Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File:                     aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier:          EavkWuyD3Egl3PauUdo4CrTReKutM0Mn33x7njIgvIA=
Subject key identifier:   71:D8:46:2A:9E:D5:7E:B6:D8:EC:28:DE:4F:42:05:EB:2A:56:46:04
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       019EB958983F0C641016D540F8860E47D1B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 01:00:51 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:51 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:51 +0000
Files and hashes:         1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
                          2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
                          3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: stGunjbC8/085HTMUaMDik5qDcrX6+WzllrWiKauSzo=)
                          4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:98:3f:0c:64:10:16:d5:40:f8:86:0e:47:d1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Jun 12 01:00:51 2026 GMT
            Not After : Jun 13 01:00:51 2026 GMT
        Subject: CN=71d8462a9ed57eb6d8ec28de4f4205eb2a564604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8a:b2:00:7f:ed:35:d8:b0:ff:72:c6:78:d4:
                    c2:58:13:28:dd:f1:bc:11:d9:50:97:10:61:0a:92:
                    82:58:65:34:52:2e:43:6f:08:01:f1:ab:55:ef:7d:
                    13:60:68:26:89:5e:1a:9d:76:a8:f9:af:ab:8b:80:
                    49:4f:db:1c:5d:50:72:79:87:45:c2:87:86:89:b7:
                    f1:32:83:9e:5c:a5:78:a8:9c:8c:e1:51:f4:04:82:
                    a3:a0:dc:f8:8e:dd:5f:99:fa:bd:31:b6:59:93:cf:
                    cf:9f:af:59:b2:78:60:36:4e:df:6a:b2:89:b6:18:
                    b6:ee:e1:c9:5f:bf:9d:a7:23:49:d3:a7:1d:bc:a5:
                    f2:91:da:25:8b:05:1b:4f:2a:07:fe:01:ce:7f:8a:
                    3e:25:c0:fa:e7:7d:ec:f5:77:2f:2e:23:ac:3e:b2:
                    75:8d:99:07:6d:da:ee:70:0d:54:03:d3:ee:9b:0c:
                    6b:6e:18:57:0d:df:ea:b6:51:34:de:b3:a9:0d:bb:
                    1d:db:be:ab:f6:11:79:86:f3:7c:0f:da:13:98:4b:
                    bb:1d:d5:38:22:fb:87:b1:1f:74:7d:c6:0d:9b:a2:
                    e0:8c:26:55:a3:26:09:f6:eb:a6:f3:25:bc:85:3b:
                    2e:0c:14:0d:9e:9b:7b:2e:7e:96:08:12:bc:7a:f3:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D8:46:2A:9E:D5:7E:B6:D8:EC:28:DE:4F:42:05:EB:2A:56:46:04
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:6e:03:96:48:9f:a7:cb:87:e4:e4:54:ec:53:92:a2:96:
         f4:e5:6d:06:63:8e:f6:e3:a0:db:47:a2:a1:b5:35:c7:38:6e:
         fd:2f:05:e0:e3:c6:e6:3c:c2:0b:bc:52:01:e0:e8:df:46:f7:
         6e:d6:29:15:a9:a0:a4:5d:42:37:b3:14:d9:a3:a8:d2:8a:89:
         93:3a:a7:00:34:d6:fd:f3:4a:1d:1c:57:da:59:51:6f:36:84:
         32:a7:3c:cd:1e:3d:08:ce:40:e4:0d:f0:2e:b8:22:60:1e:16:
         f8:21:77:a8:ac:75:48:2f:6b:e1:7b:6f:54:2a:a7:7d:d1:d9:
         34:60:c5:3d:53:6a:23:a0:57:87:3b:41:7b:18:ec:7e:1d:61:
         40:71:70:fa:c1:56:94:4d:ef:e8:83:7b:af:e4:72:7a:19:0b:
         1d:23:6f:fb:4e:3c:a7:5f:82:dc:41:cd:a3:b0:f6:f1:85:76:
         f5:30:30:b3:71:7c:2b:e5:5a:a4:41:b8:9c:90:28:b0:65:12:
         20:31:19:97:39:f4:a6:3d:bb:7a:6f:fc:c7:14:3f:86:bd:f9:
         8b:69:50:2a:96:4c:a9:d2:2f:f3:ed:86:42:4d:18:5c:24:d8:
         09:17:af:07:cc:45:16:67:95:de:d5:40:9e:03:87:c7:8f:9d:
         2a:ba:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:58:38 2026 by rpki-client