Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File:                     aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier:          diLs8WZJbwWROggRGPwnro5CHp5hXUddq91VQaPgP94=
Subject key identifier:   45:04:6C:D1:4F:93:01:FD:7F:F6:38:5B:A8:C5:A8:36:45:8F:86:7F
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       019EBB46EE1C9C29E2CF60CF39E2B94BB992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 10:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 10:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 10:00:48 +0000
Files and hashes:         1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
                          2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
                          3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: D+voLCYXVqiaHDxRgjCi4MTSKI/Colvaqhbj3oLarfA=)
                          4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:46:ee:1c:9c:29:e2:cf:60:cf:39:e2:b9:4b:b9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Jun 12 10:00:48 2026 GMT
            Not After : Jun 13 10:00:48 2026 GMT
        Subject: CN=45046cd14f9301fd7ff6385ba8c5a836458f867f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:39:09:7e:37:45:1a:af:61:65:22:8c:67:
                    99:47:9f:54:51:dc:5a:86:fa:cf:38:2a:e5:99:22:
                    03:be:da:f5:95:42:a7:62:cc:8f:11:a3:c1:37:45:
                    4f:e5:7a:1d:5b:82:a2:ee:a3:4c:a2:c6:e1:d2:58:
                    b8:69:44:3e:b6:af:8a:a6:2b:03:72:14:46:97:9e:
                    ea:12:da:9f:4f:6f:80:5c:70:5f:c4:2c:1a:22:0f:
                    a3:47:3d:d6:42:eb:a3:11:ef:ed:d9:6b:71:94:14:
                    5f:a4:91:9b:1a:28:cf:75:a1:00:0b:d2:69:c9:33:
                    e8:3e:41:ec:55:ae:85:1a:f8:c9:85:01:b0:59:b6:
                    9c:db:14:0d:cb:03:6e:e9:d3:cd:bf:02:c2:0f:ed:
                    82:7f:9f:84:65:12:b4:5e:6b:e9:4a:2a:32:ce:37:
                    03:d5:55:54:55:97:a1:f7:00:ba:10:86:42:5e:51:
                    d4:87:85:a0:24:39:56:05:1c:20:b3:4e:70:e7:b0:
                    3a:d2:db:4c:69:86:aa:89:17:12:d1:84:c1:9c:d5:
                    db:9c:81:4f:2f:f5:d8:fe:b4:41:22:24:66:e5:b5:
                    0e:18:0d:f5:cc:3d:7f:e8:50:dd:43:7a:49:9e:de:
                    49:48:ef:c0:7c:c0:1c:65:b4:be:0c:12:fd:dd:c6:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:6C:D1:4F:93:01:FD:7F:F6:38:5B:A8:C5:A8:36:45:8F:86:7F
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:f9:d6:65:11:63:8a:a6:f1:97:08:5d:4a:0e:22:44:f0:
         4c:74:d1:fc:53:89:25:23:de:55:e5:44:d0:1d:6d:86:db:81:
         42:a1:33:b6:01:fa:fb:61:ba:b8:1f:cd:c4:9a:ed:c0:b0:4e:
         54:35:93:97:0a:ab:20:84:82:b4:43:a4:4b:00:db:f5:3f:57:
         df:04:ce:cd:4e:3e:76:0f:ba:9d:b7:c6:f1:fd:73:f6:28:db:
         de:ea:92:58:e3:8c:40:11:3d:ed:f2:1c:96:10:15:d0:e2:13:
         3a:bb:ae:da:3b:25:8d:33:b3:94:51:60:2f:ac:e2:1a:fb:ac:
         99:1a:c7:5f:f2:a0:13:3b:96:91:2e:05:d5:93:f0:fe:ac:d5:
         b0:9d:61:ca:c0:52:c9:54:a7:23:0e:a5:f4:d5:93:24:23:aa:
         53:30:b3:36:dd:42:f5:bc:66:bd:e3:80:06:f6:ef:3d:9e:e4:
         03:d2:aa:bc:6d:e2:fd:f0:29:93:82:22:ca:85:66:f6:67:71:
         d0:ba:31:b3:c8:28:67:be:59:61:2a:35:97:33:a3:e4:5e:07:
         6e:46:7d:66:9b:25:40:6b:4e:2e:e2:30:b6:56:cd:bf:3a:0b:
         e9:40:a5:ea:c8:32:0b:9e:34:84:b5:bf:8c:63:7c:c3:00:3f:
         09:70:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:07:07 2026 by rpki-client