Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          xMgUSHBWLAE+bedh5hCDeqYBmCZWOjfuPJ1dB2CBiLQ=
Subject key identifier:   22:6E:67:7B:55:FD:93:50:E0:34:92:7F:09:A0:12:01:DC:8A:12:93
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       01A001A636F8AD42EADFB949D0EA4560282D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          0652
Signing time:             Fri 14 Aug 2026 19:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:05 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: s2kiQKKmlljj+YtUniXVq3ZZ6hjE+VItHnYf6RK04GY=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:36:f8:ad:42:ea:df:b9:49:d0:ea:45:60:28:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Aug 14 19:01:05 2026 GMT
            Not After : Aug 15 19:01:05 2026 GMT
        Subject: CN=226e677b55fd9350e034927f09a01201dc8a1293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:3f:c4:97:c2:b7:04:7f:97:55:17:af:9e:
                    5a:09:09:52:8c:f0:76:ad:01:47:1b:a5:77:44:fb:
                    47:f2:ad:67:47:ce:2d:4b:b8:c6:ab:b1:b0:c0:12:
                    52:90:1d:b9:a7:ce:0d:e1:c5:8a:37:15:19:d7:70:
                    24:95:b4:f4:4d:f5:6b:2d:c6:15:72:c7:f2:b1:a2:
                    f8:25:ef:50:ab:f6:d7:e0:7e:36:29:2f:15:8c:35:
                    d7:67:83:23:5f:08:37:09:6c:4e:2a:5b:60:50:d2:
                    3f:ed:73:2e:50:18:d5:28:af:f6:3e:f8:df:b8:8c:
                    85:57:da:49:d9:62:fa:e7:81:53:43:d6:f5:91:4e:
                    f2:17:67:68:f9:1b:a1:90:82:8e:93:5d:ab:a1:93:
                    87:90:c1:93:78:22:24:70:bd:5d:04:e0:e3:50:55:
                    36:5c:78:30:29:f3:69:48:ff:9d:58:b1:65:a0:8e:
                    ce:4a:fc:a2:fd:29:d7:df:23:9c:57:5c:bc:07:d6:
                    d9:2f:7c:30:94:f0:7f:29:9a:d4:c7:ee:59:2c:af:
                    91:41:b4:fb:0c:78:cf:35:be:95:f1:c4:71:58:c1:
                    fe:61:d1:fc:25:7c:9f:38:6f:03:7d:2a:c7:a0:b9:
                    18:c3:5f:12:54:94:f3:4b:e9:ab:eb:67:eb:39:58:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:67:7B:55:FD:93:50:E0:34:92:7F:09:A0:12:01:DC:8A:12:93
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:dc:64:9f:49:7e:ae:89:ea:3e:71:3a:45:86:7d:93:f4:
         1c:7c:15:1f:72:29:90:b1:ea:da:13:95:08:0f:8f:79:63:9e:
         8a:72:31:dc:c7:14:92:78:59:59:b6:c2:e2:d9:2f:36:81:34:
         5d:44:73:21:96:05:7e:2c:2e:5c:88:bf:b9:dd:f7:a5:c0:c8:
         51:8d:c7:f3:7f:f6:e0:9d:f5:97:e0:50:cd:14:cb:09:db:37:
         96:a4:cc:14:e8:3f:a6:52:55:71:ea:a4:46:77:51:59:ed:89:
         0e:16:44:21:74:8c:74:fd:47:86:a5:bf:f0:16:08:80:4d:3a:
         e3:83:de:11:8c:7b:6f:42:9f:1c:b2:df:ce:69:69:08:2c:0d:
         9f:45:e7:c6:19:38:52:49:2a:5b:d2:f7:fd:51:c1:ea:f6:0e:
         33:85:b7:aa:60:fc:df:93:a6:ea:b4:41:ec:d4:d2:ca:ab:a6:
         5a:1c:d9:e7:ac:3d:45:bb:e3:27:58:8b:98:f2:05:87:f7:b6:
         5b:3c:b9:74:8d:cb:ca:69:fb:51:1e:e8:f6:96:05:f3:d3:21:
         1d:16:59:35:59:39:7f:d5:42:d5:b5:d2:fc:8d:ca:80:20:86:
         33:60:bd:69:ba:7b:2d:a6:11:bf:a0:ed:a2:bc:1e:7d:ee:b0:
         7c:0d:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:02 2026 by rpki-client