Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          PYTKqbbdLxuBGutNaFW7XlswPWXtQxBJojQqJG79J3g=
Subject key identifier:   4D:4A:71:31:7C:72:75:63:92:39:0A:44:C9:50:F0:23:1A:05:CA:22
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       019FAB63B50ECBF3E1812AC2B4A4126E9E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 01:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:06 +0000
Files and hashes:         1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: 0Pd6Oa49h+/FHIr/q1vIvA0GMO45JmWqXY54ZpauoNs=)
                          2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:b5:0e:cb:f3:e1:81:2a:c2:b4:a4:12:6e:9e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Jul 29 01:01:06 2026 GMT
            Not After : Jul 30 01:01:06 2026 GMT
        Subject: CN=4d4a71317c72756392390a44c950f0231a05ca22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:97:15:7a:64:ca:c7:87:df:8c:6a:1e:2d:
                    75:02:e3:4c:6f:5d:62:73:4c:94:ca:2c:02:9e:b3:
                    a3:ac:9c:86:86:00:38:90:8d:a3:38:4f:66:ad:dc:
                    9f:00:c8:bf:a9:9d:6c:bc:ac:88:41:6f:60:59:bf:
                    d7:3b:a8:57:a2:a2:c5:a5:54:86:d4:34:3e:b7:e9:
                    b3:bf:47:92:9c:d9:2d:60:52:3e:57:25:eb:dd:55:
                    de:ea:4a:c2:c1:c8:c1:3c:6b:5e:2c:5d:b5:37:15:
                    88:35:15:d3:6b:0c:4e:cf:ee:6d:0f:34:24:3d:a8:
                    23:4c:0f:c4:54:d4:0e:70:9a:27:66:d5:94:06:19:
                    d5:10:8d:5c:65:c6:1d:9c:bf:47:dd:c2:4b:4e:a6:
                    2d:05:64:4a:43:3b:29:f3:fc:73:bc:5e:c5:77:ab:
                    ba:0a:20:28:53:32:ff:81:e5:29:cb:f3:c5:d4:02:
                    d4:13:b1:c9:e7:97:ea:af:ae:4e:1d:37:60:d9:30:
                    05:f5:c1:1c:04:48:68:1f:3f:2a:65:c2:c8:7e:b6:
                    de:18:b6:47:6f:36:11:38:e1:bf:36:fb:b6:88:ca:
                    1f:24:6b:2a:9c:39:73:f1:2b:31:bd:13:c1:5f:90:
                    f4:03:8d:4e:de:59:d5:07:c5:a4:f1:47:ae:fa:73:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4A:71:31:7C:72:75:63:92:39:0A:44:C9:50:F0:23:1A:05:CA:22
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:78:f1:75:de:88:4b:6c:5f:f3:02:bd:47:9b:45:e3:9d:
         5e:f4:c3:df:21:01:2b:d9:79:f9:c5:82:0d:29:b4:b1:a1:c2:
         1f:69:23:e6:37:01:f2:a9:a2:33:52:6e:99:0e:3e:1a:bc:f7:
         76:c1:11:66:e0:8f:4c:fa:d8:f0:34:42:73:e5:f0:45:32:35:
         2b:b4:b8:fc:c0:3c:11:32:79:5b:9f:02:dd:be:25:b6:17:62:
         c1:0d:7c:6f:77:1e:b0:e8:bc:4f:d9:c4:09:dd:f2:5c:cb:15:
         0e:72:15:ce:44:64:2b:da:31:ac:e8:07:8f:b7:d0:8a:e4:fa:
         b6:85:2a:31:26:27:b0:01:c4:4b:05:fc:35:2c:e0:13:1e:96:
         bf:00:7c:2f:d8:ec:75:d5:e6:c3:55:00:d7:45:64:dc:ad:29:
         ed:d9:16:0e:a9:21:b6:f5:f7:c6:d9:e3:23:81:67:52:f8:9a:
         14:c1:15:53:76:21:df:63:d4:00:c2:58:55:40:1a:4e:75:59:
         10:73:fe:c5:39:6f:60:7e:27:a2:14:47:0e:1d:2f:69:e5:ae:
         7b:87:2d:d5:fe:4d:2f:43:6e:75:b3:97:0d:30:33:ed:4b:0b:
         16:83:8b:4e:4a:b6:cf:b2:71:f0:ea:45:cb:51:8a:f4:68:6b:
         c2:48:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:27 2026 by rpki-client