Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File:                     aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier:          cosG+ioNCYkzQs1sXTlFPw6HTOrITj/pZ+X0X7WT3VI=
Subject key identifier:   1F:DA:96:D6:44:48:A3:56:06:13:46:8B:EF:99:A2:ED:5B:8C:FD:3B
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer:       /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial:       019E1EA2EAD960162712773567A7D38DF54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number:          042F
Signing time:             Wed 13 May 2026 00:00:53 +0000
Manifest this update:     Wed 13 May 2026 00:00:53 +0000
Manifest next update:     Thu 14 May 2026 00:00:53 +0000
Files and hashes:         1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: I8d7xaL3h7xT+envj4da/p5di4nXQcDeB6KdVEqLUGI=)
                          2: yFZe_4gAvKXHPPs1FyfrYpXP8Ow.roa (hash: 86Quhr4EELE+xPjStkhiLN4tCtReKxYPPaBQcYq5lDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ea:d9:60:16:27:12:77:35:67:a7:d3:8d:f5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
        Validity
            Not Before: May 13 00:00:53 2026 GMT
            Not After : May 14 00:00:53 2026 GMT
        Subject: CN=1fda96d64448a3560613468bef99a2ed5b8cfd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:f6:4a:f6:c0:6a:21:90:58:a2:46:17:45:
                    d4:0e:58:38:4f:62:f9:07:18:bf:78:b9:21:c1:4a:
                    d2:ea:56:e3:8c:08:7a:4f:33:b6:6f:5a:6c:02:44:
                    54:3e:fe:34:86:50:ca:2f:76:97:ec:ea:7c:3e:e1:
                    9e:86:90:e5:09:6e:fc:b7:ba:7a:8d:60:eb:12:b8:
                    08:80:c2:1e:91:07:ab:44:1a:36:42:4b:4a:86:ba:
                    03:a4:6a:37:99:aa:c7:43:02:97:6b:d1:a0:b7:8c:
                    f2:3b:71:60:7c:13:de:be:4e:a6:f4:34:f8:c6:c0:
                    5b:bc:f3:15:17:dc:95:a3:aa:7c:57:c8:10:95:b1:
                    de:6b:65:f6:48:0c:e2:d8:6d:c3:51:1d:a9:fe:6b:
                    6a:c7:3e:5b:3b:6a:a4:3b:4f:e0:67:60:3e:5e:95:
                    9d:dd:c3:22:fa:94:9f:a4:30:fa:fc:56:8e:39:4e:
                    79:eb:32:bc:3f:a8:3b:42:4f:76:b1:3e:5c:f4:f8:
                    6e:27:72:fd:2d:c1:77:5a:69:c3:83:41:02:c3:d5:
                    4f:48:c8:96:55:78:b3:46:8e:b1:33:22:1c:4b:03:
                    77:3a:83:67:bc:2c:0d:83:87:fd:e7:cf:a6:86:62:
                    8c:00:53:4f:fb:2b:a6:71:0e:98:df:00:0b:1a:c6:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DA:96:D6:44:48:A3:56:06:13:46:8B:EF:99:A2:ED:5B:8C:FD:3B
            X509v3 Authority Key Identifier:
                keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:34:f5:01:27:a3:6f:1e:3e:45:3a:e4:96:56:14:c8:9a:
         53:90:d8:f1:82:97:03:dc:a2:1c:3b:af:98:67:f9:3a:09:21:
         79:30:aa:83:3d:2f:b8:24:d1:c0:d9:44:ca:b5:d1:cd:e2:3d:
         e2:a7:34:28:83:92:5d:2e:37:d9:37:41:6a:c0:12:75:75:b9:
         4b:07:44:b8:52:55:e1:7f:81:20:18:a1:f8:45:d2:09:8a:65:
         3b:2e:da:40:41:60:83:49:d6:56:8d:f3:a5:d9:54:0e:ff:44:
         a4:80:06:c1:7b:8e:44:1e:92:cd:4a:c9:8b:76:7c:99:a7:02:
         7e:c5:a0:ad:ff:29:eb:09:2c:0d:ce:15:15:36:60:d1:ff:69:
         71:9b:ef:ab:1e:ec:18:22:cb:86:47:da:99:bc:8a:61:44:f5:
         d8:43:10:46:16:01:a5:e7:cd:74:98:9e:e9:0c:ab:f9:9c:57:
         39:a2:79:46:ca:51:75:6a:39:56:75:b9:f8:32:e6:68:07:66:
         20:b4:df:fa:90:8e:5f:ca:42:61:e7:72:dd:0e:e7:f3:bb:b8:
         08:3c:db:0d:a1:87:11:d8:49:d1:a5:d0:40:41:95:f2:6f:33:
         05:86:ea:81:cc:3f:8b:0a:83:47:5f:0d:d1:1e:19:8a:9d:2f:
         00:86:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:38 2026 by rpki-client