Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
File:                     mm4UdEgoljS5hojuWlr0R9Qsuwc.mft (raw, json)
Hash identifier:          ogOLOXNU0Ki1/Km7FOP0YCvfSDprvcuyuWWzVmjFEMY=
Subject key identifier:   AA:4A:35:CB:E7:92:1C:3E:00:0C:6E:F8:A9:BF:96:91:F6:72:FB:AC
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       019F905A206BF3B9397667738E94B7AD5721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
Manifest number:          154C
Signing time:             Thu 23 Jul 2026 19:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:53 +0000
Files and hashes:         1: Go6GTg9yZuH3ldmoQA3YEONTm-o.roa (hash: CGqeavzuShq2B73tI+xEe2/nH2gqlzVsSoTBNrlZzNM=)
                          2: NQhohxpX79LaflkqFn_SdMtNXkc.roa (hash: hz/eOIHPRLWhV6gGQdsCHSgfHNHYQpMaIgkZOgKyDdU=)
                          3: mm4UdEgoljS5hojuWlr0R9Qsuwc.crl (hash: 29opR9YisRSh16WhcJF3ybDdgD9qq18YqFZY3o26+CU=)
                          4: uQs-ZJfKnsb459_bSKrUNmzfSB4.roa (hash: Mi8CPwabE4hTHrT6goEVCJdEWrAoZ6ttolmgoUc/pCQ=)
                          5: xTuc6UK9A4gZnxWW2S3npGWfiHs.roa (hash: gv+TgqVRuNuQuQ9MsAnfTnrMxqIjbm5uB+jO2MB/vu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:20:6b:f3:b9:39:76:67:73:8e:94:b7:ad:57:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Jul 23 19:00:53 2026 GMT
            Not After : Jul 24 19:00:53 2026 GMT
        Subject: CN=aa4a35cbe7921c3e000c6ef8a9bf9691f672fbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:0c:2a:74:5f:98:c4:65:07:03:f6:58:38:
                    fe:e7:7a:8b:6a:0e:b9:97:c0:1e:f0:4f:be:e4:02:
                    79:c8:55:0f:30:69:fa:c4:d2:94:22:ef:e8:13:76:
                    4f:80:e6:04:d2:9d:e6:eb:e5:22:15:b5:b8:04:ce:
                    2a:cc:98:2a:06:2c:03:29:45:69:bd:a8:14:4d:b0:
                    19:ef:c1:5d:cc:5d:83:3e:65:07:34:29:48:b1:6f:
                    6f:72:bb:ae:57:26:11:f7:70:dd:02:a7:98:6b:b4:
                    46:41:71:f5:33:ed:af:13:cf:ef:5a:18:11:0b:5e:
                    6c:37:32:a1:60:a0:02:db:78:dd:f9:ea:5c:bc:c1:
                    34:0c:cd:7e:8d:15:f7:79:56:3e:41:5f:84:48:dc:
                    32:c2:22:45:4c:6a:59:89:b7:4e:52:e1:c8:4b:59:
                    40:ef:d5:64:5b:c0:fb:42:d6:2c:d9:b8:4c:07:b9:
                    31:b4:fd:0c:82:a9:d8:e8:0f:7e:74:8c:64:ce:82:
                    6c:6c:38:96:16:0d:92:8e:b0:04:30:ef:b3:9f:64:
                    ab:aa:41:f4:c4:5a:59:55:e4:3c:1a:0e:33:08:ae:
                    59:fb:1c:b4:ac:1b:47:34:b7:e3:37:01:5b:0d:3f:
                    61:65:25:00:5b:21:16:f3:cf:56:b9:5e:21:e3:60:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:35:CB:E7:92:1C:3E:00:0C:6E:F8:A9:BF:96:91:F6:72:FB:AC
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:3c:15:25:19:c0:3c:f6:10:d9:ff:34:8a:bb:cc:36:3b:
         34:ce:00:5a:b1:e3:17:e6:36:9f:31:a2:27:d4:1d:ac:75:cf:
         59:c6:2f:63:ac:60:09:b4:b4:b0:a4:e2:d7:ee:e9:a9:06:53:
         11:1a:f7:7b:0c:15:ec:f0:15:1a:f6:c5:b8:0e:30:26:39:d3:
         56:d4:7d:7a:94:84:4d:b9:6b:00:75:8a:1f:0f:fe:f3:67:6b:
         d5:1a:58:e7:56:64:1d:22:bb:72:42:e8:07:5b:70:96:26:7f:
         29:d1:dd:a4:a8:be:6b:85:38:e9:86:18:bc:34:81:38:03:9d:
         fb:4e:4c:16:3a:71:4e:02:b6:2e:f7:7e:dc:ad:6a:a7:60:b2:
         21:3e:eb:88:41:ef:c9:bb:23:48:1b:f1:9f:a8:17:9b:40:40:
         54:a4:45:e6:63:a4:ef:bc:a6:05:45:a7:8b:19:21:c6:d6:90:
         fe:69:5b:42:91:d3:fa:28:51:3b:df:e5:2d:c3:22:83:d9:5e:
         45:94:e7:84:bf:88:d9:aa:65:e9:27:57:32:64:81:2d:95:b5:
         9c:67:f1:d1:83:36:49:88:b6:26:e7:15:08:fd:49:39:76:3e:
         b4:c7:fa:5a:34:9c:fc:23:e8:ed:86:15:35:a7:b2:ca:62:cc:
         57:7d:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:43 2026 by rpki-client