Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File:                     aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier:          lOCHM/2m0dC2FKDiSzyyVA8Gw2CS2/7wODgqlkaWlf4=
Subject key identifier:   C1:DE:C1:CD:5A:7D:19:ED:51:88:6E:D5:AE:1A:0A:51:9A:5D:B2:E8
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer:       /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial:       019FAC08650272A252EE3565EA22357EC9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number:          062F
Signing time:             Wed 29 Jul 2026 04:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:58 +0000
Files and hashes:         1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
                          2: LrkAE9AJMIk4TOJUHMpyNfOgBGg.roa (hash: 2jzFr0XcYVi6XRnDyhJaxPz64QN8ivIhx4Kvb2zHpWA=)
                          3: Mb5hn-BrCPO5ljPCFkaRQWFxy60.roa (hash: 2KV69LWwY9eLNuOy/5Lkz4QVj196TWk0BA1Ob7uPslc=)
                          4: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: ZE5apcEy9ngmEWFtY/YBaaAV3DXhjAXNWXtCLktW9u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:65:02:72:a2:52:ee:35:65:ea:22:35:7e:c9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
        Validity
            Not Before: Jul 29 04:00:58 2026 GMT
            Not After : Jul 30 04:00:58 2026 GMT
        Subject: CN=c1dec1cd5a7d19ed51886ed5ae1a0a519a5db2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:53:4c:20:9e:8f:a9:53:13:df:59:21:6c:
                    09:e8:e1:e5:a9:54:74:37:77:a5:48:57:6e:7b:08:
                    af:35:70:01:80:e2:77:04:9b:94:85:11:46:0c:71:
                    5f:85:79:c6:8f:9d:16:0f:a2:b0:1c:2d:6c:70:4d:
                    d8:9e:c6:2e:b8:4f:e7:1b:91:e5:ff:01:91:08:47:
                    28:1d:3c:49:65:06:30:8a:70:ff:ad:3b:2c:33:53:
                    a4:28:05:91:eb:cf:bc:64:f6:1e:a8:96:53:7c:2e:
                    26:0f:c5:25:c0:d2:f2:ab:8f:b6:7c:97:11:21:98:
                    ac:85:e2:0e:61:68:49:20:70:89:98:e1:d4:7f:63:
                    75:44:4c:25:38:ac:ef:19:c1:54:fb:f2:75:fd:3c:
                    18:e5:e4:ea:ec:80:10:4c:a5:42:fa:cc:56:b9:2c:
                    b1:7f:32:9c:cd:79:1f:b4:e2:4d:e8:46:ce:90:b7:
                    94:4d:72:2f:09:ed:6f:5f:18:68:0f:c0:5f:a6:0a:
                    fc:90:6a:5a:a4:1d:6e:81:27:a5:f0:24:3f:56:ea:
                    f8:bd:ed:41:1b:c6:e1:ce:f0:dd:73:b6:58:69:49:
                    27:e9:3a:66:14:68:5b:6d:72:dc:f6:73:6c:0a:de:
                    7c:70:78:10:1c:95:a7:fd:d1:6d:6b:ff:2a:85:05:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DE:C1:CD:5A:7D:19:ED:51:88:6E:D5:AE:1A:0A:51:9A:5D:B2:E8
            X509v3 Authority Key Identifier:
                keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:64:8d:0f:e6:b2:c6:0c:2d:e0:3c:94:4c:a2:2d:27:aa:
         2b:92:aa:bc:89:ff:ce:0e:09:ef:ef:db:d0:73:99:9d:62:db:
         e5:e6:f3:71:86:ca:39:b4:78:bc:fc:5d:f7:48:6c:34:ef:07:
         a3:c0:53:aa:d4:0d:38:2d:5d:8b:84:32:cb:39:4c:03:5b:70:
         63:4f:e2:27:13:49:b5:df:fe:02:f2:20:ba:40:85:0a:77:a4:
         c2:50:f8:ba:72:a6:56:68:38:05:ec:51:c7:6c:c4:66:1b:46:
         9c:6c:5b:bb:70:13:8c:15:16:ba:fb:04:74:c1:6b:e3:15:cb:
         3a:7f:cc:d0:7c:00:7d:fc:28:09:2a:a1:ad:89:00:75:a9:19:
         b8:57:de:9a:e5:a7:f3:99:aa:69:09:5e:bb:23:9d:ad:65:27:
         74:46:c1:35:8c:73:db:65:a6:44:3e:5f:49:a0:85:77:be:fd:
         9b:f8:56:18:f2:6d:a8:ee:5a:ea:3d:f6:47:ce:76:db:e9:67:
         10:78:c1:0d:c5:89:da:d9:10:35:ed:18:ca:ab:cd:b3:58:60:
         99:e2:ce:fc:09:bc:8a:7a:2a:fd:ea:94:05:70:fc:15:7e:cb:
         d3:aa:25:d1:36:62:71:28:56:6e:13:c0:f9:14:78:37:8a:3c:
         b9:d9:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:20 2026 by rpki-client