Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File:                     aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier:          /7Ig3vYU0uatDV8A4UFgWR7FGptMEaVGxRwug0sm55w=
Subject key identifier:   D0:95:75:0C:68:D7:08:8E:1E:66:27:27:E2:05:8B:C9:14:BD:6D:72
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer:       /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial:       019EFB7030878234AFA5D10BE1497F5720C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number:          014F
Signing time:             Wed 24 Jun 2026 21:01:34 +0000
Manifest this update:     Wed 24 Jun 2026 21:01:34 +0000
Manifest next update:     Thu 25 Jun 2026 21:01:34 +0000
Files and hashes:         1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
                          2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: hQ4VMZdgTE1oXQIwFpLnaYaSwu8IjNJj/BEPo1Ra7xc=)
                          3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:70:30:87:82:34:af:a5:d1:0b:e1:49:7f:57:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
        Validity
            Not Before: Jun 24 21:01:34 2026 GMT
            Not After : Jun 25 21:01:34 2026 GMT
        Subject: CN=d095750c68d7088e1e662727e2058bc914bd6d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:c4:47:9b:80:a5:3c:f5:8c:fa:51:19:fe:
                    7b:e6:1d:85:73:5b:66:85:eb:f2:3c:16:82:6f:ea:
                    e0:f5:70:56:b4:58:90:46:8c:c1:bf:dd:0d:bb:08:
                    07:fd:f7:83:28:c3:ff:ec:1a:5e:6f:2c:68:6e:80:
                    11:27:f5:46:b3:e4:87:04:83:41:8f:39:38:1c:98:
                    d9:39:02:3e:23:e4:6b:59:49:cd:ae:f4:16:15:6e:
                    ba:07:74:2a:82:39:00:51:4e:94:78:1d:96:7e:4e:
                    78:74:6e:70:0d:c0:5a:84:c7:34:15:f2:02:a1:91:
                    e1:f2:ff:a4:25:30:96:b8:48:ab:75:5e:a2:e4:97:
                    75:bb:33:d7:34:b4:29:d4:21:3c:07:c9:60:bc:76:
                    29:d0:ed:7a:18:61:a4:20:88:1b:e8:f2:92:45:8e:
                    74:05:03:76:a0:62:da:0d:f3:36:d2:e3:d3:b6:34:
                    12:59:fb:09:38:61:89:25:41:a5:11:7f:82:34:89:
                    b3:e1:13:0a:24:f9:25:d2:b8:d5:13:17:9f:b2:c5:
                    73:86:ef:df:ad:9c:50:5f:6d:6a:61:7c:5e:72:5f:
                    f2:23:b3:21:26:46:d6:03:99:31:88:f0:16:39:1f:
                    50:fd:3e:94:37:e2:c1:15:26:55:ec:b3:d8:47:34:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:95:75:0C:68:D7:08:8E:1E:66:27:27:E2:05:8B:C9:14:BD:6D:72
            X509v3 Authority Key Identifier:
                keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:68:3a:82:08:03:21:61:a6:ce:07:cb:45:7f:fd:20:9b:c4:
         07:41:2f:af:c0:10:a5:8f:b0:21:88:f0:33:db:a0:2b:22:8c:
         f4:78:5f:a8:a7:21:30:c1:64:6b:d1:95:6f:e4:dd:5a:4b:97:
         c8:03:81:0b:95:dd:19:37:9e:83:e5:9e:53:64:5d:20:07:5a:
         84:b5:d1:ff:6a:df:c2:20:e3:3b:3e:03:1f:81:f8:3c:70:4d:
         2e:75:c1:c8:f6:15:c5:36:27:2e:d7:c4:99:d3:e9:35:1e:df:
         17:50:01:e3:ae:0d:68:f7:c6:42:8b:c8:2e:32:7f:78:60:c6:
         f6:ae:9b:8f:1e:fb:ba:33:c7:eb:5f:c3:97:1f:14:6e:7b:ef:
         e0:77:48:6d:17:4a:84:ab:8a:be:37:c0:f5:81:e1:cd:a6:0a:
         b2:5b:bf:a4:3b:ae:88:12:57:65:3d:a4:11:cb:1e:ca:80:1c:
         fa:2a:d7:82:6d:d7:3f:d1:30:45:ac:c6:f8:84:92:73:ad:84:
         dd:be:1f:d6:61:3c:42:ea:ce:64:54:06:99:ad:83:dd:e8:ef:
         56:fa:e5:7d:45:b0:b8:49:9f:e2:cf:11:e7:9b:3a:19:12:d8:
         5d:6e:49:c8:35:c6:67:f1:7f:be:41:d0:77:ff:24:41:19:cb:
         9c:11:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:31 2026 by rpki-client