Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          66CnJukr2priWGAeatwvyWl6cSGGyTwUgTZH0BMiLIE=
Subject key identifier:   61:66:C3:03:11:23:4E:E3:98:44:15:EF:F7:16:6A:9F:22:DE:2D:FF
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019E28821A2198A4BACECFFADB44EE26285C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          055D
Signing time:             Thu 14 May 2026 22:01:15 +0000
Manifest this update:     Thu 14 May 2026 22:01:15 +0000
Manifest next update:     Fri 15 May 2026 22:01:15 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: OpKswT992wXzq6XAjE1oA9Hxlny0VuTOlz47YS98Tv0=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:82:1a:21:98:a4:ba:ce:cf:fa:db:44:ee:26:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: May 14 22:01:15 2026 GMT
            Not After : May 15 22:01:15 2026 GMT
        Subject: CN=6166c30311234ee3984415eff7166a9f22de2dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:91:71:ba:df:02:83:d7:c9:81:bf:9d:e3:e6:
                    8e:86:a1:7f:27:ca:b2:5d:4e:c9:3e:07:7f:cd:19:
                    71:26:fb:a9:71:c3:47:58:af:c9:cb:84:12:1c:5c:
                    19:04:9a:cc:da:d7:aa:5a:fd:63:9d:75:0b:cd:14:
                    d1:a6:21:53:b9:b8:e7:24:5c:d7:56:ad:a9:07:5c:
                    94:4f:56:bd:f8:c4:1e:74:e8:19:76:0e:5d:c9:41:
                    5c:4c:da:d1:e3:6c:8c:1c:bf:7f:33:1b:8a:18:67:
                    e4:05:8f:c5:8d:69:27:2a:83:43:b6:55:8a:8c:18:
                    67:b7:b7:14:50:f7:3e:f0:29:f3:e4:d4:9d:ef:ea:
                    57:eb:2f:cc:00:a2:6a:8a:38:c6:a9:dc:c5:e9:01:
                    37:04:61:81:db:27:95:67:79:b9:95:35:33:ca:30:
                    5b:99:74:85:46:eb:06:6d:df:4f:e3:3e:f8:12:42:
                    ad:93:8d:dc:e5:6d:99:c9:b2:dd:87:d1:ce:8c:14:
                    d3:9d:30:b7:0d:39:6f:6b:ff:d3:d4:6d:9e:e2:31:
                    c0:17:08:4b:c7:23:20:6a:9f:13:a7:e3:a9:88:33:
                    ce:7b:a0:67:39:f5:d2:3d:60:cb:07:62:4f:b9:ab:
                    e3:fc:be:23:04:c4:8c:76:67:99:1c:e4:54:9e:35:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:66:C3:03:11:23:4E:E3:98:44:15:EF:F7:16:6A:9F:22:DE:2D:FF
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:bc:bb:d0:01:12:f5:9b:f7:a4:3c:86:15:91:4b:00:05:
         c5:da:77:82:37:66:f2:b3:6b:6a:f4:cd:f6:eb:a6:0d:fb:1f:
         5f:26:43:f7:da:bf:42:67:65:53:d7:96:b1:49:72:0d:44:9d:
         e3:1c:07:bb:17:00:c1:b4:b9:4e:dc:c5:9c:a7:5b:e6:a6:d6:
         b0:0f:86:3c:6d:3e:fd:4c:c6:38:b8:cd:08:ff:e3:3f:03:5b:
         1b:ec:80:80:37:32:a8:04:0c:3f:c7:20:c2:2b:b9:7f:d2:4e:
         aa:12:81:76:d8:a7:d5:c6:1e:a0:88:bd:46:7f:8a:a2:33:89:
         6d:a7:0b:92:36:a3:b4:44:21:d6:98:6c:b0:f1:80:7b:17:74:
         9d:35:04:b3:36:8a:b8:9d:08:d0:6f:bf:2a:6f:40:2c:0f:1c:
         ba:dc:9a:02:15:95:4e:0e:2a:c0:a0:ab:2a:2d:89:23:a7:9c:
         f9:2f:41:32:11:fc:41:e4:90:65:94:02:d3:e1:2c:61:9d:74:
         19:65:6f:a3:09:cf:d9:03:c1:85:91:f2:4c:41:98:dd:cc:d7:
         de:f7:24:f6:d9:10:6f:2e:e8:7d:0a:42:7f:9a:00:d0:3a:0d:
         88:26:d5:aa:ef:bd:4d:34:45:18:47:4a:83:10:35:bc:79:d1:
         8e:a6:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:50 2026 by rpki-client