Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          /3ji7xtSGyu+AeDsdQu4LBic74Pl+tCl+7eiVx8m98w=
Subject key identifier:   BD:0D:9A:06:2D:1D:09:F1:9D:A0:3C:A7:DE:B1:E6:CF:16:15:69:B8
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019E1ED9BB925870921B9B90C3892115BAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          0558
Signing time:             Wed 13 May 2026 01:00:46 +0000
Manifest this update:     Wed 13 May 2026 01:00:46 +0000
Manifest next update:     Thu 14 May 2026 01:00:46 +0000
Files and hashes:         1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: CB4nIMvY3NgkNXoz7sGtwRyQqEp3FBGlEeh6U84aDaw=)
                          2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=)
                          3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=)
                          4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=)
                          5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=)
                          6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:bb:92:58:70:92:1b:9b:90:c3:89:21:15:ba:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: May 13 01:00:46 2026 GMT
            Not After : May 14 01:00:46 2026 GMT
        Subject: CN=bd0d9a062d1d09f19da03ca7deb1e6cf161569b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:e7:6b:f6:44:f9:4c:8d:fa:a4:02:b7:dc:
                    4d:fb:ba:ee:ac:4a:7a:15:4d:02:c3:14:58:c8:b1:
                    98:e0:51:0a:43:fd:72:f3:55:4e:6f:59:76:77:99:
                    8f:32:e1:0a:06:c0:d0:e8:9e:f6:85:7e:4d:0c:09:
                    9b:f5:27:cb:09:ce:19:06:8d:57:f2:2a:51:0a:c0:
                    cf:0c:ef:44:f3:12:fb:74:cf:ac:9a:a3:a6:40:61:
                    88:5f:78:52:b4:1f:17:02:03:b1:2d:de:aa:4f:29:
                    ed:58:c0:53:cb:13:2d:49:80:50:ab:96:42:db:b2:
                    42:8c:d6:85:c5:7f:a3:f7:7f:74:08:8a:cf:d7:6e:
                    ce:81:47:4d:8f:e0:91:6c:c1:4d:c4:8c:7d:f0:54:
                    5b:66:88:a9:a9:7c:0e:da:71:6b:bc:f0:01:06:13:
                    36:46:88:f8:28:24:99:72:d8:48:a1:6a:65:2f:21:
                    8b:9f:01:36:2c:03:57:9d:d5:e9:68:bd:d9:77:48:
                    28:c7:07:8c:9e:aa:43:e3:65:e4:69:8f:ee:6c:e0:
                    7d:ec:50:0e:fe:71:2c:22:36:8b:4a:8f:75:cc:38:
                    f4:4d:cd:ab:f9:02:c2:52:4f:5c:36:fa:e2:5a:2d:
                    de:68:03:3a:1c:f6:04:9d:46:0a:4c:51:04:bb:06:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0D:9A:06:2D:1D:09:F1:9D:A0:3C:A7:DE:B1:E6:CF:16:15:69:B8
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:34:53:f4:c1:1c:ac:38:25:4c:0b:0f:10:73:e1:3f:e0:3e:
         af:37:96:92:cb:d4:6e:bc:d2:d0:0d:10:ba:d2:57:ca:ab:6b:
         02:8d:7e:c6:a5:cd:28:27:8e:b3:3e:bb:26:e5:4e:81:89:b6:
         16:32:a5:d7:e3:bf:24:bb:24:4d:41:98:72:6d:c9:3b:09:b2:
         ab:f1:1a:8c:90:ad:7a:21:7c:76:a1:76:de:2c:b3:ca:ee:bf:
         19:b9:c6:e5:1e:13:78:68:88:d8:e7:63:54:da:1a:22:40:d3:
         ea:0a:40:d2:85:e3:4a:68:4c:62:0a:d9:27:e6:0b:f4:35:87:
         cb:c7:67:fb:9d:32:1d:0d:dc:ab:09:e0:8c:6e:7a:c0:2f:51:
         6a:f0:40:4b:a2:89:48:3a:1f:10:f5:5e:25:81:90:d8:a9:fe:
         c7:33:f8:87:4b:dc:83:f1:93:ea:41:43:ec:f6:6c:c4:91:5a:
         b1:bf:44:62:27:13:f1:50:30:72:6c:2a:93:d8:f1:b9:76:7e:
         2e:71:c0:ec:68:3a:6a:51:c4:c5:78:46:93:ba:4d:3d:50:b0:
         ea:8a:5f:7d:9b:73:8d:5c:dc:42:8b:9b:75:d0:b7:42:9a:93:
         87:4a:98:4c:ac:f7:1c:aa:96:b7:af:37:25:88:ef:33:e9:0e:
         53:95:d8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:57 2026 by rpki-client