Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          alqnR7iv7EiI/QT4q/3SEWwYJguIkMNk5ZLRCE++r30=
Subject key identifier:   6E:DD:7B:16:77:49:CC:E9:48:44:EF:59:B0:8C:B9:C0:B4:C3:0B:06
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       019FAB9A570576AB62202863B5D7DD28A8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 02:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:46 +0000
Files and hashes:         1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
                          2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: vxQ7b5PTCHpdcS2jBGYehYjwqNDToIj3K+BHktIPX7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:57:05:76:ab:62:20:28:63:b5:d7:dd:28:a8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Jul 29 02:00:46 2026 GMT
            Not After : Jul 30 02:00:46 2026 GMT
        Subject: CN=6edd7b167749cce94844ef59b08cb9c0b4c30b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:95:1a:6a:18:d9:8f:98:e2:87:4d:d3:c3:
                    94:df:1c:ad:91:c3:62:63:ca:34:fe:aa:1a:2b:a2:
                    0a:92:3e:e9:5a:df:7e:f3:58:fb:47:95:bf:d8:3d:
                    16:24:1f:fd:1d:1f:f8:d4:d0:55:50:f9:d5:48:67:
                    95:7c:54:bb:43:51:e6:9a:c6:68:a9:46:d0:0d:30:
                    d0:fa:de:91:59:95:55:08:37:eb:80:25:a7:41:90:
                    e6:cd:fd:d9:35:4e:4e:e3:c9:da:27:2f:6a:89:62:
                    4b:9a:69:6b:25:23:c9:2f:17:63:31:c2:1a:ee:59:
                    96:1d:f3:2d:1b:86:44:2b:72:55:cd:0d:08:15:dd:
                    2e:d7:c7:9a:93:b1:66:52:29:c0:1b:64:79:fd:69:
                    1e:f9:8d:74:ba:49:65:3b:7f:6d:a3:93:8b:b9:90:
                    2f:84:52:7e:41:2a:c8:8e:3d:c8:98:d9:7a:e3:a5:
                    44:57:92:94:13:b2:c7:dc:5b:01:99:a6:dc:a5:46:
                    44:a9:4a:8b:b1:5d:c4:10:8b:10:68:a2:96:5b:6d:
                    ff:d9:b2:3d:8d:19:b3:43:6a:f5:34:ab:fb:6b:0a:
                    2a:93:84:8c:b8:a0:0f:ea:07:ef:93:1f:7e:0d:e6:
                    db:82:36:dd:36:27:32:56:9d:74:07:ec:82:89:f9:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:7B:16:77:49:CC:E9:48:44:EF:59:B0:8C:B9:C0:B4:C3:0B:06
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:e8:ee:54:37:72:b4:35:4b:c0:3e:bc:db:c5:42:42:04:
         7a:1f:d1:1e:35:d6:1b:fd:0e:6c:4b:48:07:07:43:e2:1f:93:
         13:9c:70:a9:59:f0:5b:22:cc:72:93:61:a8:5a:79:5c:93:39:
         30:27:8d:a1:4f:63:25:9a:8b:78:49:ff:3e:80:e6:fa:57:95:
         09:d6:1c:a7:ca:86:44:22:08:02:f3:8d:b8:f0:0f:4c:8d:f5:
         7c:91:b2:41:f9:09:87:5f:29:a1:1d:46:b1:63:b0:3c:93:8d:
         29:ae:89:8d:46:77:e2:6a:5d:75:30:5d:e2:87:cc:a3:e0:0e:
         54:cd:08:3f:20:82:d4:cf:dd:8f:b5:b0:3b:ae:58:26:8f:38:
         48:12:59:13:fb:83:b1:43:1e:82:5c:b4:cf:84:26:a0:0b:3d:
         09:41:6b:3d:91:f9:bd:2a:31:00:5e:97:23:44:03:e0:c8:e0:
         e3:2d:fb:f8:ef:80:4b:50:76:b5:35:a4:55:36:29:81:b5:78:
         8f:be:df:64:77:4e:fe:d2:91:b6:dc:58:db:b2:9c:1e:09:f3:
         b3:2d:32:d2:f1:94:ba:27:c5:c1:0c:5a:f3:25:79:b9:28:1d:
         6a:c9:8b:02:4c:6d:ed:43:8b:6c:5a:b6:2d:9f:52:d8:58:af:
         34:1f:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:33 2026 by rpki-client