Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          HaXkurbSDmbIFkYIJP8m3AUkRoGvZ9hMTB5QpYOkVxw=
Subject key identifier:   3F:49:C0:D0:FE:E5:D7:CE:39:D8:B1:7F:0D:C7:15:45:5C:1C:95:1E
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       019F9391DC6F5179A98EC51E801E2B10772A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          078C
Signing time:             Fri 24 Jul 2026 10:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:37 +0000
Files and hashes:         1: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (hash: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=)
                          2: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: NbcSfeCbHUn6AlHcWuRwCLGOTITTVw+vP4Dn7lB6YKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:dc:6f:51:79:a9:8e:c5:1e:80:1e:2b:10:77:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: Jul 24 10:00:37 2026 GMT
            Not After : Jul 25 10:00:37 2026 GMT
        Subject: CN=3f49c0d0fee5d7ce39d8b17f0dc715455c1c951e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:11:b7:b9:66:2b:fc:93:9b:07:14:99:1c:
                    70:fb:86:16:cd:93:92:db:f0:fb:ea:f5:4f:34:fd:
                    c1:6a:24:da:3b:cf:79:0b:a2:d5:94:5f:a2:4e:d0:
                    e7:b1:ad:e3:d1:18:74:2d:37:55:77:68:b4:8a:99:
                    52:7c:49:ea:5e:84:e4:1f:92:80:3e:34:98:58:e3:
                    9d:0d:23:32:db:56:c4:1b:7b:40:84:cf:33:be:7e:
                    48:2d:14:e0:72:b5:cf:31:be:de:7a:e2:3a:86:87:
                    22:d6:a8:d2:ef:88:0f:d1:58:a9:8a:cf:ed:8a:c9:
                    e8:4b:9f:77:14:36:51:e1:71:c3:d9:32:3a:0b:9e:
                    aa:dd:32:fd:16:0d:0a:29:d7:b5:5e:d4:7f:0f:66:
                    ff:dd:22:93:f8:0c:fc:5b:b0:1e:b4:33:93:ee:d3:
                    e9:6e:2c:a4:56:e0:92:8d:bd:97:21:cc:e6:5f:00:
                    f8:90:2d:49:a3:7b:3d:ea:94:c4:0d:bf:58:df:0f:
                    2d:7c:e8:d4:ec:86:d2:f3:62:a5:6f:78:a3:43:1c:
                    a2:54:00:ca:fb:9d:47:c7:59:b3:c9:5f:db:26:bc:
                    fc:f7:f0:6b:82:a6:8b:58:fa:2d:22:09:e2:cd:0d:
                    55:69:d4:12:e2:ad:59:5a:48:01:e8:a0:cb:7d:f6:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:49:C0:D0:FE:E5:D7:CE:39:D8:B1:7F:0D:C7:15:45:5C:1C:95:1E
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:31:f4:f9:af:4a:ff:14:17:b2:97:1c:dd:14:75:2c:ba:
         74:65:d8:4d:88:94:a5:c5:39:db:8a:0a:dd:bc:92:2b:28:22:
         02:fe:62:b4:1b:71:80:c8:18:0d:18:a1:89:cc:86:96:4d:a1:
         0e:fc:3c:32:45:d7:ef:4c:f7:14:a3:8f:f2:18:a9:d5:ba:32:
         07:9a:61:b1:df:fa:fe:ee:76:25:f2:d5:a5:35:7f:78:7e:c6:
         e2:0f:ef:77:e5:73:0d:ab:e1:63:dd:b0:f3:1c:b5:1b:38:7f:
         a8:af:0a:e8:95:09:55:9e:36:c0:ff:3b:33:cb:dc:40:4e:a5:
         d6:ff:f2:32:1b:b8:a9:8b:60:7e:0e:9c:37:41:e2:a9:99:bc:
         0d:d0:4a:4d:81:49:44:73:86:80:4e:00:a6:66:ba:8c:ed:2d:
         d4:df:99:5d:43:33:08:1f:54:fb:aa:ff:de:bc:01:92:e7:64:
         62:44:d0:37:75:de:cf:70:88:f4:21:80:9a:2f:72:e5:66:de:
         78:54:73:e6:88:9e:64:89:dc:d4:8d:6c:b8:38:cb:df:3d:1a:
         f7:73:e7:51:44:95:bc:b5:8c:80:96:f2:ef:18:6c:f7:99:51:
         0d:90:48:e1:9d:96:3f:d9:f1:b8:f7:6d:af:88:cb:30:f0:e0:
         2f:49:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:52 2026 by rpki-client