Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File:                     ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier:          BGMgeyUYxd/17q+gZfTiPqzqLO98CUKkQN/Bwesog5o=
Subject key identifier:   3A:4F:16:A6:D9:F9:EE:80:8C:71:71:AF:E3:98:FE:73:DC:6D:A6:3F
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer:       /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial:       019EBE10E69256046C95F37435AC66B56E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number:          01F0
Signing time:             Fri 12 Jun 2026 23:00:39 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:39 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:39 +0000
Files and hashes:         1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: hfWqoY9gYBOVjvZdDMmAeCZT3c7fgS/fvp3th9c2bxo=)
                          2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:e6:92:56:04:6c:95:f3:74:35:ac:66:b5:6e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
        Validity
            Not Before: Jun 12 23:00:39 2026 GMT
            Not After : Jun 13 23:00:39 2026 GMT
        Subject: CN=3a4f16a6d9f9ee808c7171afe398fe73dc6da63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:36:39:5c:83:a5:a9:5a:66:42:59:3d:3c:
                    1c:77:4e:b6:6c:1e:af:28:f2:29:96:0c:f9:6a:82:
                    62:7d:7f:23:b4:e9:0b:1b:0e:8d:f5:63:42:3e:e8:
                    ad:4f:23:3b:26:62:cc:c7:42:98:22:e5:ba:de:ff:
                    a6:63:91:fc:4b:9f:fe:86:9d:84:9c:12:12:36:05:
                    54:dd:2b:91:11:c9:d3:83:7f:02:d7:51:3f:08:dd:
                    db:a9:3d:26:9c:6e:99:e9:f2:b1:4b:03:92:56:fb:
                    52:e6:b1:72:af:46:5f:d9:1f:67:84:e7:31:08:44:
                    b2:06:47:57:96:ab:8d:b0:fc:a8:58:1f:03:94:5c:
                    63:81:54:71:6b:26:d1:93:bf:74:b8:bb:d0:1a:d3:
                    9f:1f:02:47:df:d3:a1:19:ed:0a:86:5a:15:85:2d:
                    8f:15:80:52:c4:49:02:c5:b4:d0:23:4a:a4:d9:3d:
                    e3:db:0d:50:5c:44:b9:36:33:c8:e3:1e:01:a2:bf:
                    3f:a6:f8:c6:2b:67:66:82:ab:46:1c:10:18:9c:d1:
                    97:8b:ef:d5:66:64:41:72:67:30:98:c6:99:b8:33:
                    0f:84:36:09:37:b8:8d:d6:4d:aa:e5:e2:d5:5e:bb:
                    8d:48:21:71:c9:d3:03:fb:39:12:d4:4e:27:d6:55:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:16:A6:D9:F9:EE:80:8C:71:71:AF:E3:98:FE:73:DC:6D:A6:3F
            X509v3 Authority Key Identifier:
                keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:93:6c:44:e6:05:7c:8b:42:08:1a:d3:74:91:3b:ce:4e:d9:
         19:09:9e:2d:38:68:c6:a5:e4:9e:6d:ce:ff:9e:30:f4:35:07:
         57:96:14:4b:8f:fd:ca:24:39:0d:2e:26:ea:3d:b9:cd:7d:87:
         c7:aa:39:ce:3e:32:c7:93:d1:37:d1:a7:b3:cc:f0:d5:03:8c:
         b7:b9:93:77:01:92:5d:20:42:04:a3:9e:79:46:03:fb:4b:94:
         67:a3:b3:ad:00:22:38:aa:93:9f:28:71:d5:d1:a3:bb:04:f9:
         35:70:34:0e:ee:79:fd:86:aa:2a:df:f0:ae:9f:0b:18:82:1f:
         fa:72:47:4a:c7:e0:61:d3:5c:78:79:32:97:e4:26:53:06:ce:
         b0:9e:52:27:7c:9d:0b:f2:b2:1d:96:c3:41:d0:be:54:c4:61:
         e6:e2:5b:e9:5d:7d:46:00:44:de:45:d0:fd:df:08:24:ab:00:
         2a:c6:93:ec:94:12:56:96:d4:4e:5f:ce:9a:9c:f2:90:f9:ff:
         8b:dc:26:56:41:74:d2:51:1c:fc:96:74:36:35:f8:7b:88:9e:
         52:f0:83:4c:47:f9:2e:f2:8c:ba:08:6d:38:28:b3:2f:96:07:
         2a:2c:e3:98:56:3a:aa:fe:a8:ed:b8:51:0c:69:91:13:b4:f5:
         0c:85:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:50 2026 by rpki-client