Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          NT95doKlFiMuoIKBBtZ5HqHkLxCyH+MBvnbScXdm924=
Subject key identifier:   E6:0C:66:5F:24:F1:0C:B2:95:A3:BF:BE:1A:C6:12:F0:BD:79:88:26
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       019FAC766B40F09ED1523B06042D07DEEDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          19DC
Signing time:             Wed 29 Jul 2026 06:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:09 +0000
Files and hashes:         1: HICUQlEYTGNDZC_TZKBNt1I9ZtI.asa (hash: ygy820xgpaVNMBFtptvsRnnaNpcXzgsBO0L4W7uH2bw=)
                          2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: 4/Kh5c71DWiVJwYJpwf9/9WSEsz+724oSXoTsaWzlZ4=)
                          3: npOqAYvnANeWVx-N9kdesV15avg.roa (hash: drW0amYbYWP6y8FhNua3sy9aXQKsIxf1FhuvgPhf3tY=)
                          4: qgrlS83bNE9MYEyjpHkdusYjIJs.roa (hash: qVLwJn1cT6OqEeJhayLqN8KErzeBq7qBWaQJP1ttmcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:6b:40:f0:9e:d1:52:3b:06:04:2d:07:de:ed:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: Jul 29 06:01:09 2026 GMT
            Not After : Jul 30 06:01:09 2026 GMT
        Subject: CN=e60c665f24f10cb295a3bfbe1ac612f0bd798826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:b5:17:54:41:88:5b:23:0e:51:78:0d:ae:
                    c5:d3:f7:19:1a:c5:63:5a:26:8c:82:3c:cf:56:66:
                    2f:ca:b4:bb:05:a4:3a:eb:d7:ea:bf:d8:e0:fd:cd:
                    a2:1a:f4:7c:27:e5:ac:e4:c8:27:b5:45:ea:e5:92:
                    ad:5c:6b:ce:1e:7a:28:80:9e:22:93:a5:34:07:dc:
                    52:1f:3c:31:34:f1:48:c3:d2:f5:a1:2b:4e:1e:48:
                    f9:10:07:60:13:41:dd:3c:f6:3c:7f:49:82:0d:2d:
                    57:21:b8:be:49:08:b3:65:b2:ea:35:69:d9:5d:ef:
                    ed:e8:db:4f:f0:fc:cd:0f:92:f7:08:dc:7e:74:55:
                    94:2e:7d:76:7c:18:9d:b3:43:ab:a0:4c:58:88:1c:
                    a3:e7:97:74:6f:36:77:64:52:f8:e2:79:f3:19:99:
                    75:e7:7d:6f:a5:8f:03:f5:3e:36:5a:0d:32:55:bc:
                    8b:81:09:27:0f:96:99:ca:a7:08:39:19:75:fc:26:
                    b7:da:16:6f:54:e3:cc:43:94:5d:be:54:06:eb:34:
                    40:2b:ad:80:0b:e6:13:68:dd:90:9d:dd:a6:c5:d7:
                    b1:78:26:e5:a2:82:57:8d:d5:e4:5e:aa:37:ef:db:
                    f4:14:62:42:60:d9:9f:eb:c2:9e:73:76:d0:ef:d7:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0C:66:5F:24:F1:0C:B2:95:A3:BF:BE:1A:C6:12:F0:BD:79:88:26
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:ec:bd:d2:b7:bb:9b:13:0f:3b:eb:6b:12:74:ae:b0:3b:
         ad:4e:cf:e9:e2:ad:d2:ee:9e:64:f4:b0:c5:67:98:44:7f:ea:
         cc:7f:ad:22:ef:43:67:e7:56:13:fe:55:76:07:6a:3e:25:4a:
         4f:f5:a1:08:32:1a:57:ed:74:b3:37:ba:53:22:4f:0f:d1:11:
         9e:9a:a5:ed:91:71:d3:b8:29:23:08:6b:a2:c9:ed:03:79:39:
         6d:d8:1a:86:41:6c:28:0f:2a:04:01:83:92:dc:d3:70:69:db:
         e4:7d:e1:55:ff:4f:43:0d:f8:b7:ac:41:e6:3f:af:f2:5c:d5:
         f0:9c:9a:40:66:8f:ce:a9:4d:43:4d:d3:c6:90:d7:cd:73:c2:
         ba:fe:46:d4:e5:90:d2:a0:af:13:72:24:d1:13:66:44:9b:61:
         1c:bf:e3:56:65:8b:68:20:ed:de:71:e9:05:51:2a:5f:42:0b:
         a3:09:3f:71:85:32:b9:41:7e:b6:99:6c:71:75:f3:32:f9:e9:
         7d:5c:d9:13:c0:75:43:9c:43:2c:17:33:30:57:50:df:c2:93:
         6d:a3:09:22:84:54:e2:0e:20:c1:d3:61:a2:42:a5:1d:05:ca:
         c5:72:1e:e3:0f:ae:19:de:1d:d2:3f:87:fc:ff:bf:a4:1a:b0:
         0d:05:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:05:54 2026 by rpki-client