Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File:                     aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier:          uMCIzKaitJRJ4JaKZBnp3+KdsoTk/OQ14bDv4mXbFDw=
Subject key identifier:   9C:1A:F1:03:0A:9A:D9:0A:F1:94:B7:A1:79:CA:C0:FE:99:70:8C:1D
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer:       /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial:       019F946DDD5E42CE060DAE29F8B25D24A1AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number:          055B
Signing time:             Fri 24 Jul 2026 14:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:55 +0000
Files and hashes:         1: 3v8uxq2dDLoou0h6jnM1belnYnw.roa (hash: 38ECnv2jC0KqnoPMxr80PYZzlX1OrWkaQN4cTlpMEJw=)
                          2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: ZgFJKCSjR7wg2EaMs8TJ9AhJ6psBLeWj836LtPvl+Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:dd:5e:42:ce:06:0d:ae:29:f8:b2:5d:24:a1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
        Validity
            Not Before: Jul 24 14:00:55 2026 GMT
            Not After : Jul 25 14:00:55 2026 GMT
        Subject: CN=9c1af1030a9ad90af194b7a179cac0fe99708c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:26:ce:37:87:17:39:fc:fc:64:89:fa:cd:
                    d6:12:c3:83:e9:df:47:33:5e:a4:3f:6a:4e:6f:9b:
                    6c:d0:4f:62:60:0e:cd:4e:8e:44:46:03:5f:f7:6f:
                    1e:57:45:fd:f3:9b:39:2a:d1:05:1d:11:d8:2f:32:
                    80:b5:30:fe:b8:c4:15:01:70:d5:aa:b0:b5:d4:82:
                    77:d9:cc:4c:9e:6d:2e:71:67:bb:41:f9:c1:18:ca:
                    c0:22:c0:6e:ee:f1:fb:a1:cc:ac:dc:2f:e4:74:a9:
                    bf:45:9c:8e:70:e0:6e:76:97:6c:a8:5f:13:a4:32:
                    42:20:46:1e:e1:53:30:a5:22:8c:b4:6b:12:18:66:
                    ba:14:11:34:c8:dc:93:01:f6:c3:82:80:c2:3c:23:
                    98:cf:f7:ab:e1:31:74:ca:b5:fa:7c:4d:fd:78:bb:
                    41:c7:aa:d5:3b:58:5c:46:f0:ef:65:ae:b8:db:b2:
                    d8:f2:a2:4c:1c:ce:56:91:e1:95:a7:a0:5f:75:51:
                    be:a3:14:13:05:58:48:aa:32:09:36:1c:2d:cd:48:
                    ee:04:9d:91:b1:1d:96:4c:ea:b9:b1:7c:7b:3c:61:
                    f2:dc:dd:90:20:d1:06:6b:a9:82:8b:e7:02:72:33:
                    3f:c6:6b:28:51:c8:44:ac:98:6c:51:f8:4a:e6:57:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:F1:03:0A:9A:D9:0A:F1:94:B7:A1:79:CA:C0:FE:99:70:8C:1D
            X509v3 Authority Key Identifier:
                keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:b8:c3:16:89:8f:d5:4d:aa:19:6a:12:0f:30:16:fc:34:
         f9:1d:92:f6:14:37:74:be:28:11:f0:80:aa:6f:73:52:e9:c2:
         56:a7:03:71:79:c8:d6:7c:16:9a:3e:aa:91:29:51:f8:61:6e:
         4f:76:a8:cc:ab:69:ef:7f:d4:39:27:bb:a7:5a:d3:b1:17:1d:
         97:64:84:23:5f:a7:32:06:88:d9:0d:37:07:ed:94:ee:9b:ec:
         ab:41:79:80:9c:b0:33:5f:bf:83:38:5f:bf:8e:c7:d4:01:aa:
         41:a0:e8:16:04:c6:7c:08:d3:f1:52:ed:9c:3f:83:e4:52:09:
         bd:e5:18:d6:de:ca:c5:1f:8b:31:1e:9b:e2:4c:78:2c:2c:b9:
         1b:0a:5c:80:19:ae:09:79:5d:7e:f6:41:48:12:c4:3b:a4:7c:
         81:b9:ff:3f:a2:50:3c:a7:67:5a:ac:d8:5d:18:4b:f9:25:00:
         55:a2:51:ec:01:d7:dd:ec:e7:ff:c2:ea:00:e3:33:90:c4:95:
         88:e3:92:45:52:ab:c6:38:f5:6b:2b:56:06:9f:d5:38:ea:a1:
         ac:1c:9b:ef:b9:3b:c0:88:8e:48:8d:5d:fb:83:35:da:3c:d9:
         cb:dc:6e:19:8b:3a:c8:9c:a6:75:2b:02:6f:96:f9:79:05:78:
         8e:05:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:54 2026 by rpki-client