Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          Vymdf7NET/uje7d9bzcYpJuaZKkeO1w2CAEi/XN3awk=
Subject key identifier:   C5:99:E2:DB:76:69:7E:3B:9A:8F:36:E7:01:3A:75:13:DB:21:B6:FB
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019D9D766343A29795DE138B6C3782C26FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          0515
Signing time:             Fri 17 Apr 2026 22:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:14 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: pbMs8CdVgg0B0WmjU728snflSmcP3zuGj+fohErpjfU=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:63:43:a2:97:95:de:13:8b:6c:37:82:c2:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Apr 17 22:01:14 2026 GMT
            Not After : Apr 18 22:01:14 2026 GMT
        Subject: CN=c599e2db76697e3b9a8f36e7013a7513db21b6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7c:41:46:06:7d:0d:2b:ec:59:63:d6:f1:4d:
                    26:bb:c4:1a:4e:50:1e:f5:81:d4:d7:4d:19:34:ff:
                    b8:71:f6:74:3a:f4:35:95:a0:03:08:84:de:b2:3d:
                    c5:33:24:d6:d8:85:a5:26:7b:5a:3f:37:6d:3d:be:
                    6d:6d:2e:78:a2:9b:c0:02:e9:b5:2b:84:bb:be:27:
                    f9:47:ed:70:56:c2:b8:3f:91:11:61:2f:28:b8:45:
                    15:6f:13:1d:e5:05:a3:01:29:5c:82:d4:06:1a:da:
                    db:8a:25:5b:69:a0:5b:b1:92:1b:9b:1e:e5:18:f5:
                    ff:a8:1f:6e:80:6b:e1:9a:5f:c0:0e:d0:c6:9f:a2:
                    02:dd:8b:f9:80:a6:f4:38:5d:90:8c:64:c3:71:f7:
                    a3:b0:d0:5a:8c:26:39:a2:08:d1:60:3e:84:65:30:
                    e7:49:7e:bb:54:01:f0:55:76:42:12:96:0f:59:a1:
                    67:00:e6:95:d3:18:06:34:45:54:64:ba:dc:a7:f4:
                    60:26:93:3a:80:87:89:61:be:9f:f9:a9:a2:05:55:
                    b8:fb:bd:52:fd:67:6f:49:ed:a4:4c:51:4e:fd:b7:
                    0b:ce:dc:41:39:59:92:9b:ef:e7:92:19:7d:23:c7:
                    97:6a:08:45:d2:c5:cb:a0:a8:5d:89:94:09:26:e6:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:99:E2:DB:76:69:7E:3B:9A:8F:36:E7:01:3A:75:13:DB:21:B6:FB
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:6a:9c:94:d5:13:26:5d:26:c8:7c:7c:6b:a8:f4:db:52:
         5d:be:57:4a:2b:f7:95:3b:42:60:20:97:2d:a0:91:74:4b:84:
         5d:32:a3:da:a1:a3:a8:f0:c6:e6:5d:36:bb:5e:cb:bb:5f:3b:
         00:37:2a:a0:a0:13:ca:37:fa:bc:76:f2:27:d7:84:78:94:1c:
         e0:91:14:9e:56:f5:08:9e:5a:ed:94:8d:79:ca:cd:61:7e:da:
         d9:6a:90:74:20:fc:bf:d3:23:53:45:e5:4d:c3:52:e4:e1:c4:
         b8:a7:fc:39:f6:89:92:92:f7:42:5a:b9:61:29:e9:ef:d6:54:
         f1:e4:ae:3f:90:59:6a:37:07:b7:2a:65:c6:8a:4f:c6:42:a7:
         24:2d:56:56:a3:32:f9:9f:8a:ad:f9:92:5e:82:99:60:99:f6:
         a0:f8:ac:7f:53:01:27:cc:ff:f5:cf:0c:9f:7a:fe:6c:15:15:
         d6:3a:20:2b:3f:85:47:fd:99:24:01:35:3a:e1:25:f4:3b:ab:
         67:21:e8:fa:ee:67:05:24:31:e8:81:ad:30:20:d7:76:a3:d6:
         db:76:be:61:50:6b:be:f2:1e:c8:a4:1b:3e:f3:8d:20:7f:0a:
         f1:05:18:18:60:54:a5:2e:e5:94:18:61:f5:22:9c:54:78:af:
         44:db:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:55 2026 by rpki-client