Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          NkvHpHZ9G5MhImlyi7wZ86W3XoohqXlSEtcVbV9q+z0=
Subject key identifier:   00:AE:AA:7F:00:7F:25:07:3C:BD:E1:29:42:62:86:7D:84:0D:9E:4A
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       019FAC0894098C14F64FABD9D01B6D44F3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          0F19
Signing time:             Wed 29 Jul 2026 04:01:11 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:11 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:11 +0000
Files and hashes:         1: R6fKmNiL6DPYHGHsgrQhdxRjogw.roa (hash: KlrIoUKqLYU4rd9VeTGSXIJFZfzjhsMmFKFxCnepX50=)
                          2: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
                          3: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (hash: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=)
                          4: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: zaOO5qfumvliyOJH1ulI2N5rZOWGnOyY3IEXmTQZKow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:94:09:8c:14:f6:4f:ab:d9:d0:1b:6d:44:f3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Jul 29 04:01:11 2026 GMT
            Not After : Jul 30 04:01:11 2026 GMT
        Subject: CN=00aeaa7f007f25073cbde1294262867d840d9e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:e1:63:09:46:25:2a:bf:3e:ac:84:a7:e5:
                    f8:07:b7:98:b5:8c:cb:e2:7b:b3:31:ba:11:41:c1:
                    1f:33:6f:80:ed:3a:01:17:a8:b9:21:f3:e4:4e:51:
                    28:2e:6f:00:65:bb:3f:67:fe:0f:28:e7:aa:89:0a:
                    ed:c7:59:10:77:dc:55:62:6c:62:ba:6e:35:44:d1:
                    e0:ec:7a:0b:57:82:99:36:4a:b8:f4:bf:d1:25:fc:
                    73:4d:bc:ab:98:9c:71:12:90:93:a3:62:18:24:6c:
                    a3:12:a3:67:0f:ad:95:0f:fe:e4:32:d5:b5:74:5d:
                    51:f2:49:0d:84:70:42:73:64:81:5d:e6:5a:d8:0e:
                    4e:85:8f:a2:e0:d8:28:e5:f1:82:01:91:0f:9d:bf:
                    aa:7f:64:f1:b0:c3:7c:2b:ef:f9:cf:83:30:d4:ce:
                    1c:d9:9d:1f:dd:f7:bc:0d:fc:8e:e4:11:6b:88:60:
                    83:42:db:56:9f:4d:a2:96:ab:20:5a:21:4a:fb:59:
                    9a:3f:d1:e1:5e:72:7c:e8:c6:77:40:0a:7c:63:cb:
                    22:26:da:99:4b:9e:0e:a4:56:55:ec:77:f5:e0:52:
                    29:5c:f2:c1:1d:dc:11:ae:10:2d:0f:28:7a:ed:04:
                    1e:50:05:c6:af:3c:66:f1:ea:8d:18:68:f7:46:f0:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AE:AA:7F:00:7F:25:07:3C:BD:E1:29:42:62:86:7D:84:0D:9E:4A
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:99:d7:8b:bd:28:c0:df:87:86:80:4f:aa:8c:85:9d:11:b5:
         fd:aa:96:d9:b0:63:9b:1a:f5:f8:b7:81:de:d0:02:f2:b7:e8:
         69:ce:60:36:3d:a7:93:84:8f:0e:6e:ec:9f:a4:d3:5a:59:00:
         af:41:56:ab:50:6f:68:92:ab:1d:85:1a:ba:da:bd:97:70:f2:
         ef:93:8a:38:d1:b8:90:74:62:53:53:ab:50:ae:e0:91:c3:96:
         65:1c:e9:ec:14:95:1b:5a:c2:19:47:6e:f0:1e:8f:4f:f3:4b:
         83:23:b2:60:42:89:f2:a2:59:18:ef:ea:46:a8:22:10:a7:7e:
         fa:d0:99:b8:49:dc:11:64:d5:94:89:01:0e:07:e1:a3:54:0b:
         18:6d:58:36:b8:2f:fe:21:87:0d:bf:e7:d4:3f:b4:89:f4:9a:
         95:f5:fb:7a:b7:1d:54:15:c4:bd:72:cb:ab:66:57:d8:d6:c3:
         b9:5a:e4:e8:d9:7f:b3:ea:31:71:62:f6:80:e7:2e:80:b8:ee:
         c0:c5:14:f9:28:18:7a:0b:86:2d:3e:bd:2e:bb:61:cc:0d:8e:
         a2:bd:05:41:30:b1:07:fb:96:39:4b:5a:64:21:27:57:77:db:
         57:1c:b0:50:7c:ca:27:8f:f6:24:f2:a2:c6:d9:c8:2f:f5:63:
         81:8a:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:26 2026 by rpki-client