Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File:                     AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier:          FiTrJcrozKIxwgG1Pmsgdf7Od+EeoiLciF0d4XPaBgE=
Subject key identifier:   06:C3:35:2F:B9:CD:96:7E:BE:33:68:C7:8B:07:3C:64:50:E5:09:26
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer:       /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial:       019F190CAA8BF4442AF18BC2B45311F50095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number:          1685
Signing time:             Tue 30 Jun 2026 15:01:27 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:27 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:27 +0000
Files and hashes:         1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: 3kDUcXW77Iis5znhQG8pK2EhLBYDjRpTDFb5oq55PYE=)
                          2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
                          3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:aa:8b:f4:44:2a:f1:8b:c2:b4:53:11:f5:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
        Validity
            Not Before: Jun 30 15:01:27 2026 GMT
            Not After : Jul  1 15:01:27 2026 GMT
        Subject: CN=06c3352fb9cd967ebe3368c78b073c6450e50926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:3d:b7:8f:e8:87:b6:07:50:78:35:d1:4a:
                    e3:eb:56:6b:72:35:b2:79:84:54:90:c4:e8:c2:70:
                    60:84:f3:15:05:be:58:f3:22:d6:74:5c:56:9f:a9:
                    5f:90:7f:28:98:93:19:dd:75:b0:97:47:82:7a:26:
                    da:ee:79:96:fc:ff:dc:5b:7d:42:5c:5f:2b:46:96:
                    21:30:a2:0b:62:24:34:b3:a2:fe:fd:0e:06:1d:85:
                    90:1f:33:3e:5e:e2:d5:76:ac:c2:4a:cd:d2:b5:0b:
                    53:c5:b6:0b:ed:0f:20:49:a5:67:62:d2:fb:58:86:
                    74:9b:b4:48:dd:e3:f9:d8:f8:5a:e7:da:b9:88:09:
                    e5:d9:f2:6b:83:b4:71:fc:25:e8:8e:8e:a8:7d:45:
                    90:44:66:b9:ba:f5:df:c2:c3:d8:51:4a:ba:ba:02:
                    07:b5:0e:35:48:9a:a7:37:fb:88:59:b0:c7:2c:bf:
                    1b:08:52:be:63:95:d2:37:87:1c:fc:74:7b:95:99:
                    0e:2e:cf:58:e5:fd:0e:da:22:79:e8:5e:b3:f9:78:
                    da:4a:35:00:62:81:84:d5:55:3c:8a:2e:ef:0d:a4:
                    91:8b:da:4c:8d:05:71:c1:d7:0b:cb:09:78:19:c1:
                    df:db:31:c5:80:51:71:a7:ac:05:c1:b8:43:8f:44:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:35:2F:B9:CD:96:7E:BE:33:68:C7:8B:07:3C:64:50:E5:09:26
            X509v3 Authority Key Identifier:
                keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:7b:4c:31:68:55:14:83:02:8c:9f:b8:f8:1a:20:8c:a2:
         d1:7c:7b:08:24:6f:ea:18:56:01:9a:5a:7c:9d:0c:ed:19:aa:
         b2:2e:96:d0:c8:f9:fc:ec:94:aa:80:96:e8:64:3e:63:27:bc:
         dc:48:fa:a2:90:b2:e7:f2:ec:e2:e8:2d:28:ab:40:55:24:41:
         c8:b0:09:b6:43:84:48:f5:db:b9:02:67:17:38:1e:88:01:13:
         48:31:21:aa:9a:9c:4d:b1:ed:f5:d6:95:a2:fc:48:9d:f8:7b:
         03:ab:84:63:bb:a6:24:fe:2f:7e:8e:5d:77:23:20:98:e9:93:
         e8:74:8e:51:b7:d5:4d:31:ad:43:85:7c:f4:a9:94:aa:4b:67:
         d8:13:30:03:6e:90:46:6d:6b:bf:1f:23:ed:30:65:8d:6a:44:
         20:92:30:6c:7c:1f:b8:19:f2:fa:d0:1c:89:8c:94:6c:30:0c:
         5e:17:46:86:22:de:d0:6f:b4:5a:17:c0:d7:11:81:4c:8b:a0:
         b3:15:c3:41:84:26:b7:b0:82:1d:eb:14:61:21:2c:13:57:a6:
         86:73:7f:21:9b:7f:b5:aa:a0:df:7a:1a:76:ee:4d:75:c3:eb:
         ed:88:6c:6f:44:68:b9:36:1e:92:90:32:52:87:2e:07:16:57:
         ab:2a:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:52 2026 by rpki-client