Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          a8KqFORfgSg+FrzA7kAwyV3UoLJsSJ1iYdoguQJUGUg=
Subject key identifier:   4D:60:D6:CE:60:A9:1A:E2:20:D5:02:A2:CD:FE:47:EB:A5:17:F5:AB
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019EC3009427C707659E272370C9DEA751B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          05AD
Signing time:             Sat 13 Jun 2026 22:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:55 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: HLfDVpjM5wBJcx3HHxjm5yrR5MaLTyovct+evZLeeTY=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:94:27:c7:07:65:9e:27:23:70:c9:de:a7:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Jun 13 22:00:55 2026 GMT
            Not After : Jun 14 22:00:55 2026 GMT
        Subject: CN=4d60d6ce60a91ae220d502a2cdfe47eba517f5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:06:b8:eb:1c:e6:7f:60:c1:f3:f3:bf:06:
                    e0:d2:10:60:52:86:30:46:de:2c:e7:e5:0a:3b:33:
                    12:73:1a:43:e6:de:73:06:d3:68:fb:bd:19:6f:9b:
                    4c:6e:70:ff:c5:65:20:57:e3:75:78:bb:d4:22:95:
                    60:f9:b1:05:ce:bb:67:b3:59:73:f4:9b:56:36:55:
                    c0:5f:af:ce:16:2c:c8:b9:fb:89:78:32:10:41:ac:
                    ac:8f:b2:b3:1a:74:b3:d3:a0:14:f0:92:70:f5:d8:
                    ff:9f:10:24:79:87:b4:30:27:8a:a3:47:73:29:99:
                    ee:ce:09:1f:af:fd:26:6b:ee:a0:17:a5:41:3e:94:
                    89:6a:dc:44:ab:3e:91:de:d3:c1:7f:19:b4:81:32:
                    40:0d:e4:09:30:7b:ee:e3:05:6e:0c:04:fb:7a:f9:
                    7b:39:51:d7:b1:f4:41:98:d3:16:7e:27:7c:3a:b2:
                    11:a9:a4:de:13:34:72:7b:f4:b7:a0:66:8b:59:f6:
                    cd:f9:ef:df:11:ee:29:e7:6c:98:50:90:d9:bf:c9:
                    48:20:da:b5:76:c3:71:6d:8a:ca:45:79:dd:0b:45:
                    59:ca:f9:79:6b:ce:0e:9b:c9:d0:f7:bd:ab:3a:21:
                    3a:2f:26:5b:54:e8:65:b0:f6:3e:b9:cf:f3:02:44:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:D6:CE:60:A9:1A:E2:20:D5:02:A2:CD:FE:47:EB:A5:17:F5:AB
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:41:dc:af:40:ff:97:46:27:d2:9c:c0:1d:8f:f2:6f:bc:4d:
         7a:6a:12:ae:3b:fd:0c:a2:f7:18:e2:30:b3:b7:98:3a:5f:78:
         ae:1e:c2:23:8c:d2:de:7d:f2:f1:0c:59:4f:33:6b:fd:c6:6d:
         d9:1e:cb:70:ee:c8:e1:95:e9:17:68:93:a5:68:43:5f:a7:de:
         fd:15:49:7b:c8:5d:5e:8f:fe:94:4a:1e:56:e7:d8:39:62:d2:
         a7:f7:0b:b6:47:c0:d6:16:cd:83:0a:e4:d5:aa:1d:a1:d0:99:
         64:ef:a1:69:09:79:a3:e0:79:be:36:f6:09:86:a4:bd:62:c4:
         2d:8d:77:94:59:d7:f3:8e:51:4f:59:bd:e7:cf:7d:9a:7e:c7:
         ab:30:5f:93:59:95:c0:3c:ce:e4:4c:6c:87:9a:f0:cd:c9:86:
         81:26:4a:f5:d0:6b:1b:eb:cd:9f:a4:43:e6:5e:42:e2:bd:d6:
         ef:a0:37:58:b7:fd:ce:04:be:1d:a2:43:08:92:7e:6b:20:3e:
         c2:fd:5e:0a:34:63:11:8d:07:b8:5a:64:f6:28:2f:71:8f:b6:
         0f:62:df:ae:b3:0a:b3:eb:8c:13:d3:bd:05:88:11:81:70:0e:
         0b:32:3e:a2:ef:a1:8a:a3:9e:2c:19:28:84:5f:16:ea:f3:42:
         61:59:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:00 2026 by rpki-client