Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          h7q1stmZ6Nrkw+UyTP6VAEhAlArP5W8ivxkLJPpAmRo=
Subject key identifier:   D4:85:27:71:02:31:43:8F:74:98:09:D4:EC:93:5B:41:AF:95:C5:98
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       019FA9ABF066FEB4CBB1A0B0355818ADCA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:45 +0000
Files and hashes:         1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
                          2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: cShvkBT8bb8Ad+w2MDnMmUWk/qgPVKAkTwVcFhdzDvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f0:66:fe:b4:cb:b1:a0:b0:35:58:18:ad:ca:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Jul 28 17:00:45 2026 GMT
            Not After : Jul 29 17:00:45 2026 GMT
        Subject: CN=d48527710231438f749809d4ec935b41af95c598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:63:95:45:0b:7f:16:a3:7f:0a:06:fe:31:
                    8e:cb:25:48:b0:1d:da:2b:82:96:be:5a:c5:69:be:
                    de:50:f8:da:03:f0:7f:66:34:01:a8:e9:1b:63:23:
                    1d:85:e8:86:5e:8d:08:82:20:af:0d:b4:65:d8:07:
                    75:5e:88:7d:80:68:06:9a:73:49:cd:ff:cb:8b:94:
                    75:e4:78:50:38:cf:6e:cd:20:cf:26:72:72:a7:f5:
                    49:42:e1:98:3b:de:a2:07:9c:35:61:79:0c:df:84:
                    22:80:2c:b6:40:6f:1d:03:79:e4:61:f2:4e:b7:f1:
                    9f:43:64:7c:c4:5a:d6:9f:e5:0f:b4:a8:3d:f4:23:
                    b0:59:2d:9e:83:f9:6c:87:c9:25:49:aa:86:22:c2:
                    f5:b8:80:0d:22:66:e7:69:49:d9:be:49:4e:8d:60:
                    6c:52:2a:ec:cd:42:b8:84:e2:81:84:36:96:ce:c6:
                    de:1a:bc:4b:7d:89:00:fa:54:82:e7:bb:f5:f0:d8:
                    ef:f1:88:31:04:f1:a7:87:46:c1:a7:76:05:d9:89:
                    61:aa:aa:3e:1f:ed:e7:f7:8a:aa:16:86:f5:ba:e3:
                    9d:cf:f3:10:e2:86:57:98:99:35:1f:e5:30:a9:b6:
                    20:ca:b3:fb:ee:7b:b4:90:42:fb:d7:a5:75:6e:cc:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:85:27:71:02:31:43:8F:74:98:09:D4:EC:93:5B:41:AF:95:C5:98
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:3d:86:48:26:09:21:24:57:3f:27:69:71:e4:00:c8:f5:
         f6:8e:2d:d8:cf:b5:32:3b:87:c0:9d:67:e5:6e:8d:4a:3e:e6:
         86:ec:7e:ad:a3:c8:58:0a:52:d6:6f:e7:fc:99:0c:22:22:ca:
         8c:c4:e6:90:f4:71:78:c9:6f:90:5e:aa:83:e0:d6:a3:06:a7:
         e0:e1:37:f1:94:c2:6c:4f:1d:af:dc:19:ef:70:09:a4:72:92:
         4b:04:01:c9:cd:15:b3:56:6e:a4:0d:76:36:96:5a:de:55:7f:
         be:52:f5:38:54:f9:ae:b4:f5:e0:1a:cf:1e:95:1b:a0:d6:0c:
         89:8f:86:a5:23:97:d1:2c:50:ac:a3:af:11:04:64:b2:b5:f5:
         43:e1:92:f6:4b:a8:e3:9b:2d:2a:09:41:60:91:60:d6:cc:da:
         ae:da:40:df:e4:d5:b3:cf:94:39:62:2f:e4:bf:7f:c7:92:4f:
         80:1e:d9:1d:db:64:67:9b:0c:19:8b:da:96:05:88:19:ad:94:
         54:bb:75:47:41:cf:21:18:8e:28:f8:a2:b3:fa:cf:1d:ec:2f:
         d1:3f:f8:fd:23:56:37:c8:28:b0:26:86:a4:0c:23:bd:d5:b9:
         e5:3a:91:7a:a9:20:48:8e:f5:86:5a:39:4b:e7:dc:9c:ec:2f:
         88:03:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:39 2026 by rpki-client