Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          aBsknh9FGYZLFgUuOXYI6rTGi7QW/Z2VBbhobSv/Klc=
Subject key identifier:   55:59:21:B2:7E:B1:A5:1A:38:34:C5:5D:93:BE:1A:33:8A:F2:AC:73
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019D390A86E5F70B6CF484304B005A9F7C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          04E1
Signing time:             Sun 29 Mar 2026 10:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:24 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: 7CfBqCDA9FE2a14914HVY/ruLn9wh2eUz+Wh2hmKmlA=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:86:e5:f7:0b:6c:f4:84:30:4b:00:5a:9f:7c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Mar 29 10:01:24 2026 GMT
            Not After : Mar 30 10:01:24 2026 GMT
        Subject: CN=555921b27eb1a51a3834c55d93be1a338af2ac73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:2c:29:07:03:48:95:b2:9e:7c:2f:74:d8:
                    9d:74:48:7a:79:bd:ab:2f:f8:53:72:03:be:a2:70:
                    56:20:4f:b1:e6:14:cb:17:62:2e:34:26:db:7b:25:
                    6a:de:de:48:35:e2:6c:c5:ba:df:49:3d:8c:3b:d1:
                    48:ec:40:2b:96:a0:e7:58:71:30:67:3d:86:dd:30:
                    30:81:9a:99:57:af:fb:46:74:e0:b3:0a:ee:cb:c8:
                    1b:77:21:76:d6:66:74:fa:00:27:a8:5e:3d:2a:83:
                    27:79:f0:b6:48:4e:0a:95:15:64:33:ac:22:45:51:
                    91:b2:d0:8e:1c:1f:ed:23:18:d6:db:7d:78:56:d6:
                    5a:87:65:75:08:f0:41:88:63:d2:bf:69:42:72:c4:
                    56:c9:e9:72:5b:65:30:1f:2e:b7:51:a1:50:e4:3d:
                    08:77:99:b7:ab:37:61:ca:36:df:3f:49:33:c8:06:
                    54:bc:77:eb:bb:c3:31:3f:b6:b4:00:e0:9d:4a:50:
                    b7:0f:18:c1:2d:f4:a4:b0:38:7e:c2:85:21:3f:2b:
                    e6:b9:24:f4:28:c2:d3:c0:93:cd:d8:72:77:85:b3:
                    e3:76:c9:c3:15:f1:1a:34:1e:87:09:5a:68:35:fc:
                    af:7d:28:72:25:f9:14:43:00:e8:10:6c:45:c9:83:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:21:B2:7E:B1:A5:1A:38:34:C5:5D:93:BE:1A:33:8A:F2:AC:73
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e2:68:af:25:81:69:6a:36:5e:1c:36:0c:b0:cb:bd:5d:bc:
         a1:df:60:34:27:a2:95:d9:ba:35:25:2c:d6:9f:d3:72:7c:55:
         f3:e9:0a:38:e3:a1:2d:aa:13:42:07:26:42:d2:81:80:ff:59:
         4a:75:ba:70:31:4f:fd:61:d5:f8:45:40:b5:57:51:49:eb:cd:
         4f:2c:9f:85:6c:dc:be:a9:72:92:4a:ab:72:c6:38:4f:03:d8:
         7c:2b:e9:e6:fe:a4:4c:ea:31:de:bc:11:b8:cb:9c:2d:50:bc:
         c2:d8:c2:82:31:cb:58:b1:28:4c:58:99:f0:7c:92:57:c5:0c:
         6e:93:81:d9:55:08:c2:e1:93:aa:0f:46:9e:72:bb:32:a9:51:
         4e:4d:b7:cc:5e:9b:05:f8:2c:77:35:fe:44:c6:99:cf:f6:73:
         96:9a:af:d2:f1:3e:7b:9f:15:cf:11:4e:e9:94:78:ae:4a:2c:
         52:6d:3f:02:97:cb:05:c3:d8:b4:30:01:2d:a4:a6:02:14:0e:
         a2:3c:03:b7:2d:59:1c:71:59:d8:a8:37:0f:39:90:de:41:3f:
         cb:a6:9c:88:03:70:a2:38:94:38:f7:bf:d0:58:76:5d:1a:75:
         96:1a:2b:e5:35:80:92:25:11:79:65:37:42:a0:dc:bb:9a:3c:
         22:77:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:36 2026 by rpki-client