Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          /CrRtCnjFekrTMsy3FtXLnZ4OYB/vfi2PddS2HUfpec=
Subject key identifier:   62:87:E5:4D:35:D1:90:DC:0C:19:89:D2:93:0C:CA:C2:05:4C:9D:A2
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       019E2EF2009065407809354663C4AA036448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          1937
Signing time:             Sat 16 May 2026 04:01:12 +0000
Manifest this update:     Sat 16 May 2026 04:01:12 +0000
Manifest next update:     Sun 17 May 2026 04:01:12 +0000
Files and hashes:         1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
                          2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: 0hGmoDhjVzSKg7S+7DVzAKekyz9/WjoA8m8I7qpvzDM=)
                          3: NRT4C3Pjv2I_O_e87vpe9r63k4s.roa (hash: D1obKpZVoMMUypxjp2MJaz2giSb4WOep13hUdjC2bqs=)
                          4: T3bly-tZ9XID-SOloXwH3hTsc_E.roa (hash: aeV/m0RLRp31h+Weu05/IHsjHV2WSBXJFEz0Mww+iyc=)
                          5: X0L_WIFrHSaQewTifeIRhTrccl4.roa (hash: E11xutFhSfE8vZg68noD+8THw3mcAN+GK8jpf/T/4u8=)
                          6: ryrPySlNxpsVkX_ZxM78hhxv-f8.roa (hash: c2RA8jai5Wlkob7UVTv7PAf8GP4M7TVRsl2kLYkwKGQ=)
                          7: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2e:f2:00:90:65:40:78:09:35:46:63:c4:aa:03:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: May 16 04:01:12 2026 GMT
            Not After : May 17 04:01:12 2026 GMT
        Subject: CN=6287e54d35d190dc0c1989d2930ccac2054c9da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:38:45:95:ba:2c:a4:e6:63:df:31:13:fa:
                    a5:54:75:66:20:f4:b3:9e:f8:0a:c1:88:db:7f:1e:
                    1f:5c:ae:3f:db:ff:e8:c0:33:c9:be:6c:e9:93:c9:
                    07:8e:63:08:b7:7c:4a:95:42:c1:9a:a7:d3:11:61:
                    77:0e:87:91:a0:38:59:67:d9:f9:34:44:21:f3:8b:
                    a8:6c:c8:85:a6:36:12:11:d2:87:27:c8:7e:a4:1c:
                    31:32:a1:9a:8e:65:a1:1a:36:8f:f2:16:f8:7c:1e:
                    82:6f:8f:05:3c:5b:e1:79:73:36:eb:c8:1c:35:b2:
                    ff:30:63:a5:5f:ca:f4:eb:f2:82:a5:dd:0f:44:e0:
                    88:b8:88:d4:99:0a:e7:60:f9:96:c8:83:b2:da:cd:
                    38:f9:21:53:38:65:17:25:c4:03:a9:ad:ad:41:c8:
                    f2:26:e0:c6:aa:75:09:f6:7e:80:56:94:5a:d9:75:
                    2d:d8:5b:b2:16:0c:97:03:99:3a:e9:ab:1e:49:df:
                    2e:da:35:fe:63:f9:7f:37:62:3e:fb:7f:b5:92:0e:
                    27:fb:b0:a6:77:46:6d:59:7d:b2:90:57:2e:45:40:
                    0d:c0:92:04:1d:60:90:a3:d5:74:ff:a1:2b:d4:6e:
                    37:bd:3d:2d:db:e3:9e:aa:88:41:c8:8b:da:3f:eb:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:87:E5:4D:35:D1:90:DC:0C:19:89:D2:93:0C:CA:C2:05:4C:9D:A2
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:57:5d:5d:6f:23:60:7c:f2:c2:d3:3b:12:b5:59:8e:2a:e3:
         2e:a9:1c:ff:8c:83:e4:41:f9:ad:a0:af:e6:d4:6a:65:5d:fd:
         e8:e8:03:99:34:b0:c6:b4:d6:77:cc:4d:8d:ac:a4:0a:a0:1e:
         aa:7c:27:9c:53:a0:b8:f6:28:6a:e4:e6:20:5d:9b:3d:6a:c5:
         ec:e0:1f:56:7c:58:72:1b:80:96:ac:eb:f6:ba:8c:6a:17:d8:
         48:f7:7e:b8:7e:b9:a2:ad:15:99:4d:8e:62:80:e1:fa:42:5d:
         8a:cf:fa:54:d7:8c:0d:e1:a3:59:69:47:0c:49:63:a9:19:8c:
         64:9d:fd:63:7e:68:f2:34:48:ad:f8:ca:02:a7:ab:e3:eb:87:
         80:58:bf:10:4d:84:b5:ee:99:23:dd:24:57:2b:08:e2:e1:fd:
         80:0a:78:d8:fe:cf:5d:9b:da:a8:02:83:d4:26:41:1b:ec:e6:
         e5:95:bc:d8:46:54:d7:7e:5d:5f:83:0c:7c:7f:80:fe:cf:3f:
         77:e4:3a:17:eb:47:5f:1a:81:04:9a:fd:9b:e7:3a:d1:80:1c:
         9d:6d:86:cb:2b:0f:7e:9a:2f:7b:41:58:eb:9d:c5:15:37:35:
         92:e7:00:c7:70:4e:6b:f3:3f:b8:7d:28:13:ed:c4:d4:53:b9:
         e2:12:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 06:15:28 2026 by rpki-client