Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File:                     ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier:          ONHlBqsnGB5JmJ/f7buo8m0bmNhyx03wtJOXy0i6E94=
Subject key identifier:   17:C7:F8:D0:83:E8:D2:BD:05:6B:3B:FF:DA:28:9C:7F:2C:2D:F5:08
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer:       /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial:       019ED72C7204C114246C4D9613AC96EA05AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number:          01FD
Signing time:             Wed 17 Jun 2026 20:01:14 +0000
Manifest this update:     Wed 17 Jun 2026 20:01:14 +0000
Manifest next update:     Thu 18 Jun 2026 20:01:14 +0000
Files and hashes:         1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: cekLQ1HyZ8viFb9c+gB5eD3sVwWpc5lhG/0t3FW+X0c=)
                          2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d7:2c:72:04:c1:14:24:6c:4d:96:13:ac:96:ea:05:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
        Validity
            Not Before: Jun 17 20:01:14 2026 GMT
            Not After : Jun 18 20:01:14 2026 GMT
        Subject: CN=17c7f8d083e8d2bd056b3bffda289c7f2c2df508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:3b:f4:62:01:d7:ed:c1:7a:b7:c3:b4:74:
                    5c:e1:b7:fc:e8:1e:35:97:0e:c4:1e:90:7e:e3:8b:
                    0a:5f:2f:30:fd:87:47:54:46:15:f5:a3:c4:6f:b6:
                    e6:9c:27:6d:e7:14:bb:02:18:9a:6e:ee:ba:fe:95:
                    2f:3c:cb:16:1d:a5:c3:4f:bd:79:de:b5:df:54:8b:
                    60:2c:65:b9:05:8a:15:fd:e4:ee:6f:18:98:70:ce:
                    e2:da:f5:ae:80:1b:e5:1b:1a:3a:a7:2e:4a:9b:42:
                    f4:44:48:12:bf:8b:88:c9:70:2e:9b:b7:9c:7c:2b:
                    cd:09:90:c3:60:95:28:c6:33:65:93:22:fd:2f:1c:
                    ba:ec:84:c4:1a:4a:b1:a7:27:4f:e0:e9:42:23:f3:
                    c7:f8:f9:30:30:89:79:00:d6:56:30:c1:17:15:56:
                    44:32:ed:b2:a5:7a:2d:5b:12:ab:90:78:32:bf:55:
                    92:cf:4a:0d:b3:72:7e:7d:84:79:2e:38:ab:43:54:
                    45:ab:c0:00:79:18:db:9a:02:8e:50:c9:c7:a5:2f:
                    f8:0b:71:46:48:aa:85:04:00:80:f7:cc:2b:25:5c:
                    cb:25:5f:cf:6d:ba:e7:75:c9:68:18:2e:f5:27:f3:
                    0e:b8:23:ca:45:8f:99:0b:25:d6:3d:b6:be:58:98:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C7:F8:D0:83:E8:D2:BD:05:6B:3B:FF:DA:28:9C:7F:2C:2D:F5:08
            X509v3 Authority Key Identifier:
                keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ea:4d:6e:45:6e:f6:a2:99:29:4c:3f:62:61:b2:1e:78:b6:
         30:b0:8b:da:70:a3:22:a4:99:f8:68:72:47:52:4f:9a:3d:82:
         06:5c:e2:e0:7c:6f:0d:35:53:57:b0:14:83:0d:72:c3:04:e8:
         43:24:ee:7a:bd:d6:9c:38:b4:ca:b5:c7:82:95:35:90:c4:fc:
         78:a8:c8:84:74:4d:10:3c:ea:f1:52:db:64:07:24:a9:cc:10:
         6d:59:25:4f:07:ad:aa:7b:3d:6e:4a:97:7a:f7:e5:c0:65:d6:
         b5:e7:fe:78:57:ec:e6:44:ae:85:fb:7e:16:8f:20:9b:29:68:
         d9:06:0b:57:a5:42:70:88:49:19:81:be:5b:6c:5b:44:8b:68:
         db:26:9b:ae:0c:4f:b3:1c:39:ae:ab:06:f9:c6:c1:6c:e6:26:
         f7:cf:33:43:11:8c:76:90:83:65:77:bc:15:b1:d5:a2:5e:12:
         d1:39:1b:5f:18:9e:f3:05:17:fe:79:e6:68:f9:c0:f7:76:0a:
         f3:05:50:2e:af:d0:3d:a3:09:bc:8b:5c:31:a2:5c:d9:91:03:
         d0:f1:f2:e2:21:c5:58:2e:5f:80:1d:26:55:67:60:1c:f6:ee:
         c5:52:3e:e1:cd:83:e7:87:38:e3:bf:19:b6:6c:30:23:8f:53:
         20:0d:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 02:29:40 2026 by rpki-client