Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File:                     auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier:          vMT8jFwXuIhsoCZ7zzFZj3rnkNdIOPFPzBUJw5IV8dU=
Subject key identifier:   86:B7:37:C7:64:C2:2D:12:99:A2:D1:D5:AD:FE:E4:8D:03:38:89:78
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer:       /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial:       019F859F84389E43EAAD2218843F686D3A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number:          0206
Signing time:             Tue 21 Jul 2026 17:00:51 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:51 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:51 +0000
Files and hashes:         1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
                          2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: XCspAhkwWGQgrZpaVnm62NANJgOSDy/wm0nBV95V4xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:84:38:9e:43:ea:ad:22:18:84:3f:68:6d:3a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
        Validity
            Not Before: Jul 21 17:00:51 2026 GMT
            Not After : Jul 22 17:00:51 2026 GMT
        Subject: CN=86b737c764c22d1299a2d1d5adfee48d03388978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:19:ee:45:c7:d9:26:0f:67:8c:82:49:db:
                    19:06:d1:6a:0e:b8:74:5c:2f:29:28:91:68:47:2e:
                    01:65:21:c0:a3:4b:7f:07:c1:b5:27:f6:7a:98:3f:
                    cc:d4:8b:d1:2b:00:03:b3:a8:24:5b:f2:cf:cc:a6:
                    11:a4:d5:2b:2c:d9:0c:3c:40:30:63:fe:ad:35:31:
                    1c:ce:f7:d5:60:8b:32:f2:6f:00:7a:6e:9e:e3:bd:
                    d6:84:81:2a:8f:c2:24:ff:d9:0e:03:d8:86:a6:9b:
                    57:e2:ec:4e:2c:72:08:87:a7:1e:41:03:73:24:37:
                    35:56:c5:af:4f:8f:b4:4d:e6:69:7f:dd:96:df:d8:
                    ec:06:81:ed:f4:01:48:00:d2:90:fd:52:59:0f:7c:
                    d9:91:48:52:e2:2e:27:9c:45:ee:8c:a2:22:a9:c4:
                    bd:7e:35:d9:a9:31:35:3b:ef:9f:86:2a:1a:7c:bb:
                    78:61:ea:91:eb:59:93:0a:2e:26:9a:42:f9:25:4f:
                    fe:db:43:97:de:fa:91:f2:c8:4b:b9:05:22:00:c7:
                    66:93:06:bd:0e:4d:57:a9:8b:d2:26:df:d8:8d:e7:
                    69:a4:44:38:6f:46:92:c8:9a:3d:9a:cd:6f:1e:83:
                    d4:b4:4d:6f:a6:bb:8d:f8:f6:9e:b7:d2:81:52:1f:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B7:37:C7:64:C2:2D:12:99:A2:D1:D5:AD:FE:E4:8D:03:38:89:78
            X509v3 Authority Key Identifier:
                keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:6d:78:a2:07:87:a3:06:1f:6b:fb:74:bb:d5:f7:15:7f:
         6e:fa:fd:3a:22:f8:6c:ca:d6:85:23:77:f5:7c:15:f1:86:0c:
         ea:52:a7:ef:b9:06:e7:16:f9:5b:86:46:ee:64:01:1e:9f:f6:
         85:fc:59:3a:36:4f:25:82:23:e7:10:11:bb:4f:b9:ef:b5:4c:
         a7:12:a7:a6:b8:2b:8a:a0:21:2a:85:de:8e:3d:86:2d:3f:96:
         34:97:23:36:3d:bc:39:1c:67:9a:95:1c:f6:22:65:c5:bc:af:
         fe:52:1c:af:ac:1f:a8:40:8e:94:77:ef:c6:b8:21:23:8d:6c:
         b5:46:a9:9c:1e:e5:90:f1:ca:98:71:b4:30:9c:16:ef:84:17:
         61:ff:04:fe:93:ef:8b:a2:be:d4:6b:2a:27:2d:d0:f3:94:86:
         d7:89:38:4b:b9:23:9a:53:83:5d:f8:4a:26:7c:c8:5d:ea:57:
         9d:9c:3f:5f:49:28:29:52:fd:93:b5:17:5b:22:78:28:b7:ff:
         a1:ec:45:33:9f:95:02:89:f8:c7:96:14:e4:45:bd:70:85:51:
         a0:46:e8:a7:f5:84:0c:eb:fe:76:64:c6:05:c0:77:6e:06:c0:
         ba:80:b6:a9:b6:4b:25:fa:ec:62:4f:72:95:72:06:1c:a0:a5:
         5e:e8:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:10:50 2026 by rpki-client