Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          cMjU/SQBVkh7r3vUUkQ8yvIKl1gVEHYKKVU++geceQY=
Subject key identifier:   97:86:2E:C1:5A:C0:E7:DE:5F:EE:11:77:1D:51:00:7B:E2:6C:4F:C9
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       019E1EDA38BC7CB8AC4C7B54773D09EFAF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          06CB
Signing time:             Wed 13 May 2026 01:01:18 +0000
Manifest this update:     Wed 13 May 2026 01:01:18 +0000
Manifest next update:     Thu 14 May 2026 01:01:18 +0000
Files and hashes:         1: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (hash: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=)
                          2: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: Ij0yg0Grz9Vb3UAX2KINeBqFYwYfvNbRqJ2s82NxLc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:38:bc:7c:b8:ac:4c:7b:54:77:3d:09:ef:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: May 13 01:01:18 2026 GMT
            Not After : May 14 01:01:18 2026 GMT
        Subject: CN=97862ec15ac0e7de5fee11771d51007be26c4fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:ab:d1:6b:2c:99:3c:80:87:06:f1:bd:84:
                    95:f0:1e:91:32:51:0b:8d:80:4f:b6:34:e5:0b:d7:
                    c0:bd:99:ba:f0:c6:ec:02:4e:55:36:fb:2c:33:25:
                    54:be:b9:7a:f1:73:7e:d3:30:1e:67:61:e8:bb:33:
                    98:c6:82:3a:8f:ec:54:d8:8c:93:69:21:53:87:9e:
                    91:76:63:90:7c:a4:5c:eb:cd:9a:f4:76:e6:8e:d5:
                    3e:1d:c5:45:9a:97:97:0b:e2:52:8c:0c:d1:f1:1c:
                    c0:64:4c:68:3b:ec:80:1d:a5:c7:49:ea:31:c5:23:
                    0c:f5:aa:0c:d2:08:b3:ff:30:66:b7:69:32:56:83:
                    ee:03:d7:f6:86:ce:9f:0f:c3:f8:ad:5f:a7:4e:65:
                    6f:34:f6:55:2e:fe:36:43:0d:4a:aa:53:5c:89:b8:
                    0f:c3:1f:2b:0c:c6:6a:29:86:8d:e1:12:f1:df:d5:
                    45:fe:97:97:a6:28:b4:25:6a:d4:9e:61:4d:77:29:
                    36:b6:a1:78:58:07:66:cf:1e:89:43:d0:6f:33:22:
                    f7:82:b7:db:28:d7:0e:cf:a0:a1:08:f2:6c:24:d6:
                    79:87:ae:53:99:50:d9:45:4f:0a:aa:5d:a5:7a:24:
                    3b:36:ad:85:a8:e3:d6:bd:39:b9:f2:c2:e7:87:a7:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:86:2E:C1:5A:C0:E7:DE:5F:EE:11:77:1D:51:00:7B:E2:6C:4F:C9
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:21:d6:f0:91:50:3c:bd:f9:3c:38:14:47:ff:91:27:44:af:
         02:44:6f:43:87:01:f7:9c:c2:50:e3:eb:ee:8f:de:ab:74:c3:
         7a:85:38:b2:de:f2:f1:f1:18:2b:e0:ff:16:5e:4d:ad:19:28:
         57:d7:8c:83:00:95:48:4b:5e:49:3e:ce:5a:e2:aa:a1:64:f0:
         c9:5f:23:32:52:d8:6f:6f:ea:76:fa:14:5e:68:dc:b7:9d:0e:
         dd:bc:86:c6:38:b4:cd:9e:4f:ff:c1:20:8f:53:a4:0e:00:64:
         e9:61:f6:29:3d:27:da:06:87:0d:9e:6a:35:15:cd:59:17:e6:
         e1:20:f4:cd:fc:2a:be:0f:51:8b:b4:dc:5f:34:29:21:89:bb:
         97:e3:97:a1:fe:e5:40:a2:81:0f:2d:88:54:e3:23:91:e3:63:
         b1:2c:c6:ca:e0:33:42:cd:89:ce:62:bb:c0:18:fb:68:a2:13:
         3c:fe:93:fd:4d:9e:6d:64:8f:3f:9e:8e:6a:2b:93:87:1d:36:
         42:fb:da:be:c5:f0:e3:51:90:b8:ee:e0:3c:a9:6a:06:18:39:
         2f:2b:0a:c1:72:47:f1:27:25:9c:79:dd:d8:2c:35:56:8e:1b:
         0c:57:2a:50:ba:c2:7c:28:de:8e:d7:79:e0:90:68:ee:fa:48:
         73:87:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:31 2026 by rpki-client