Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File:                     aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier:          6AaHTdJmpyz+qTyWiluz8zoj0dW7k87UiYbqae01FfA=
Subject key identifier:   4A:D5:CE:2B:73:90:8F:A5:39:27:21:32:32:6E:65:D4:55:73:EB:7A
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer:       /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial:       019EC1B65E5AE4D9A798DA0DE43BA577BFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number:          0198
Signing time:             Sat 13 Jun 2026 16:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:14 +0000
Files and hashes:         1: UUv8KCYY_qwIz6Djj9MxeUBMbeM.asa (hash: y/envmoplsM1TltG0pxbP3ERWog5GOusP8KLT7GdRLU=)
                          2: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: 9dao8U20l5BibJD7mAnHKpz8x314b715lBneMDDh95Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:5e:5a:e4:d9:a7:98:da:0d:e4:3b:a5:77:bf:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
        Validity
            Not Before: Jun 13 16:00:14 2026 GMT
            Not After : Jun 14 16:00:14 2026 GMT
        Subject: CN=4ad5ce2b73908fa539272132326e65d45573eb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:5a:a1:fd:22:26:a5:99:54:67:10:61:80:
                    47:9f:e4:57:fb:8a:ce:20:7e:29:ec:e4:a8:a5:a4:
                    2e:92:2c:9b:23:5e:15:8f:1f:02:65:0e:79:94:59:
                    93:fb:f3:bd:16:3f:ae:c9:9b:b1:7f:fc:13:30:28:
                    7a:79:db:52:7a:b2:b3:4b:47:23:3b:8f:21:a3:dd:
                    92:21:dd:3e:6f:99:0e:5a:ff:bf:40:25:50:ea:df:
                    e0:ec:21:b5:89:37:ec:3e:45:5b:83:4a:11:61:aa:
                    60:52:3e:73:ad:6e:8a:a2:73:e9:89:c1:67:f1:04:
                    5c:fc:d6:ad:2f:63:da:9b:01:c5:11:67:d8:d3:72:
                    bc:3c:fa:f6:df:ac:c4:bc:e3:43:e0:ce:a3:cc:36:
                    4a:83:69:77:4a:56:6e:75:1d:a6:b9:44:48:6c:81:
                    5b:3c:55:37:99:5f:54:6a:2b:93:79:9f:c2:f4:9c:
                    04:30:2e:e8:1b:e6:c4:f6:c2:ae:c7:f7:3d:26:b9:
                    1b:48:d0:cd:cc:39:c8:21:5a:fb:91:10:9e:e6:9b:
                    b1:d6:a3:c3:0d:e6:f2:61:80:7b:c2:fe:71:c8:55:
                    d8:93:ea:0e:5c:ac:8e:5d:fc:a7:17:fa:79:be:69:
                    94:39:e7:bd:c3:00:0a:2a:73:07:a1:01:af:46:bb:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:CE:2B:73:90:8F:A5:39:27:21:32:32:6E:65:D4:55:73:EB:7A
            X509v3 Authority Key Identifier:
                keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:ca:02:95:35:f5:a7:f7:ab:c5:88:b3:a0:60:e6:92:7a:
         03:41:c7:e5:9e:49:50:65:3b:b2:09:9f:64:89:ab:f9:08:92:
         11:bc:75:47:3a:79:b9:e6:df:51:81:87:d8:7a:d5:2d:a7:a7:
         cc:b6:2f:b3:32:e7:58:df:af:56:b0:54:6b:a9:e3:72:1c:d3:
         56:a3:53:83:25:37:40:15:0a:4c:26:32:00:2a:ac:b8:8d:c0:
         bd:bd:bc:e8:34:4b:15:1a:0b:33:78:da:26:95:5c:e6:c2:c2:
         27:2d:ad:70:41:94:b0:0c:e3:4f:bb:19:c3:26:2a:35:91:c1:
         c9:b3:66:1a:17:85:b9:92:b0:ee:98:83:63:1a:7b:3b:06:c9:
         8c:f1:07:1e:da:9a:9c:c9:71:08:84:98:df:44:9a:ec:a9:63:
         57:63:05:fc:32:35:3f:ca:50:db:01:b5:eb:32:6e:f9:29:9e:
         f0:12:75:14:83:16:b2:52:05:09:16:a6:93:ba:44:c4:67:75:
         6d:be:78:57:2a:52:a6:b8:cd:f7:d8:03:d4:f7:7f:d8:b1:a3:
         90:45:cf:8a:b5:78:17:83:e3:9f:1b:32:84:63:ea:6e:51:c8:
         4c:57:c0:68:b1:3e:10:60:46:79:68:95:64:bd:03:6f:0e:f4:
         68:97:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:21 2026 by rpki-client