Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File:                     aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier:          +5BpW3H0yRqbZ63reoK1XflaVThQBRRnh2OsPmynJqg=
Subject key identifier:   10:5F:C7:4D:95:90:9D:FB:35:CE:57:D8:21:9C:27:DD:73:73:C5:31
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer:       /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial:       019FA1849B2561499EE9142235237EDA875E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number:          1962
Signing time:             Mon 27 Jul 2026 03:00:49 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:49 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:49 +0000
Files and hashes:         1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: kj+HtXkvxQmKO7G/E9qFrnG/mHIbsJWO4hVRcBfhpK8=)
                          2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:9b:25:61:49:9e:e9:14:22:35:23:7e:da:87:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
        Validity
            Not Before: Jul 27 03:00:49 2026 GMT
            Not After : Jul 28 03:00:49 2026 GMT
        Subject: CN=105fc74d95909dfb35ce57d8219c27dd7373c531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:60:ea:d5:75:5c:dc:2f:61:83:00:75:00:
                    77:12:7b:cd:fa:e2:11:81:55:64:1c:2d:f6:98:d1:
                    6a:6e:d7:98:e5:bc:ff:b8:6b:14:1f:78:48:64:b4:
                    8f:29:f5:a5:de:46:c1:7e:aa:b3:66:5e:3c:4e:20:
                    a1:77:49:77:8e:c2:df:5e:02:4d:74:23:ab:d4:ae:
                    32:ae:c8:ea:74:c1:be:5e:d5:50:38:f1:11:c5:00:
                    d8:7b:4d:fe:9c:19:a0:27:31:6c:59:69:33:43:07:
                    30:e5:5d:15:ab:80:39:63:33:8d:14:87:33:a5:6f:
                    de:0f:33:d5:43:04:eb:72:9d:41:2a:8d:ba:a8:68:
                    c4:f2:d5:be:9b:2c:63:65:29:bb:22:c3:dc:b8:0f:
                    73:65:3b:f6:46:ef:a0:fa:7b:b2:6e:3e:0a:8f:d3:
                    d2:b0:9e:2a:2a:8c:87:94:f2:56:6a:db:15:a5:61:
                    2d:bc:e6:dc:14:e9:a9:2e:af:9f:4b:df:32:2f:2c:
                    0d:1a:6d:56:c7:99:46:39:2e:96:64:30:22:54:ce:
                    72:9f:95:6d:6d:b9:02:77:ec:be:5b:5b:f9:37:6f:
                    63:50:cd:4b:49:1b:a8:91:87:71:6e:9b:5b:bd:60:
                    1d:f0:d4:1c:44:cc:5b:6d:bb:69:83:4d:b6:9e:a7:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5F:C7:4D:95:90:9D:FB:35:CE:57:D8:21:9C:27:DD:73:73:C5:31
            X509v3 Authority Key Identifier:
                keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:f1:98:d6:82:bb:9d:4c:e2:d1:8f:02:68:f6:33:ba:e0:
         a3:e3:96:08:55:2c:fe:ed:ab:76:55:dd:10:2b:f3:6a:55:bd:
         53:0a:96:cb:71:92:75:14:4f:64:3c:b3:76:76:3a:71:58:71:
         d7:ca:14:59:7d:99:5b:98:56:1f:26:b2:8f:9a:35:45:0a:64:
         ae:ec:c9:0c:73:38:fb:83:52:58:d5:93:e6:22:29:17:ae:e2:
         bf:3f:15:a4:7c:68:ae:be:cd:11:c6:fb:4b:62:84:86:47:28:
         ed:b6:04:e8:06:1d:a0:4d:25:3c:ac:f4:23:0a:cf:6d:89:c9:
         f7:56:7c:4e:bd:64:d2:8c:09:bd:ec:d1:08:96:1f:ae:19:f1:
         e8:0e:48:b2:dc:e9:af:f6:17:c8:3e:6d:7c:9e:29:de:0b:87:
         14:c1:9b:c5:12:a4:54:de:71:ca:03:5a:e2:50:50:ad:fa:d6:
         63:da:a5:9e:2b:29:4f:91:0e:36:13:51:c4:19:27:9d:b3:5d:
         6d:a4:54:f4:01:5c:5e:09:e5:61:87:20:19:4f:22:47:86:dd:
         03:fc:88:83:a1:4a:56:e5:93:1e:50:21:7c:db:7e:5f:61:b1:
         5c:ee:21:5e:e6:3f:b4:c7:00:82:ff:b6:76:bf:97:3c:57:72:
         3c:57:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:38 2026 by rpki-client