Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File:                     ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier:          GuV1NDjau4Jg/jWvMknVJ2OR8XY1urtFr/oaNDizgOM=
Subject key identifier:   52:38:E8:C8:FC:EA:34:3F:C8:7D:B4:3D:5C:F2:2A:E8:AB:DB:49:6C
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer:       /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial:       019FA9ABE110B78C941773250529EFC6BB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number:          026A
Signing time:             Tue 28 Jul 2026 17:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:41 +0000
Files and hashes:         1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: OZ8IxY0jfPrzWYNCKpe7NydNYTwpKVKiwRT/S+Xbu1w=)
                          2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:e1:10:b7:8c:94:17:73:25:05:29:ef:c6:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
        Validity
            Not Before: Jul 28 17:00:41 2026 GMT
            Not After : Jul 29 17:00:41 2026 GMT
        Subject: CN=5238e8c8fcea343fc87db43d5cf22ae8abdb496c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:f6:21:1a:fd:c5:53:17:0c:c4:f7:7a:f5:
                    12:d1:5e:bc:75:86:b6:e3:4a:dc:8f:ba:3d:5e:9f:
                    23:4b:a3:0b:10:62:f3:a8:6e:63:a1:60:6a:af:d9:
                    10:5b:25:7c:7b:a7:3c:98:23:4e:37:1a:af:f8:7c:
                    a7:a8:f2:93:48:66:59:57:4d:38:d2:15:59:15:4d:
                    18:af:9d:03:16:8e:e3:9a:f2:4f:87:da:7e:6b:77:
                    36:24:05:1d:de:11:9b:5b:23:42:eb:4c:34:a3:da:
                    e9:18:76:c1:6b:d5:57:80:73:35:d4:4a:95:9f:99:
                    e5:ab:7b:7a:e5:d1:58:df:eb:cf:5a:b7:a4:39:3e:
                    79:4e:56:fb:2a:d9:c2:e4:79:98:a9:4d:5a:25:33:
                    c2:8b:67:e5:ee:55:c5:2c:40:50:5c:9a:23:e4:b3:
                    e9:15:fd:b3:bc:e6:17:1b:cd:a8:98:67:42:d0:f6:
                    c5:c2:a5:23:2c:e3:19:3b:eb:49:1f:5f:f4:ca:5d:
                    be:3f:34:e4:3b:00:58:70:06:0b:10:60:a1:48:2b:
                    7f:96:3f:c3:0b:93:2e:4e:2f:06:04:db:1b:80:2b:
                    76:37:2c:9a:50:71:6d:d3:8f:9f:a8:76:65:b8:38:
                    a3:e3:fc:bb:37:63:42:39:8f:bc:4d:d5:5b:8a:81:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:E8:C8:FC:EA:34:3F:C8:7D:B4:3D:5C:F2:2A:E8:AB:DB:49:6C
            X509v3 Authority Key Identifier:
                keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7c:b0:1d:81:78:81:fd:ae:cf:a4:5c:ff:4f:59:2f:10:79:
         c8:8f:08:f1:45:94:1a:e2:c5:91:98:e8:60:82:1c:63:ac:fc:
         f0:b0:08:a2:67:0a:50:fb:9d:55:7b:c5:9c:83:35:73:bd:1c:
         2e:54:8c:4d:cc:e2:98:f4:6f:de:26:43:00:02:78:33:18:5b:
         47:fa:25:06:bf:81:9f:b5:b4:7c:07:2a:fc:9b:42:f3:0e:00:
         bd:ef:11:f1:3b:22:ea:29:1d:d5:37:38:22:74:a5:ce:89:10:
         ab:d0:55:4c:f0:7b:92:18:aa:31:62:36:59:f0:c5:26:a4:c5:
         44:a9:20:79:ed:ae:72:0e:35:12:02:11:ce:3c:37:b0:43:a0:
         0c:3d:54:a9:93:56:ed:60:ec:f2:f0:29:aa:f2:9a:9e:55:f4:
         54:2c:bd:97:95:fe:b9:20:98:a9:df:8d:b7:b1:11:1e:1a:29:
         25:8e:99:7e:cb:86:36:c8:27:32:0c:5c:70:a7:ae:34:6f:ba:
         70:a1:62:93:b9:b9:0e:59:25:0b:ae:39:70:4b:ef:d6:1e:4b:
         e3:1e:ab:16:86:0d:64:f4:73:29:74:38:1a:84:45:49:b5:35:
         a6:c6:e8:fb:8e:6e:b0:15:ff:3a:66:4f:f5:03:7e:88:07:7c:
         4e:f5:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:00 2026 by rpki-client