Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File:                     aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier:          RuYmehmRjC2ohnCaItQPij50E9L7Yl1KDOiPVhdlKbg=
Subject key identifier:   7A:19:08:B7:9D:1F:5A:42:A5:29:DF:1B:12:75:7C:09:E3:A5:11:47
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer:       /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial:       019F92B6736CF4757E7F3AC3709EAC897FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number:          170B
Signing time:             Fri 24 Jul 2026 06:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:58 +0000
Files and hashes:         1: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (hash: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY=)
                          2: ZnincJbZ5PaTXoMonj_Ctiiqrus.roa (hash: isWE5Tfc29wZU5CXfTVoPdXm00k/FOrPBirq1sQW5u0=)
                          3: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: QqpdWuV0EzLLZoUEC4d9qRHJ6Oay5xwPls39y0byizg=)
                          4: djk33VTAFS7Xg0krsRI1T_nFwPA.roa (hash: 8hgR6br/pEJbt5XXEd2D/vHBDf8jYfgzmueO6ffVo28=)
                          5: knCed-keSzVEOPICx1gRMxep3OM.roa (hash: PwNnPjtHsrQvIYgK4ATN14eaGro5/ZgkqW0B/Ot+2cU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:73:6c:f4:75:7e:7f:3a:c3:70:9e:ac:89:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
        Validity
            Not Before: Jul 24 06:00:58 2026 GMT
            Not After : Jul 25 06:00:58 2026 GMT
        Subject: CN=7a1908b79d1f5a42a529df1b12757c09e3a51147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:77:97:4b:20:2b:3e:f5:d5:24:bb:35:aa:
                    72:ae:5c:4d:4b:45:6c:b9:b2:5d:96:bb:62:54:ef:
                    83:a7:64:f8:a7:33:03:8e:65:4a:ec:9d:f0:76:37:
                    8e:2a:9e:55:ba:d9:be:a6:f8:1b:99:4a:48:88:90:
                    0b:96:78:f0:d1:a7:43:11:70:c0:da:f6:d4:55:b3:
                    d3:52:d6:d4:40:a1:e1:4c:56:53:a3:54:99:07:03:
                    24:9a:1c:3b:97:5e:a2:e1:0a:b6:bf:e1:24:10:cf:
                    e7:7d:7e:ad:8e:a8:51:66:16:38:f6:d5:42:a3:47:
                    00:a7:10:19:d8:e3:8c:50:fe:26:c8:f0:ad:8d:41:
                    59:70:23:dc:a3:ad:2b:ae:51:f6:54:83:91:5e:a4:
                    a8:99:d5:67:e0:5b:ba:f0:ef:1b:84:ca:af:f3:01:
                    0b:f7:09:15:85:d5:9c:43:a7:5b:20:6a:87:cd:06:
                    d7:81:71:4e:00:bf:97:ad:45:02:f6:44:94:cf:4c:
                    49:12:7b:b5:37:83:fd:20:da:64:84:f3:a3:00:0d:
                    65:f9:9b:a2:83:2e:48:a4:2c:53:a2:b8:48:ff:94:
                    a7:7c:9f:27:bd:5b:f1:84:a7:4f:14:df:0c:c9:24:
                    6b:f3:a2:8a:eb:ad:1e:35:d6:15:6d:f9:2b:15:ed:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:08:B7:9D:1F:5A:42:A5:29:DF:1B:12:75:7C:09:E3:A5:11:47
            X509v3 Authority Key Identifier:
                keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:0f:e7:8a:2a:d5:8b:d0:ea:30:88:ea:a0:17:11:15:1d:d2:
         1e:c9:f8:99:50:8a:26:58:9e:34:a7:7d:74:d1:a3:42:e3:f6:
         ca:7f:9b:6b:54:61:4a:3d:47:24:38:7d:2a:b7:f3:1d:81:aa:
         5b:7f:01:66:07:29:af:c9:ee:8c:c4:d1:91:1c:b2:95:ab:46:
         fd:b2:e6:ee:ef:1d:d1:cd:23:0f:33:61:db:d1:98:ae:55:4d:
         03:6b:f4:19:64:91:37:06:95:67:40:6c:9c:a5:ef:a8:d6:90:
         81:ec:d5:1b:b8:f4:aa:06:5f:16:7c:d0:c4:a0:4f:5c:13:f2:
         7e:f1:19:68:60:1a:5d:9b:20:10:0a:a4:5c:54:d3:ce:8e:7e:
         de:1d:fa:cc:84:16:af:d5:3a:fa:f4:d4:83:8e:5f:ca:5e:f6:
         e7:5a:d3:19:2a:58:77:bd:95:f5:0f:63:13:24:76:16:d8:2a:
         56:0c:de:f6:7f:f9:80:63:63:79:6f:a2:c9:46:ac:a5:2d:39:
         b2:39:44:45:a1:5a:05:fa:5b:c6:6a:fc:30:a4:d5:eb:d3:c9:
         54:82:17:93:de:38:df:c7:61:1c:c8:cd:ad:92:60:a6:d8:32:
         ff:cd:14:ad:c7:23:2c:ac:56:c2:2b:39:97:cd:d3:58:b6:40:
         1a:e0:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:32 2026 by rpki-client