Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          +jMYUmACF+hZEoARvP41TtcQ54UtiUKS5Ylkvmyy2Mw=
Subject key identifier:   6C:13:1A:56:8E:56:7B:E8:ED:5C:84:34:D6:2B:3B:9C:90:B6:43:F6
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       019D9999B2A23A7FF01C75EDDEF4A312A571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          0686
Signing time:             Fri 17 Apr 2026 04:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:19 +0000
Files and hashes:         1: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (hash: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=)
                          2: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: oVfFr1oPFSia2k54wB4BaKCZYcbTLwrny31z/iZWBz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:b2:a2:3a:7f:f0:1c:75:ed:de:f4:a3:12:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: Apr 17 04:01:19 2026 GMT
            Not After : Apr 18 04:01:19 2026 GMT
        Subject: CN=6c131a568e567be8ed5c8434d62b3b9c90b643f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:ef:c2:7c:b4:9d:74:05:c2:5d:a0:01:34:
                    c3:05:2b:a1:cb:7b:c9:d0:ac:bc:20:10:66:e0:4a:
                    d1:29:de:26:fa:29:4e:bb:f3:2a:b6:03:b6:a3:cf:
                    8e:49:93:52:a4:02:86:28:d2:a6:1c:b5:08:5e:26:
                    f4:fb:6b:68:97:d3:03:f2:c4:07:42:79:57:4f:1f:
                    2f:ff:b4:55:9e:01:cc:e6:9b:44:d6:8c:d6:9e:9a:
                    9a:e7:bf:d9:67:82:74:d0:e2:db:9e:01:de:76:7e:
                    4f:1d:a7:97:1b:92:d8:c6:8d:3e:4f:8e:65:97:41:
                    13:31:ba:53:de:04:11:4e:93:c9:7a:2d:09:d2:3c:
                    09:dc:72:5b:9e:df:69:51:36:7e:97:7a:c1:25:07:
                    59:a3:2b:9f:03:42:bb:1d:c0:32:49:c7:5c:6e:5f:
                    fa:e2:45:03:57:5a:81:6d:75:e2:7a:38:33:d3:3f:
                    f6:21:0e:48:6d:f6:01:8c:ff:95:26:d1:9e:a2:35:
                    9f:6f:07:91:46:28:8f:61:7e:61:68:9f:aa:ea:c6:
                    0e:28:d5:93:f8:31:aa:55:3c:fd:82:16:ab:e9:9e:
                    d2:8c:89:e7:5d:8e:4d:01:12:68:bf:ca:c5:a9:64:
                    fe:a3:f7:f1:4d:e4:6f:07:3d:ce:61:a2:e4:7d:c8:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:1A:56:8E:56:7B:E8:ED:5C:84:34:D6:2B:3B:9C:90:B6:43:F6
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:a0:f0:bd:eb:c4:4d:d3:1a:60:ef:83:64:2e:15:67:03:
         14:77:ac:03:74:75:6d:ae:eb:32:c6:a8:b0:d6:3d:78:36:3c:
         dd:ed:b7:1b:9e:dc:7a:b4:17:5a:4d:85:5e:ea:2f:49:c1:73:
         95:a3:4b:8f:26:61:11:3b:b0:87:d2:41:fe:cf:e6:b8:c9:93:
         cb:79:f1:10:15:d3:d8:22:2e:38:a8:b9:c4:99:7f:1a:e2:ec:
         81:ec:64:a2:2e:22:fe:29:01:a7:2b:d5:81:fc:48:3f:20:53:
         c9:65:8f:35:83:79:5e:7e:41:34:cd:a1:d8:65:14:99:3d:2c:
         57:37:d7:7d:82:91:85:9c:ef:52:11:27:9a:30:19:3e:c8:a2:
         1a:ac:ff:8e:86:5d:75:57:d4:cf:9c:e8:3d:5c:99:e8:ff:62:
         48:86:73:0d:ea:50:96:26:fe:1d:4b:d2:21:71:ed:3c:a7:44:
         a3:e8:2b:8c:81:45:ec:61:6a:7f:47:7d:4b:7a:f2:97:f5:b3:
         7d:26:20:5a:a4:9b:f8:17:c2:d7:80:77:df:f6:3a:4c:da:2b:
         df:59:9c:45:54:15:c9:f8:8b:43:a5:d0:77:66:5a:9b:2c:76:
         1a:3f:7d:30:9f:ee:62:67:4c:8c:78:db:b5:d2:4c:2f:4c:71:
         77:3a:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:33 2026 by rpki-client