Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          DEpbUKWn8/hHiPWhMcYETu7ydvu6ytKp4XVnWAcJMx0=
Subject key identifier:   EB:DA:63:15:33:A6:25:B5:DB:DA:AC:98:19:C0:D7:CD:05:36:D3:F7
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       01A129FB1181AC0887DAB0868497FEADEC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          06EC
Signing time:             Sun 11 Oct 2026 08:01:22 +0000
Manifest this update:     Sun 11 Oct 2026 08:01:22 +0000
Manifest next update:     Mon 12 Oct 2026 08:01:22 +0000
Files and hashes:         1: Ivl8g-yeU6TokuiYRUH3mNvRvC8.roa (hash: 28UMOLyxquYF+ojhzH8Mtr9Cd8/TnqnACtOEyRhgu7A=)
                          2: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: o/Kzv4bHgS0X24D03RA6hnqpHvQTREdHJU58xoqqwwY=)
                          3: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          4: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          5: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:fb:11:81:ac:08:87:da:b0:86:84:97:fe:ad:ec:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Oct 11 08:01:22 2026 GMT
            Not After : Oct 12 08:01:22 2026 GMT
        Subject: CN=ebda631533a625b5dbdaac9819c0d7cd0536d3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8c:be:eb:9d:80:86:c1:1c:59:2e:17:17:32:
                    60:66:54:a8:14:b4:43:60:af:5e:f0:bb:af:6e:5b:
                    c6:b4:64:6c:b9:50:3b:e5:ac:7c:7c:63:7b:3b:90:
                    2b:b1:9c:6a:2a:ec:62:a8:12:b3:c5:9f:30:c2:64:
                    97:e2:f3:55:15:a7:18:77:0c:a7:79:85:00:ce:b8:
                    b2:52:d1:83:85:43:3f:91:7f:b8:c2:60:b5:85:7d:
                    1f:e6:8d:d9:6f:99:24:e8:87:d7:a7:66:4f:bb:52:
                    bf:92:24:86:87:86:55:b8:86:70:7c:06:47:94:ef:
                    8d:d1:a2:15:07:af:21:8e:38:bc:84:30:e4:53:af:
                    c0:cd:7d:5e:dd:86:74:34:01:22:1f:14:ea:6e:96:
                    f8:9a:f3:6c:ed:1a:d5:3c:2a:99:28:53:9e:11:92:
                    32:64:e8:a0:31:f0:28:99:62:e5:d8:cf:0f:e6:44:
                    fa:e0:94:d2:f7:8a:55:12:74:12:ea:70:0f:bc:08:
                    93:24:9e:49:54:88:2c:3f:4e:c8:1e:de:ff:c2:74:
                    95:b4:66:94:07:da:85:af:4a:df:31:60:8d:f3:f1:
                    7d:e7:48:04:b0:a7:6f:34:82:04:ea:72:dd:1b:b9:
                    4d:ed:cf:34:f5:47:71:78:9e:b0:c9:6f:b0:c4:74:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:63:15:33:A6:25:B5:DB:DA:AC:98:19:C0:D7:CD:05:36:D3:F7
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:96:8c:b7:55:9d:b1:87:f2:98:24:ac:c3:c7:d6:2c:dc:a1:
         ec:74:0b:d4:0a:2a:04:a0:29:75:ad:8d:a3:da:60:72:f6:ec:
         f2:5e:48:43:d3:4f:36:7d:1b:e3:ca:46:3c:7b:cf:4f:f0:9d:
         ab:37:20:74:51:1f:97:53:e6:1a:eb:51:ca:d9:14:02:4f:fc:
         9a:75:b8:17:4a:a4:58:86:3d:c4:26:59:e5:b9:36:ae:07:2a:
         3f:3b:39:3c:8f:1c:f7:76:06:48:d8:ee:07:a4:33:79:e0:45:
         2d:5e:72:74:1c:1a:b0:58:4d:1e:47:af:b2:1c:72:9a:17:d5:
         00:87:1c:6e:bd:cb:aa:3d:27:17:ec:fd:d1:c5:13:25:7d:89:
         e1:b4:96:9b:a1:45:ee:dd:89:37:ea:34:71:54:fd:ae:21:bf:
         a2:bb:38:26:a4:aa:15:c9:de:be:ad:d6:60:39:7c:cf:40:90:
         84:95:6b:73:f6:b0:1d:d8:b7:80:0f:5b:48:7b:29:96:5b:5f:
         16:f7:11:cd:4c:55:1b:e9:7f:c6:71:03:fe:0c:eb:56:7d:91:
         33:92:c2:fc:99:e9:61:2e:19:63:0d:31:79:e1:b7:5b:e5:ea:
         7b:5a:02:de:f8:5c:3c:f3:ee:07:9a:45:d5:35:a2:ef:48:33:
         ac:42:6e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEp+xGBrAiH2rCGhJf+rew3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5
ZmYzMjQwHhcNMjYxMDExMDgwMTIyWhcNMjYxMDEyMDgwMTIyWjAzMTEwLwYDVQQD
EyhlYmRhNjMxNTMzYTYyNWI1ZGJkYWFjOTgxOWMwZDdjZDA1MzZkM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4y+652AhsEcWS4XFzJgZlSoFLRD
YK9e8LuvblvGtGRsuVA75ax8fGN7O5ArsZxqKuxiqBKzxZ8wwmSX4vNVFacYdwyn
eYUAzriyUtGDhUM/kX+4wmC1hX0f5o3Zb5kk6IfXp2ZPu1K/kiSGh4ZVuIZwfAZH
lO+N0aIVB68hjji8hDDkU6/AzX1e3YZ0NAEiHxTqbpb4mvNs7RrVPCqZKFOeEZIy
ZOigMfAomWLl2M8P5kT64JTS94pVEnQS6nAPvAiTJJ5JVIgsP07IHt7/wnSVtGaU
B9qFr0rfMWCN8/F950gEsKdvNIIE6nLdG7lN7c809UdxeJ6wyW+wxHSgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvaYxUzpiW129qsmBnA180FNtP3MB8GA1UdIwQY
MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt
ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0
LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJaMt1Wd
sYfymCSsw8fWLNyh7HQL1AoqBKApda2No9pgcvbs8l5IQ9NPNn0b48pGPHvPT/Cd
qzcgdFEfl1PmGutRytkUAk/8mnW4F0qkWIY9xCZZ5bk2rgcqPzs5PI8c93YGSNju
B6QzeeBFLV5ydBwasFhNHkevshxymhfVAIccbr3Lqj0nF+z90cUTJX2J4bSWm6FF
7t2JN+o0cVT9riG/ors4JqSqFcnevq3WYDl8z0CQhJVrc/awHdi3gA9bSHsplltf
FvcRzUxVG+l/xnED/gzrVn2RM5LC/JnpYS4ZYw0xeeG3W+Xqe1oC3vhcPPPuB5pF
1TWi70gzrEJuog==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:26:21 2026 by rpki-client