49:
                    44:bf:52:38:32:2a:55:0b:e0:74:41:3d:53:9e:3b:
                    b2:e2:bd:39:b3:24:a8:d1:9e:00:bc:3a:c9:04:d7:
                    35:db:01:0d:96:60:56:5b:b7:a4:01:d6:9c:0e:06:
                    cc:7c:a1:d8:75:e8:49:2b:87:19:e1:20:bc:30:33:
                    3f:a0:9d:5b:77:36:c1:62:13:1b:0f:80:1f:88:e3:
                    29:5f:7c:c2:11:de:e1:af:78:ba:f0:3b:76:86:53:
                    e4:fa:46:9e:2c:bf:7c:b4:ec:7d:f5:c4:63:e4:db:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:F3:7B:9E:2C:85:CE:BF:4E:A4:1B:BF:FA:DC:9E:CE:DE:82:D2
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:82:59:31:af:b6:96:58:ae:2d:77:fe:d4:3e:17:4e:7b:
         3a:fa:7d:c8:37:57:ba:b3:32:40:c5:f6:99:6d:f3:22:3d:ac:
         a4:74:00:99:8a:09:17:49:63:4e:6f:51:25:5b:b7:15:01:23:
         5d:c9:08:a2:1c:47:00:e9:79:d3:57:60:e2:0f:42:5b:d0:4d:
         a8:25:0e:07:43:7c:37:14:cf:62:f8:48:e4:ca:52:88:18:e8:
         99:d0:20:7c:fc:09:fd:f9:8f:26:ea:4a:48:45:bf:b9:be:1e:
         ae:8b:54:bd:02:ef:d2:d6:04:e6:24:4d:bd:72:6b:d1:f9:3a:
         a3:09:0c:e1:7f:f1:f8:85:14:4b:8e:bb:bb:a9:f3:09:f9:40:
         e3:a0:f4:91:0e:ae:7c:3d:67:98:28:d0:ac:50:15:a6:ab:af:
         2d:84:a6:b3:6d:ee:b8:c1:43:2e:57:be:e8:03:f8:30:f3:d7:
         06:44:3d:98:b7:c6:cd:7b:01:d6:6c:7a:17:bf:45:2f:ca:6c:
         8e:6b:2a:3b:ff:8e:94:43:e8:19:53:b1:a5:99:b8:aa:c3:72:
         87:10:6d:3b:13:1f:47:e8:ae:4d:e8:ea:c8:84:60:9b:bf:4b:
         5c:59:c3:c8:8e:e6:a0:6f:c4:ce:1b:83:2c:e7:3f:8c:8a:05:
         17:0a:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:09 2026 by rpki-client