Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          qzBHGXPEnGb5OM8AelLt78ix973focA2wj2dVJ7pFLg=
Subject key identifier:   64:4F:09:15:6D:99:E8:D2:25:97:1E:3F:11:B3:22:A4:EC:A8:E1:7E
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       019FA22938A5C5161948A18D01F326BBF9EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          1713
Signing time:             Mon 27 Jul 2026 06:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:38 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: T9ihYHEspogWU/DroqHwMNeUyYsVUftczXQzVugWn7Q=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:38:a5:c5:16:19:48:a1:8d:01:f3:26:bb:f9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Jul 27 06:00:38 2026 GMT
            Not After : Jul 28 06:00:38 2026 GMT
        Subject: CN=644f09156d99e8d225971e3f11b322a4eca8e17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:3c:b2:02:e7:05:51:cf:b6:f3:1f:4a:e8:
                    3a:84:b9:b9:96:4d:0e:3d:6a:2d:0a:69:c5:d4:c2:
                    94:cd:29:62:6d:e0:fd:f5:4c:13:e6:b0:94:54:19:
                    7b:4e:8f:93:cd:1e:4f:9e:2a:70:49:a9:28:8f:55:
                    8e:46:67:0d:62:fe:1b:47:26:7b:24:78:6e:89:1e:
                    c3:61:9d:b2:d1:46:c8:6a:0b:fa:25:2b:25:9e:5d:
                    2f:d0:7c:ec:27:26:38:7b:1d:01:42:99:13:f2:5a:
                    16:9c:88:a8:8b:b0:00:a2:1c:12:be:86:93:5f:c4:
                    57:07:8d:a0:83:a6:c0:4b:bf:f5:5a:ce:81:c7:e6:
                    dd:85:43:5f:79:89:2f:d7:6a:e2:47:06:fe:5f:ce:
                    e8:64:7e:02:e9:a7:99:7a:b5:62:a9:5b:53:60:58:
                    a7:ba:67:a7:61:5a:ff:fc:00:5c:4f:0b:53:5b:50:
                    32:1b:02:56:1e:5c:1b:69:53:1d:5f:41:69:df:8d:
                    45:aa:2a:9d:f3:79:6d:1f:6d:3a:b3:79:e4:35:2b:
                    d7:af:68:36:38:25:f8:c2:06:85:e9:66:13:91:fe:
                    36:1a:66:43:82:d7:53:70:07:25:ed:80:a0:5e:57:
                    08:59:f2:c7:fa:3c:3e:e1:ec:db:68:fa:03:95:79:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:09:15:6D:99:E8:D2:25:97:1E:3F:11:B3:22:A4:EC:A8:E1:7E
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:bb:ba:ae:36:3c:a9:39:db:34:0f:00:67:fd:0a:93:05:c8:
         be:34:c4:b5:cf:79:61:3d:23:a8:1a:21:ef:8d:66:88:a0:e5:
         37:b8:4f:02:53:d3:13:a7:eb:be:ed:34:50:84:8f:cd:56:4e:
         0a:9d:5d:b2:dd:21:6a:fa:f0:46:69:fb:32:9c:8d:df:5f:7f:
         4b:fd:ee:d4:57:f9:dd:79:98:79:bf:8b:b6:fb:71:bd:fe:cb:
         84:9c:1b:72:4a:bf:62:ad:27:e4:01:ea:81:62:88:2d:55:c4:
         c6:db:67:7e:7a:60:32:f9:65:8e:f6:69:dd:24:3b:f3:5d:a6:
         00:0b:fa:03:44:92:1c:f3:43:34:8e:e5:71:f1:51:33:3e:bc:
         9e:25:ef:4e:d5:39:77:9b:9a:37:9f:dd:8f:df:88:a9:f5:b1:
         54:b3:e7:03:61:e6:74:08:23:66:27:07:28:5d:56:e1:b8:b2:
         c9:b5:15:ac:b9:e2:a7:b9:db:78:cc:84:50:5f:68:8e:83:ec:
         e8:96:65:80:6b:eb:58:a6:2e:50:0a:bb:26:cf:55:f2:0c:b8:
         a4:f7:22:86:0e:95:3e:0b:84:06:8e:b1:03:dd:8f:ea:f0:cf:
         77:cf:1c:0e:2e:b2:5c:27:d5:7f:fc:ad:d6:05:31:cc:15:0a:
         a2:3d:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:34:46 2026 by rpki-client