Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File:                     aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier:          /fr2qmSz8wFown9JBlKEQJDcD+CzPpBakW5R7NzF0DM=
Subject key identifier:   1D:01:C2:AD:8E:BD:A6:32:8E:D5:E3:FA:93:28:FB:DE:3B:57:38:AA
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       019F91A3709F2F4BD7AE9FD1B5ADF5319A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 01:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:35 +0000
Files and hashes:         1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
                          2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
                          3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: 88K4AyUFhkjDfkSmdLeAo1WxDcpICToohV7wDy4ozu4=)
                          4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:70:9f:2f:4b:d7:ae:9f:d1:b5:ad:f5:31:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Jul 24 01:00:35 2026 GMT
            Not After : Jul 25 01:00:35 2026 GMT
        Subject: CN=1d01c2ad8ebda6328ed5e3fa9328fbde3b5738aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:ba:11:2a:f2:c6:80:58:8e:5d:c6:3b:05:
                    92:83:d2:15:e8:c8:e9:05:36:20:cc:d8:38:1f:23:
                    6b:d3:39:55:30:47:d7:79:be:77:8c:5d:67:1d:0f:
                    91:a7:db:8f:6b:9c:72:ec:8b:97:da:bb:5b:28:b8:
                    de:68:d2:05:23:a3:d2:b1:e2:60:db:54:81:fe:36:
                    fe:0b:a4:81:67:a7:0f:5d:39:4e:cd:da:30:8b:d1:
                    2e:f4:31:67:5e:ed:9b:bb:29:16:ff:c1:80:dc:8a:
                    eb:c9:b2:13:8f:e7:cc:26:d0:f7:b3:ed:38:40:9b:
                    5a:57:78:b3:ad:8d:16:e9:ea:73:d3:ee:b9:50:a9:
                    0e:87:20:49:d3:08:df:ed:40:f1:bb:03:57:aa:d9:
                    f1:9b:7b:c7:e4:60:79:92:31:f3:77:50:82:4e:8f:
                    82:f4:e5:2f:97:47:16:e2:fe:54:f0:1b:2b:52:50:
                    6c:3b:20:e0:0b:1a:7c:6b:c9:a7:83:5f:c5:14:5d:
                    61:48:cf:3b:07:34:e0:34:6e:e1:de:96:68:db:0c:
                    e8:05:b7:1a:79:e8:76:3c:77:88:c9:14:13:4f:36:
                    5c:76:a5:81:f0:e7:59:6e:70:0c:80:78:71:69:c8:
                    c7:52:3f:94:8d:4b:db:9f:ea:09:f2:65:31:32:81:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:C2:AD:8E:BD:A6:32:8E:D5:E3:FA:93:28:FB:DE:3B:57:38:AA
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:6c:6c:0e:67:7b:5e:50:b7:72:ac:55:11:f6:95:59:ac:5c:
         d6:eb:d1:16:44:da:18:94:9f:a9:46:05:79:68:31:c6:1e:98:
         ed:d7:3e:b9:c5:cd:31:3f:fb:c4:21:6e:94:0f:5c:4f:1a:2c:
         3c:c1:14:55:40:70:52:1e:16:b1:e0:c4:ca:21:8a:b0:0f:32:
         6b:a5:37:83:4f:71:15:9a:2c:b6:1f:5d:a4:e8:03:d9:1a:6b:
         86:e5:91:d8:e8:5b:d0:dd:25:eb:36:b9:bc:d9:49:5c:cc:c2:
         de:5d:82:d5:c3:13:3b:20:39:f7:31:5b:0c:fa:6f:14:b5:ca:
         c7:a9:3a:3c:85:3d:4e:51:00:d5:c0:39:e9:68:f9:38:04:b0:
         6a:5f:3b:fa:b6:6f:f2:e0:bf:30:c8:39:f8:28:73:58:fe:fa:
         6d:c8:05:88:aa:33:38:8b:30:e7:df:91:2b:38:7b:96:53:41:
         0a:aa:cf:3e:0f:a1:6b:7f:ce:4f:3a:eb:7e:1b:dd:fd:ba:a4:
         0c:37:76:5d:af:77:d1:0f:96:fe:b4:ef:80:be:83:d3:e4:07:
         3c:ff:4a:58:80:87:2d:f6:7d:b9:57:93:07:a0:8f:ff:3d:e1:
         79:67:d5:e1:79:76:1e:e1:3b:94:55:db:9d:ad:9c:e2:67:05:
         f9:43:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:52 2026 by rpki-client