Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          4ja67BRLUexwDwV6Q4ybGZA1B1o1/Gkhm/f6qPkYHuY=
Subject key identifier:   74:AA:BF:AD:00:1A:F2:26:26:CF:C9:A6:8D:2A:4F:95:EA:67:0E:7B
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       019ED274027FDCC44441BDA1F9ECA3692DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1967
Signing time:             Tue 16 Jun 2026 22:01:18 +0000
Manifest this update:     Tue 16 Jun 2026 22:01:18 +0000
Manifest next update:     Wed 17 Jun 2026 22:01:18 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: e1WJpjCwv9e0JcwJBwiipzxDWkUoydHrD6pRV/Fbpag=)
                          2: VIwi371Ilu32-PFrptGj4IRsgO0.roa (hash: GJeobJzmQ47MTxxCaSTphRwACX/qnxopY4ODc2q66rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:74:02:7f:dc:c4:44:41:bd:a1:f9:ec:a3:69:2d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Jun 16 22:01:18 2026 GMT
            Not After : Jun 17 22:01:18 2026 GMT
        Subject: CN=74aabfad001af22626cfc9a68d2a4f95ea670e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:16:ea:c2:32:f3:d6:2c:1a:78:49:92:87:f4:
                    1f:21:f6:ee:e4:d6:2b:2b:c9:f9:64:04:f4:43:ab:
                    67:f0:e3:80:10:cc:cd:88:7c:07:33:13:29:0f:c8:
                    f5:8c:d3:9f:71:12:2e:c8:f7:1a:bb:85:03:60:37:
                    28:75:b6:b6:7d:95:cc:7d:c3:3d:07:a5:3b:0c:98:
                    f7:70:aa:00:ac:9a:2c:50:14:34:66:0f:22:43:9e:
                    3a:ce:86:1d:b5:1b:c6:59:aa:d0:8d:34:9b:2a:d3:
                    59:93:0a:6e:6d:b7:de:c1:20:72:08:7c:10:ae:3d:
                    5d:9d:9d:2d:1f:75:30:4e:5a:ad:8d:68:bb:d4:4d:
                    c2:b5:7e:bc:42:53:c1:34:16:a7:2c:79:6b:c8:c6:
                    33:d1:81:1a:b4:d0:5b:f2:80:6a:0d:2a:f6:bd:fe:
                    3d:6f:de:39:19:14:1c:5c:28:17:00:32:7e:43:1b:
                    36:40:46:52:cc:cf:0e:38:a4:db:dd:65:0c:05:7f:
                    8e:2a:8b:fe:20:bc:de:7d:70:1f:2d:f4:ae:e8:87:
                    54:aa:96:46:4b:9b:7a:92:89:4d:ac:b1:b0:01:e6:
                    59:4c:f2:12:4f:13:f2:fe:e7:dd:7d:52:e3:e7:c0:
                    d1:c3:59:ff:98:e8:61:e4:2a:58:ea:85:5d:cf:7c:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AA:BF:AD:00:1A:F2:26:26:CF:C9:A6:8D:2A:4F:95:EA:67:0E:7B
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:78:ff:ee:00:fa:11:05:20:56:4d:43:7d:65:fb:e0:c2:
         70:1d:ef:5f:b4:75:f4:e1:3c:6b:84:20:80:d5:40:9e:05:a6:
         34:bf:33:df:9d:8f:20:2d:89:db:1b:ce:36:40:aa:d5:79:9c:
         8e:20:db:cb:92:cc:25:84:97:f2:4c:0b:13:33:67:5a:c1:7e:
         85:04:cb:a8:56:ba:3e:67:35:67:d0:f8:35:9b:2d:9d:58:4c:
         7b:f0:3c:ce:c5:6b:1a:53:e2:63:ae:16:66:7e:7a:57:17:9c:
         95:9f:81:ec:e0:6b:89:07:c1:fe:47:90:17:54:da:2c:cc:15:
         dc:3c:a9:b1:ff:82:47:72:03:24:63:07:3a:a6:2e:ec:ad:ac:
         8e:51:81:d0:26:13:a9:00:e8:9a:c4:84:4d:52:3b:26:d4:b8:
         3c:f2:8f:c7:b4:87:56:b8:b2:58:ec:76:33:0d:fc:9e:61:d3:
         da:3b:ff:f6:20:40:0b:a4:6d:50:85:ac:fb:ae:a4:9b:be:7b:
         c2:ec:5e:56:84:dc:0f:70:bd:7e:e7:ec:71:a4:76:7c:89:de:
         e1:c4:1a:f2:b8:a8:62:6f:31:d8:fa:9b:61:2a:af:84:2a:e8:
         55:86:ca:fe:e3:e1:b6:1b:dd:3b:cd:27:ab:65:61:30:c5:a1:
         69:4f:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:03:08 2026 by rpki-client