Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
File:                     aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json)
Hash identifier:          jWZVZfSFrXEtiWbL2dnOs7E6C7XVbOP30NUNfZvY19s=
Subject key identifier:   05:DF:BF:A8:50:0C:BF:08:5E:E7:F5:39:89:02:01:CE:1A:EB:F5:C5
Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15
Certificate issuer:       /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
Certificate serial:       019FA0E0F5EA5873032ECFBD885DACBA9766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
Manifest number:          01E7
Signing time:             Mon 27 Jul 2026 00:02:05 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:05 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:05 +0000
Files and hashes:         1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=)
                          2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: n9zGA4HDn6+RhrqU7h7P6Do86b1Wppgf2R+p3z8kJZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:f5:ea:58:73:03:2e:cf:bd:88:5d:ac:ba:97:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115
        Validity
            Not Before: Jul 27 00:02:05 2026 GMT
            Not After : Jul 28 00:02:05 2026 GMT
        Subject: CN=05dfbfa8500cbf085ee7f539890201ce1aebf5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:c9:66:cf:ab:d3:83:a5:82:ad:e6:f1:bf:
                    6b:cf:5f:81:75:5f:01:2a:1d:99:62:bb:b6:26:62:
                    8d:d6:6c:17:60:06:92:d0:48:33:21:a1:b3:f2:f4:
                    dd:d9:4d:fc:df:07:c9:6c:99:35:62:52:85:14:03:
                    b5:8d:59:72:37:33:64:19:03:f2:35:0d:ae:8a:6b:
                    1c:15:46:f5:d8:05:c4:c6:05:4b:26:d1:ac:7b:09:
                    ed:22:89:13:46:5e:42:03:ef:21:76:49:37:ab:4b:
                    f6:97:a8:3b:4a:fb:41:d7:f9:f8:75:c0:15:50:d8:
                    6e:1a:00:36:e8:53:73:99:25:67:1b:4f:76:34:84:
                    07:42:2f:0e:73:2e:6f:ff:88:c2:f3:23:8f:20:6a:
                    10:72:d9:5e:2d:3b:c9:e0:a9:9f:f5:82:02:0d:94:
                    4c:ff:45:ef:2a:48:7a:74:5c:18:0f:71:2b:ac:92:
                    cb:d2:d2:bc:73:d6:7d:2c:37:a6:9f:14:f8:11:b5:
                    32:09:de:cc:cf:56:42:9d:15:62:c4:59:db:94:b8:
                    85:27:8c:9c:f3:20:e9:8f:28:88:f8:f5:2a:db:8f:
                    2a:89:86:45:15:e8:1b:4f:7d:50:0d:38:86:1c:b8:
                    5f:27:c1:80:d5:50:25:1e:9e:6a:52:2f:f5:85:a1:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:BF:A8:50:0C:BF:08:5E:E7:F5:39:89:02:01:CE:1A:EB:F5:C5
            X509v3 Authority Key Identifier:
                keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:04:5a:01:34:b5:1f:11:47:e4:2f:42:4b:0e:fd:9d:2f:
         9f:e6:94:99:84:2f:1a:04:c2:30:84:9f:f2:dc:95:1f:6f:62:
         af:b3:c2:9d:30:68:6d:f8:cd:ba:19:65:c0:82:12:88:89:3d:
         e1:36:ac:0b:ec:1e:44:fc:d6:77:c5:f3:d0:68:85:6f:09:ea:
         6b:17:a1:3c:b9:d9:06:0b:bc:e2:59:76:ad:9e:ca:7c:76:a8:
         f6:b1:01:6e:fa:82:67:d1:ba:48:33:69:3a:70:f2:c7:65:80:
         34:35:3a:1e:95:49:3a:ef:6b:8a:c6:91:e4:b5:75:1e:c6:4b:
         2b:b1:cd:55:05:3a:3d:a1:60:19:c5:bc:71:f3:3f:9f:e9:f4:
         db:03:13:9d:67:e3:70:f0:fe:fa:cc:e4:f1:fc:ee:f9:42:a2:
         4a:74:47:35:6f:0f:4c:bc:c8:5a:e9:48:df:6c:d9:a4:95:9e:
         5f:e6:2c:33:47:d0:ed:84:9b:82:46:f4:3e:93:93:b4:55:17:
         57:72:7c:cf:f7:06:e7:f8:63:02:0f:eb:a7:f3:84:25:3d:6b:
         df:de:dc:0b:65:fa:33:de:03:cc:b7:fa:89:76:29:f5:4d:45:
         f8:71:5d:7b:60:b7:bb:94:f9:61:4d:c2:3e:38:97:96:27:6f:
         5f:88:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:42:30 2026 by rpki-client