Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File:                     aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier:          HQm2WPcWRqoXz01g/QPxmYw0wrgObCjn9K5OX1eOFok=
Subject key identifier:   EE:1D:8A:00:6D:E6:FD:C1:19:62:81:C8:AF:C1:6F:EA:7D:E6:37:A0
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer:       /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial:       019FAC0835AD23E41278F882F1A2608F60F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number:          129E
Signing time:             Wed 29 Jul 2026 04:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:46 +0000
Files and hashes:         1: A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa (hash: 6nA7grwYfCC8F9QlWfwY7V2uHRishBzwFCKkdr7sz1A=)
                          2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
                          3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: HuHdbA2NNOE9xTKRg8amuUEUb2+sH2MBQzXhRM2dOZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:35:ad:23:e4:12:78:f8:82:f1:a2:60:8f:60:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
        Validity
            Not Before: Jul 29 04:00:46 2026 GMT
            Not After : Jul 30 04:00:46 2026 GMT
        Subject: CN=ee1d8a006de6fdc1196281c8afc16fea7de637a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:0e:ca:71:04:08:0a:6c:f2:b0:05:4d:52:
                    d8:d5:4f:32:a9:ac:1d:ce:26:73:07:48:15:16:83:
                    58:84:11:87:96:0b:c7:46:14:bc:45:41:3e:c4:fd:
                    c0:91:05:96:af:fa:3b:be:c8:22:35:40:32:c0:4c:
                    88:61:94:80:86:b9:9a:9f:9e:78:c1:0b:07:40:64:
                    e8:64:3a:d2:d4:e1:68:7f:cb:06:00:b1:06:eb:14:
                    da:e3:29:c0:64:4b:b3:fd:ad:2c:03:5a:c3:bc:5b:
                    6c:32:66:c1:3f:1f:38:61:5b:c7:c2:4b:44:aa:65:
                    17:6b:8e:7e:ff:34:9e:db:39:8d:cf:18:71:75:2a:
                    87:66:7d:a7:7b:e3:20:62:d5:99:be:be:ea:9d:70:
                    0c:b1:c5:ab:0c:a8:78:8c:d0:85:5a:33:b6:f7:29:
                    9a:00:1b:a9:6e:8c:77:4e:92:39:95:3c:7b:8b:9b:
                    24:88:29:87:7e:56:3d:cc:94:ed:66:a6:d4:17:ed:
                    5a:13:eb:73:ee:74:22:7a:97:65:f4:da:86:bb:5c:
                    f6:27:f2:10:41:e2:c2:1e:19:cc:54:b9:a0:7e:a1:
                    eb:19:12:83:27:4f:6b:b0:f0:93:4b:fb:5e:8e:67:
                    a5:fa:3b:c7:de:4f:dd:05:31:49:07:d3:46:e6:6f:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:8A:00:6D:E6:FD:C1:19:62:81:C8:AF:C1:6F:EA:7D:E6:37:A0
            X509v3 Authority Key Identifier:
                keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:f1:33:49:54:44:10:b6:22:40:20:95:0c:67:d8:a3:28:
         bd:88:bd:2d:08:fe:e4:ec:a1:62:ac:65:73:f8:b7:09:db:a1:
         6f:98:e6:9e:4d:70:10:ec:72:c4:2b:b7:50:69:14:77:2c:1b:
         9e:36:b0:47:99:fe:59:a8:5b:04:ed:fc:20:27:5b:3f:9a:fb:
         1e:5d:a5:9f:8f:43:91:5c:42:0f:90:7a:ff:eb:49:d4:85:a6:
         a0:0d:02:93:69:04:2e:3a:13:91:58:3c:83:c6:f2:af:ee:e7:
         42:d3:a2:d2:e4:d0:b1:2b:1f:5e:96:b0:8d:06:a5:b9:57:dd:
         10:88:aa:db:aa:2e:af:58:02:ac:f1:98:f6:f6:8f:6b:99:8e:
         23:d5:6f:10:38:e0:04:a9:24:71:cb:bd:2d:b3:f4:86:ee:9e:
         41:c4:69:f7:46:4a:42:bd:11:17:b3:96:c6:37:25:ac:be:f2:
         07:b6:66:19:da:f4:43:95:19:7c:d1:f8:25:73:a4:48:ba:4b:
         52:27:3d:27:3b:1e:6b:0a:f3:f7:c7:82:6c:58:a7:a4:47:b0:
         94:04:6d:a9:bf:fb:14:c5:ff:1b:69:7f:63:9d:a3:3e:a8:e3:
         cd:40:e2:f0:03:71:91:c5:d7:48:2b:63:aa:b7:d2:ec:26:f2:
         e6:72:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:20 2026 by rpki-client