Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          lSJm9jQWbiRz9yv/K6594xq/r4DivTsJMbi2Eko1N6M=
Subject key identifier:   E7:86:83:7C:C3:DF:47:E9:51:F2:7C:C5:5A:79:2F:1A:48:25:A7:8A
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       01987F4149E7F697ECC2C4C5EF3F00346413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          026D
Signing time:             Wed 06 Aug 2025 12:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 12:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 12:00:41 +0000
Files and hashes:         1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
                          2: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: zxzRkpvhcf/6eiypC6gAr3xMQ19OHjq3ZVwiWeZYOXo=)
                          3: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (hash: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=)
                          4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)
                          5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:41:49:e7:f6:97:ec:c2:c4:c5:ef:3f:00:34:64:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Aug  6 12:00:41 2025 GMT
            Not After : Aug  7 12:00:41 2025 GMT
        Subject: CN=e786837cc3df47e951f27cc55a792f1a4825a78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:5c:cd:c0:10:74:45:76:6e:af:cb:33:06:
                    80:80:fd:4e:82:d1:2c:35:e0:e4:09:44:3d:b6:62:
                    5b:d6:75:ce:e6:49:42:e0:64:8f:02:e3:f2:2b:76:
                    94:08:aa:51:53:30:f0:b7:47:14:29:3a:a3:95:d9:
                    47:73:3c:d2:74:f5:eb:24:a3:9c:34:f6:fe:f8:d4:
                    58:92:e9:c1:33:9c:7e:a3:f1:bb:d8:90:b2:72:d2:
                    d4:50:79:6f:1e:32:e2:c7:47:cc:b4:51:cc:66:67:
                    52:cd:66:52:7e:aa:8c:68:c8:fa:59:01:5c:41:d4:
                    b5:6f:b2:cd:19:26:fd:20:bc:62:ac:f6:3b:47:f6:
                    8b:b0:ba:c8:53:43:b5:31:3b:b9:c0:5a:d4:1c:96:
                    f7:80:47:b1:4f:d1:ba:9b:ff:07:9f:9c:a2:1a:3d:
                    ff:b4:df:7f:38:24:45:07:bc:42:79:3e:0a:07:c2:
                    a7:5e:ad:73:ec:12:d7:87:8b:77:f1:4e:0e:12:ab:
                    f3:a0:05:69:2f:36:1b:73:d5:10:6c:0c:65:b4:db:
                    8d:fc:d6:75:55:4d:c7:43:ae:5d:e5:d3:b8:6a:3f:
                    0c:50:ec:38:5a:70:2d:27:db:f0:fe:9c:41:99:50:
                    50:e1:85:9a:4b:4f:87:b4:57:78:dc:11:ec:b6:38:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:83:7C:C3:DF:47:E9:51:F2:7C:C5:5A:79:2F:1A:48:25:A7:8A
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:4f:c5:ab:ae:79:e8:5a:f4:a4:56:ba:24:b9:a4:b0:8c:
         9d:eb:d2:2b:e8:4f:d7:f6:f2:95:72:91:b6:bd:7d:f4:3d:38:
         80:ce:08:be:49:0c:45:09:ca:a4:00:de:11:25:b0:34:5a:ac:
         8b:21:88:08:8e:41:b0:f8:e5:6b:97:df:85:51:b6:a9:72:92:
         88:cb:f0:6c:14:08:31:8c:b7:30:31:fe:e7:ca:2d:75:28:6f:
         20:5a:e7:cc:19:5d:5d:b0:0b:12:14:27:de:64:af:b2:93:58:
         84:86:47:27:4d:da:f2:26:ba:04:e6:0e:66:62:e9:66:59:b2:
         0b:0c:b0:a9:cf:28:23:33:a5:fa:5c:54:13:fa:e8:df:c9:20:
         b0:ed:3d:37:21:16:d1:a8:1a:9d:15:ff:e0:b2:08:1b:5c:3c:
         c4:70:5d:ee:a4:95:ad:66:d8:9b:ce:bd:25:83:49:d5:23:75:
         c9:c4:28:ef:71:d5:94:a7:c3:82:ed:87:08:c2:e5:99:70:97:
         8c:2b:51:af:b1:2d:38:23:37:57:e7:3f:d5:f8:32:73:cf:02:
         dd:b5:47:9e:90:37:18:6e:23:a6:48:78:dd:5f:a9:e1:6c:56:
         f5:b8:26:df:4f:a1:fc:2c:40:d6:55:53:8a:10:28:c3:e4:08:
         00:dc:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:03 2025 by rpki-client