Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          ufSuQ+lupZxrKrVJXhzG9vUtZmerPvYbvEQ2ZHR24jQ=
Subject key identifier:   70:1F:04:A9:93:5A:5D:65:46:6C:C8:00:23:6C:CF:D6:BC:73:18:B6
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       019FABD13003E36CDA7672FE6CF6BDC5B1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          1718
Signing time:             Wed 29 Jul 2026 03:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:40 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: TfT3L8+mtqC/qxmPdPEZz5iAlh+Lv8WjA8/bYRlTEec=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:30:03:e3:6c:da:76:72:fe:6c:f6:bd:c5:b1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Jul 29 03:00:40 2026 GMT
            Not After : Jul 30 03:00:40 2026 GMT
        Subject: CN=701f04a9935a5d65466cc800236ccfd6bc7318b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:47:ee:cb:67:84:3e:b5:7b:22:40:4e:b4:
                    50:0c:a3:25:18:20:06:15:a0:cf:1e:dd:28:9e:b7:
                    99:37:d9:b2:8c:3e:7f:50:a6:1e:95:8c:39:db:8f:
                    00:8c:a0:57:1a:8f:cb:b4:27:ca:90:e0:29:74:a3:
                    32:7d:0b:2b:1a:1d:d0:29:ad:d2:16:c1:c9:8a:1e:
                    7a:29:ba:b5:43:1e:a4:f3:bf:45:7c:6b:10:ba:91:
                    75:97:3e:2c:59:f0:3d:55:31:31:e1:5d:92:0e:f5:
                    c9:99:2f:7b:04:76:71:20:c1:6c:ae:2c:26:7f:d9:
                    d9:f8:de:60:ac:8d:af:47:c7:eb:ec:1b:97:da:40:
                    8a:f6:a0:b7:6c:1b:d0:03:e8:5c:16:a3:9e:94:34:
                    f6:57:d5:de:45:05:32:99:23:b5:d9:1d:e4:c4:96:
                    0b:ce:d8:91:fb:70:e5:75:2d:c7:e5:56:3c:f5:12:
                    c2:9d:d9:b6:63:d9:b7:0d:f3:d7:e0:5f:82:51:fb:
                    86:f2:19:77:f1:ec:7e:5e:da:a5:cb:2c:07:ab:2d:
                    2c:65:7d:1a:4b:98:b8:35:59:1a:da:0c:0d:53:96:
                    64:90:1d:e1:59:83:9a:16:af:96:7d:6d:89:05:98:
                    19:29:16:a8:88:82:ef:4d:26:3d:5a:bf:31:ae:91:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:04:A9:93:5A:5D:65:46:6C:C8:00:23:6C:CF:D6:BC:73:18:B6
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:23:6e:cf:12:c0:78:74:ad:9b:d6:ed:2d:d9:09:75:eb:b6:
         1d:ba:55:53:4c:31:4c:33:0e:33:d6:4b:29:f4:63:c5:e0:b6:
         27:a5:23:d0:17:f0:cd:a0:19:45:42:27:3c:bc:cf:70:52:a4:
         5e:b0:5b:09:b6:21:90:20:97:a4:7d:57:6a:b6:86:91:0a:9c:
         d8:a8:a3:7d:cf:83:ac:3a:df:8b:bf:c8:d4:43:5c:85:49:88:
         3b:9e:56:e7:2e:81:0e:4d:3d:70:60:cb:82:a0:ad:2b:3b:49:
         bc:f9:ad:9d:b9:eb:a7:30:9e:c0:af:37:46:a2:88:6b:71:5c:
         ed:01:6f:3a:07:bb:82:51:3f:ce:97:16:b1:b6:e2:fb:18:a1:
         fe:a9:d9:7f:de:28:2f:f4:a6:6e:ac:ec:ae:e6:63:00:d7:4a:
         d5:08:f4:c8:35:72:c4:a5:ba:96:28:10:4a:a0:80:c0:5c:c6:
         c8:6d:ab:c6:64:59:9e:d6:7b:4a:9f:49:64:d6:df:c2:76:94:
         58:c9:92:1a:ac:ba:aa:cd:17:1d:a4:43:b1:21:06:84:a4:01:
         ff:47:d5:d1:7c:ef:80:5e:59:12:38:a8:a8:6d:8c:e6:3d:3d:
         f7:e2:50:b0:0f:7a:1c:98:22:af:39:3c:0b:99:ce:65:f2:c4:
         50:a3:78:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0TAD42zadnL+bPa9xbH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1
NTBlYmQwHhcNMjYwNzI5MDMwMDQwWhcNMjYwNzMwMDMwMDQwWjAzMTEwLwYDVQQD
Eyg3MDFmMDRhOTkzNWE1ZDY1NDY2Y2M4MDAyMzZjY2ZkNmJjNzMxOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZH7stnhD61eyJATrRQDKMlGCAG
FaDPHt0onreZN9myjD5/UKYelYw5248AjKBXGo/LtCfKkOApdKMyfQsrGh3QKa3S
FsHJih56Kbq1Qx6k879FfGsQupF1lz4sWfA9VTEx4V2SDvXJmS97BHZxIMFsriwm
f9nZ+N5grI2vR8fr7BuX2kCK9qC3bBvQA+hcFqOelDT2V9XeRQUymSO12R3kxJYL
ztiR+3DldS3H5VY89RLCndm2Y9m3DfPX4F+CUfuG8hl38ex+XtqlyywHqy0sZX0a
S5i4NVka2gwNU5ZkkB3hWYOaFq+WfW2JBZgZKRaoiILvTSY9Wr8xrpFGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAfBKmTWl1lRmzIACNsz9a8cxi2MB8GA1UdIwQY
MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt
MzE5NzExMDA5N2M5LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5
LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8SNuzxLA
eHStm9btLdkJdeu2HbpVU0wxTDMOM9ZLKfRjxeC2J6Uj0BfwzaAZRUInPLzPcFKk
XrBbCbYhkCCXpH1XaraGkQqc2Kijfc+DrDrfi7/I1ENchUmIO55W5y6BDk09cGDL
gqCtKztJvPmtnbnrpzCewK83RqKIa3Fc7QFvOge7glE/zpcWsbbi+xih/qnZf94o
L/SmbqzsruZjANdK1Qj0yDVyxKW6ligQSqCAwFzGyG2rxmRZntZ7Sp9JZNbfwnaU
WMmSGqy6qs0XHaRDsSEGhKQB/0fV0XzvgF5ZEjioqG2M5j099+JQsA96HJgirzk8
C5nOZfLEUKN4lQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:07 2026 by rpki-client