Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File:                     ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier:          DNATpEwOceheYzY7NSFHZWzHJ1i8br9ZAFKQe2vStVk=
Subject key identifier:   30:7F:73:73:C7:66:68:B3:DE:A1:7B:5D:7E:64:3A:3C:49:DA:68:3E
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer:       /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial:       019F8EA2D695782DBE22B6234B1B595A9C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number:          025C
Signing time:             Thu 23 Jul 2026 11:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:04 +0000
Files and hashes:         1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: w2IyjAP3R0jOwVbnbSTrOV1KLIfetFzV22GfSxtfpXA=)
                          2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:d6:95:78:2d:be:22:b6:23:4b:1b:59:5a:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
        Validity
            Not Before: Jul 23 11:01:04 2026 GMT
            Not After : Jul 24 11:01:04 2026 GMT
        Subject: CN=307f7373c76668b3dea17b5d7e643a3c49da683e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:06:9d:b9:6b:9c:7e:f7:56:6b:bb:4e:e0:
                    34:7c:c0:98:13:da:37:cc:42:33:f6:a1:5c:80:a2:
                    6d:d5:27:10:d3:86:9b:33:60:f2:ae:73:27:7b:0e:
                    cf:66:33:4a:c6:66:28:c7:72:52:3b:ad:09:b8:b7:
                    9c:42:fe:0c:3f:cf:9c:ba:e2:7d:00:14:db:ac:f2:
                    e6:0a:e1:8e:78:d1:39:59:97:0e:80:f8:79:3c:2c:
                    14:ba:8a:f2:fa:7c:1d:af:7f:45:fc:93:1e:bb:31:
                    8d:e7:e4:34:f9:a1:34:4b:c4:eb:41:fe:15:1e:c0:
                    17:91:28:5e:35:1f:a1:ca:fb:9d:61:04:6b:50:18:
                    7c:d6:f9:8f:ef:f6:c2:cd:63:96:f1:f7:f3:cd:03:
                    e6:3a:60:a2:f1:80:2a:0e:e3:55:f8:c8:4a:54:b8:
                    79:fe:32:68:ca:1d:4a:37:60:44:37:74:06:6a:2e:
                    7a:a3:c0:1a:d5:e3:75:2c:66:f4:4f:cd:cb:05:99:
                    6f:c9:a0:46:c1:27:2f:00:c4:f4:88:d2:f1:ee:a1:
                    d8:fd:48:82:1d:bb:1b:b9:a8:a3:d3:2d:b0:c1:29:
                    4c:1f:f9:94:a4:db:b9:80:81:0b:d5:32:11:ed:ee:
                    d4:f3:e0:6e:3d:9a:ce:96:6a:a8:f8:89:9e:ec:39:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:73:73:C7:66:68:B3:DE:A1:7B:5D:7E:64:3A:3C:49:DA:68:3E
            X509v3 Authority Key Identifier:
                keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:fa:aa:21:e0:1c:1b:90:95:a2:f3:05:d2:ed:ad:5d:2d:
         50:59:b9:4f:c6:c6:d6:2f:f9:dd:a6:0c:70:b0:f6:43:05:c3:
         d7:d1:a1:45:c2:60:14:6f:53:8a:b4:1b:fe:d1:e1:75:ad:03:
         50:17:0b:45:c9:5e:62:e1:43:43:d3:3b:3e:16:3f:7b:22:16:
         1f:7f:48:01:bc:90:eb:64:aa:57:d1:41:58:fe:1f:8c:8e:90:
         df:a6:82:e7:f5:3a:da:5c:6a:a6:92:04:f4:b1:ba:2b:01:89:
         5f:28:34:6c:c6:76:56:67:11:a1:12:9f:d2:5f:b0:80:fc:ea:
         ca:0f:e3:fa:28:cc:d5:43:f4:84:d6:d3:75:4b:7e:7b:e8:b1:
         d0:77:da:f5:b1:96:06:3c:ef:a3:8d:ca:d5:24:ff:3b:28:b4:
         1d:95:86:06:00:7f:bd:ed:67:39:89:7d:f6:47:55:32:f0:46:
         10:cd:55:e7:c2:32:90:62:c9:42:ab:89:b6:00:d8:a5:55:27:
         4c:73:07:8f:fd:f1:e7:6a:a8:c6:f3:ed:8b:cf:90:6b:dc:9f:
         27:5d:ab:1c:3e:13:2d:11:8d:b3:ad:50:a4:30:a2:fb:25:8b:
         8d:f6:ae:08:83:3e:1e:ee:c8:31:7a:06:3f:01:1b:02:7a:d1:
         83:7a:8d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OotaVeC2+IrYjSxtZWpyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzVlY2YxNWYxYTZkYjNjODI2MTA5MmFlYmUyMjEzMjU5
MTM1Y2UwHhcNMjYwNzIzMTEwMTA0WhcNMjYwNzI0MTEwMTA0WjAzMTEwLwYDVQQD
EygzMDdmNzM3M2M3NjY2OGIzZGVhMTdiNWQ3ZTY0M2EzYzQ5ZGE2ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjsGnblrnH73Vmu7TuA0fMCYE9o3
zEIz9qFcgKJt1ScQ04abM2DyrnMnew7PZjNKxmYox3JSO60JuLecQv4MP8+cuuJ9
ABTbrPLmCuGOeNE5WZcOgPh5PCwUuory+nwdr39F/JMeuzGN5+Q0+aE0S8TrQf4V
HsAXkSheNR+hyvudYQRrUBh81vmP7/bCzWOW8ffzzQPmOmCi8YAqDuNV+MhKVLh5
/jJoyh1KN2BEN3QGai56o8Aa1eN1LGb0T83LBZlvyaBGwScvAMT0iNLx7qHY/UiC
Hbsbuaij0y2wwSlMH/mUpNu5gIEL1TIR7e7U8+BuPZrOlmqo+Ime7DmjLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB/c3PHZmiz3qF7XX5kOjxJ2mg+MB8GA1UdIwQY
MBaAFGo17PFfGm2zyCYQkq6+IhMlkTXOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQt
N2EyODg0OTZlZDY2LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQtN2EyODg0OTZlZDY2
LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgL6qiHg
HBuQlaLzBdLtrV0tUFm5T8bG1i/53aYMcLD2QwXD19GhRcJgFG9TirQb/tHhda0D
UBcLRcleYuFDQ9M7PhY/eyIWH39IAbyQ62SqV9FBWP4fjI6Q36aC5/U62lxqppIE
9LG6KwGJXyg0bMZ2VmcRoRKf0l+wgPzqyg/j+ijM1UP0hNbTdUt+e+ix0Hfa9bGW
Bjzvo43K1ST/Oyi0HZWGBgB/ve1nOYl99kdVMvBGEM1V58IykGLJQquJtgDYpVUn
THMHj/3x52qoxvPti8+Qa9yfJ12rHD4TLRGNs61QpDCi+yWLjfauCIM+Hu7IMXoG
PwEbAnrRg3qNBg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:54 2026 by rpki-client