Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          VfSgtZ5uUJSLhZOaY4Lc6mOiOR9PMDUpWKD31J3QOko=
Subject key identifier:   6B:99:82:32:B9:61:DD:1B:24:23:80:11:FF:37:D4:42:1A:E1:B9:8C
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019F122E4BEE968F6D5CF57EAA332DED4786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          05D6
Signing time:             Mon 29 Jun 2026 07:00:51 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:51 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:51 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: CvZ2xfbqXfTjzdUWt7ywVrTJ54Rgv5VbgF6jnN6addw=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:4b:ee:96:8f:6d:5c:f5:7e:aa:33:2d:ed:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Jun 29 07:00:51 2026 GMT
            Not After : Jun 30 07:00:51 2026 GMT
        Subject: CN=6b998232b961dd1b24238011ff37d4421ae1b98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:0f:e9:dc:89:d6:4e:88:31:ee:6e:d5:71:
                    24:d3:37:99:a6:bd:6c:e8:d5:2c:f5:6e:52:5d:de:
                    82:46:f4:b6:f8:83:62:6e:ee:89:8c:36:ac:b7:65:
                    b9:d5:14:55:ee:6d:0d:43:ed:38:76:a2:e6:de:7b:
                    ed:d3:82:f0:c7:7e:ae:21:d9:20:18:1f:54:b0:ce:
                    47:54:ec:19:c4:bc:f2:38:98:19:12:f0:03:77:81:
                    44:27:24:23:8c:4c:54:ad:79:7e:99:f8:7e:13:85:
                    23:98:30:cc:94:34:63:22:8f:fb:60:e3:ff:21:d7:
                    47:26:c5:36:67:2e:bd:c4:c7:cd:c8:93:bd:41:ae:
                    79:cd:87:44:1c:6e:af:68:f7:92:fb:06:d3:92:fd:
                    61:06:ca:08:fb:1d:76:0e:92:46:48:3e:31:5d:6f:
                    e5:1f:4a:13:be:fb:54:2d:73:5a:13:d1:b3:13:30:
                    50:94:58:af:03:cb:3f:9d:86:de:46:6d:29:16:11:
                    0e:e5:23:fb:84:1c:78:a2:63:b5:71:ee:3d:0c:9f:
                    c7:5d:c8:7e:74:3f:34:69:42:c6:fb:14:6c:7a:27:
                    40:03:2e:b5:27:93:3d:36:e8:3e:16:66:71:a2:8e:
                    f0:fb:0d:b7:56:fd:27:4d:5d:30:66:07:25:6b:bd:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:82:32:B9:61:DD:1B:24:23:80:11:FF:37:D4:42:1A:E1:B9:8C
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:b3:49:71:24:4f:1e:3a:89:b5:e5:d0:98:f0:09:ef:91:
         5e:8d:51:25:52:62:97:45:51:76:a8:22:11:15:4f:6f:fd:87:
         58:dd:80:d5:23:56:69:37:d3:5f:8c:f5:59:34:ca:cb:76:79:
         73:0c:03:cc:d9:35:bc:4b:8f:5d:97:13:18:59:5e:43:d4:4a:
         95:2a:e3:44:e8:fa:54:59:51:87:86:d4:40:3d:2e:db:ba:9d:
         1a:c8:6f:89:9d:16:ad:92:0e:39:b2:3e:7d:1d:f1:ad:c4:c8:
         5a:62:00:75:63:9c:c7:78:a5:10:60:ad:95:d0:fa:2e:8a:0a:
         f9:af:91:f1:c7:90:49:56:fa:61:3a:0e:85:9d:0a:9f:46:ad:
         a5:95:36:79:02:be:4b:9d:f6:5e:6d:d5:0c:66:b3:08:c4:3f:
         a6:35:1a:f2:13:c1:ea:57:fb:3c:b8:de:54:f8:05:61:2b:98:
         db:ee:d7:a7:2c:8c:de:52:43:40:3a:2f:f4:2c:e2:8b:47:55:
         67:a3:2f:bf:6f:5c:b6:6d:09:36:39:13:be:d3:02:4d:70:f5:
         a3:9f:98:1a:85:2a:72:01:4b:34:68:dd:05:ac:c3:7e:74:77:
         b0:cc:ab:a0:bc:9f:bc:e6:61:a2:4f:7d:77:4b:ff:fc:8e:f9:
         c0:21:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:48:14 2026 by rpki-client