Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File:                     aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier:          u5igDr7aE9TKUIeDM1n3sHO4MzyRNyLVTjaMbnYQwjM=
Subject key identifier:   1B:1E:AD:31:45:7E:F1:91:00:E6:A1:7B:60:72:F8:B2:DE:58:6F:BC
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer:       /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial:       019F927FD1C3C685EE1D1DE68D62AD12099A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number:          061F
Signing time:             Fri 24 Jul 2026 05:01:18 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:18 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:18 +0000
Files and hashes:         1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
                          2: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: 5MzebLSAVEfcC3vk2r5uI/zhGPqj5NQ4wrhnwUnCrDg=)
                          3: qVqPlxRScCv-8COTBMikJ00MVgc.roa (hash: cIM7SO04HJtuy4ha6oHnE1+5MGRerl+2369SkEliLls=)
                          4: rc7mjVS-EYcSXpO7PsGOY4JUjkk.roa (hash: 7u4fLGtxPLAQ+xrwYYbIqaC8pLMYfy/m/Mw8rDqLffM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:d1:c3:c6:85:ee:1d:1d:e6:8d:62:ad:12:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
        Validity
            Not Before: Jul 24 05:01:18 2026 GMT
            Not After : Jul 25 05:01:18 2026 GMT
        Subject: CN=1b1ead31457ef19100e6a17b6072f8b2de586fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:72:89:d3:7b:85:f9:88:bf:74:0e:c3:80:
                    7e:e3:de:75:0f:80:80:cb:05:8c:c1:2b:2c:6a:bd:
                    74:af:d8:74:05:51:76:03:76:a9:d0:77:3d:88:94:
                    2b:b3:27:e5:28:cc:22:5d:f4:cc:e3:b3:7f:44:64:
                    f4:af:c0:b1:94:57:27:a7:5d:67:06:9a:e9:3b:95:
                    e7:8c:f0:1a:ae:43:7c:ed:6b:36:3e:7d:7f:e8:15:
                    14:90:3f:41:e9:6c:07:d6:24:a9:4e:90:93:54:f1:
                    cd:7c:ac:d5:38:d6:bc:14:33:51:9e:b8:ab:be:b3:
                    3a:76:16:77:4b:37:dd:a1:91:a9:0d:ce:d2:18:e1:
                    4e:4e:e9:95:2a:bc:1c:46:0e:ba:ae:03:8f:3e:43:
                    72:dd:78:65:24:9e:bc:17:ef:c5:1e:25:ac:a3:6d:
                    97:bd:10:87:84:a4:8e:1e:e7:b7:26:29:90:37:e1:
                    3b:43:1e:68:86:16:97:59:49:36:67:ed:0e:02:e8:
                    87:70:c3:c4:7e:03:d4:ab:ca:9a:b5:53:a6:3a:ca:
                    b6:38:01:71:8e:83:81:f5:f5:5f:ea:d0:c3:d8:84:
                    2a:49:3a:47:78:53:ff:e4:55:d1:61:8d:b1:e9:f4:
                    2f:c5:3d:14:48:ce:88:ee:2a:6b:de:81:eb:f0:39:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:AD:31:45:7E:F1:91:00:E6:A1:7B:60:72:F8:B2:DE:58:6F:BC
            X509v3 Authority Key Identifier:
                keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:52:36:eb:0e:6b:f3:59:8c:67:b2:b5:5b:ae:1e:bf:70:
         29:2c:fc:6b:8e:90:1f:53:2e:da:24:75:84:5c:f7:84:c5:3a:
         6b:03:f5:66:5e:75:95:c0:24:5a:f1:ef:c9:2e:ff:14:b0:5a:
         0a:c0:f8:24:7a:db:47:6b:86:56:3f:24:4c:fb:2f:0c:4b:a3:
         0e:3e:44:96:9e:6a:0c:0d:f3:fa:aa:20:6e:aa:f4:34:0b:cd:
         05:58:77:ab:34:40:1a:d6:b7:a1:0b:71:7a:1e:94:9a:6d:b6:
         26:82:12:07:59:0e:52:10:1c:76:77:84:b9:fa:3d:f5:1e:0a:
         5f:81:7c:66:21:73:e7:e9:6e:3c:8e:07:3e:4a:6c:ac:d7:55:
         13:f6:1b:eb:5c:7e:1c:74:8c:fd:fc:3a:d5:b6:58:52:1f:3e:
         6d:de:e3:c4:09:5e:2a:cc:f6:3b:a3:36:ff:20:ae:a4:5b:15:
         53:45:9b:2d:05:69:80:10:27:ca:40:15:dd:96:61:f2:d6:49:
         10:75:fa:32:9c:60:d6:76:c5:90:03:af:f1:a7:47:c0:c7:0e:
         e2:14:8a:04:f9:02:d0:d3:fe:6b:d7:3a:e6:25:f0:54:e3:d3:
         11:19:c0:d6:2a:e4:98:2c:29:8e:7a:70:a2:c4:a3:cd:e8:6a:
         e3:59:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:53 2026 by rpki-client