Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          W+11R1jUuDu/q4euIoxOE9rrJOmQt3NZQ7SFJGp2NnU=
Subject key identifier:   55:15:B9:37:28:14:02:32:35:D0:9B:30:25:19:0E:5A:77:BD:34:C4
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019FACACB828532EED782DF2FA0644F26D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          1216
Signing time:             Wed 29 Jul 2026 07:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:28 +0000
Files and hashes:         1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
                          2: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
                          3: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          4: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
                          5: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          6: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: +DJ0dZm+0nRjioCzGF2Tnf0VENv9sCwxmXi30BIZwMc=)
                          7: epCD7ULJHywW7ElNPu9kKqQ44Js.roa (hash: LqD+bmgIRqQGH06YIbpEzuPq7WjpnQb7KbHalEBo4nk=)
                          8: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:b8:28:53:2e:ed:78:2d:f2:fa:06:44:f2:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Jul 29 07:00:28 2026 GMT
            Not After : Jul 30 07:00:28 2026 GMT
        Subject: CN=5515b9372814023235d09b3025190e5a77bd34c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:87:f3:47:80:34:54:1f:3d:ad:a4:6b:9f:
                    9b:98:86:f9:4a:a2:a0:48:3a:b6:41:ed:f4:95:da:
                    b8:4e:6f:05:75:d5:85:1a:79:e0:9f:4c:b8:ce:12:
                    cf:8e:40:4c:7e:c6:47:45:b3:50:19:86:dc:12:35:
                    dd:ce:44:68:c7:3d:d0:2a:f8:6e:84:b6:1a:ae:49:
                    48:16:25:ea:fa:4f:44:a6:8a:f4:93:7d:86:08:4e:
                    83:70:5f:35:03:c0:6f:74:ce:36:58:57:ce:cb:cb:
                    ef:50:ad:ed:01:8f:b6:d8:f7:b9:fd:b3:a8:e0:17:
                    98:87:2d:39:92:52:1f:0a:1f:cd:0e:4d:a8:06:b8:
                    68:aa:14:97:7c:0b:f2:a6:2d:8d:fd:43:00:58:58:
                    40:44:55:f2:25:13:3f:4f:2c:3a:b3:e2:95:90:c2:
                    8d:84:ba:7f:42:26:32:b0:c6:ea:ac:cd:c7:52:39:
                    02:47:ba:74:28:46:28:52:5e:c4:e9:de:37:0d:e7:
                    f2:a8:8c:ce:e0:7c:74:f0:52:be:94:ca:2c:7d:aa:
                    15:b1:9e:f7:a9:85:56:49:e1:5e:ca:51:56:a1:bd:
                    33:21:1e:9e:89:17:3f:9a:01:d7:07:9b:41:e0:a2:
                    42:18:30:35:64:04:b0:39:1f:8f:fc:e0:2e:17:90:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:B9:37:28:14:02:32:35:D0:9B:30:25:19:0E:5A:77:BD:34:C4
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f4:0e:55:af:08:27:8c:be:5f:ab:f9:6e:98:f7:06:1d:70:
         7c:f8:09:3c:eb:d8:94:f9:f6:56:75:28:a1:d8:0e:db:ba:f7:
         c1:d6:ec:0e:1d:05:d0:ab:e6:6f:1c:61:dc:c5:db:de:22:cf:
         5c:be:c2:d9:dc:1e:6c:4e:df:b8:59:96:7b:f7:63:b2:2a:e4:
         e4:a9:59:26:d9:78:f1:7d:b2:86:53:c9:c2:be:60:ab:10:a4:
         69:fa:75:cd:49:fe:8f:3f:a7:86:e7:25:b1:c4:cb:c2:a9:26:
         d1:b1:1c:74:88:c3:fd:2b:09:39:e0:2a:60:cc:39:3a:d0:3c:
         d9:8b:0b:47:9e:49:0c:43:03:50:16:69:4d:13:ad:e1:25:e2:
         f7:25:6b:cb:e9:75:8d:c7:87:69:86:2f:06:af:f4:2c:a7:1d:
         15:9e:a5:b4:5c:25:d4:9a:52:b3:f9:5e:aa:6a:0b:64:d0:96:
         f9:36:60:d1:64:ae:90:2a:bc:a6:6c:c3:05:57:0a:94:40:31:
         20:d9:60:90:6a:56:cc:04:6b:ec:35:55:ef:48:48:9c:27:62:
         6a:cb:cf:03:92:48:44:63:d2:99:b9:83:17:d5:cf:1f:19:48:
         f7:46:d5:92:d9:99:24:37:74:e3:1b:a0:b5:42:59:02:6c:45:
         96:a4:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:13 2026 by rpki-client