Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
File:                     AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json)
Hash identifier:          1TtHR4hBpT00pvF26+0I0gKpvy3ec0eoJFav6l3+C6U=
Subject key identifier:   2B:8B:2F:C9:0B:A6:BE:E7:DA:81:84:02:DD:64:2E:51:B9:61:93:1B
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Certificate issuer:       /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial:       019F9391D077BC804B1E7DB35E997CB42547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
Manifest number:          1AD4
Signing time:             Fri 24 Jul 2026 10:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:34 +0000
Files and hashes:         1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=)
                          2: 1-WsLt9tKKbGh5bPdJYro7hdbfv4.roa (hash: bwEotLkWd6AAV2gsEIC8jHaD4DnocRPu1uFbzjdp2BY=)
                          3: 1v3HWPlunfpwP49jTOGBig4JD8Q.roa (hash: yDJ9787ATzv6jCZC6L2EDuN3dqnkLEyiRF3QmgJEwMw=)
                          4: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: LO8dvdiu/KQ3aTsJKOJBu+rRwXsxxIY/Pyw0PVBrndI=)
                          5: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=)
                          6: Iz8oQHvYY4N1cu4pgE3299ogM34.roa (hash: GTn6Y+DWEw4+IcATVORnDqgcpHWD0i8V9c7BBTnRM3U=)
                          7: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=)
                          8: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=)
                          9: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=)
                          10: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=)
                          11: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=)
                          12: psdxNS9e9UAm4jnMurOBj_7r3SE.roa (hash: DmgbB+oJGANiMlAsSILkh1J4OQmbWXdSoCr006Xmwis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:d0:77:bc:80:4b:1e:7d:b3:5e:99:7c:b4:25:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
        Validity
            Not Before: Jul 24 10:00:34 2026 GMT
            Not After : Jul 25 10:00:34 2026 GMT
        Subject: CN=2b8b2fc90ba6bee7da818402dd642e51b961931b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:9f:5a:db:f4:d2:72:98:af:a8:9e:d6:cb:
                    94:b4:d1:c9:d4:66:e2:c2:87:9e:be:3a:c8:ec:3a:
                    5f:57:c9:3d:ec:dc:b4:59:d4:8d:9a:d8:c1:ac:ba:
                    e7:39:10:3d:3d:c9:1c:c3:8e:55:6f:08:82:a9:ac:
                    fa:0a:8d:d6:0c:14:df:46:79:f4:57:ad:2a:88:7b:
                    9e:e5:4d:d8:b9:fa:17:81:9f:37:b5:8c:49:62:50:
                    80:8c:13:b5:5b:84:65:f0:78:f3:23:ef:a8:f8:2e:
                    ad:fe:5f:a4:07:cb:e4:25:88:29:d1:ec:e7:d0:80:
                    3c:fc:c3:a1:ac:bd:02:f8:01:73:a3:fe:c4:6a:0c:
                    8f:ce:80:44:ae:6b:dc:18:e9:3f:54:61:c9:05:92:
                    46:99:aa:98:94:55:c0:58:86:fb:01:1d:f5:24:58:
                    de:22:d3:39:2c:ef:bf:ec:39:2b:64:a4:95:3e:76:
                    95:33:e9:e0:3f:59:28:64:14:a2:f8:c6:c9:be:11:
                    79:9d:9c:0a:fa:07:76:00:a9:c1:29:ae:c7:24:9d:
                    1d:88:5d:70:81:85:e4:ed:2a:de:e4:c7:11:53:31:
                    9e:42:09:6b:46:2e:77:24:67:9b:5e:7b:55:04:2c:
                    b5:4d:03:6b:99:1d:27:ac:63:db:2f:f4:26:dd:a8:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8B:2F:C9:0B:A6:BE:E7:DA:81:84:02:DD:64:2E:51:B9:61:93:1B
            X509v3 Authority Key Identifier:
                keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4a:aa:8f:19:1f:24:12:b1:33:56:40:7d:a7:9a:89:bc:89:
         4a:81:83:f9:91:4f:28:41:53:fb:e2:47:e9:9f:5e:4b:59:b7:
         cc:07:d7:34:af:b3:81:34:d9:72:22:40:5d:87:48:3b:56:76:
         2e:be:2d:e5:d4:c7:91:4d:75:be:33:ac:27:5d:2f:36:4b:ab:
         c4:77:9e:fc:44:59:79:38:6e:a2:aa:fd:d9:cc:28:ac:b4:4a:
         5e:a6:aa:94:b3:6b:98:ab:0d:fd:95:d4:4c:1e:58:8d:71:99:
         7f:c8:23:3b:02:92:8d:25:4e:31:51:b8:c0:50:7b:94:92:33:
         30:84:22:b1:03:2c:6b:e7:2a:1b:ad:e2:a9:66:46:95:ad:29:
         e6:91:43:d4:c6:b8:5a:d8:4b:22:36:48:ea:76:4f:8b:48:16:
         6c:9e:b0:4e:63:d1:5b:d9:2f:67:42:12:00:4d:a7:7f:f1:59:
         dd:e9:b8:23:f0:18:47:f0:8c:7b:93:c5:5b:f0:99:4a:22:b2:
         8b:2f:84:46:11:03:29:73:1d:06:27:07:9f:bf:4e:22:d2:70:
         d5:02:b8:1d:28:a9:19:8b:9b:72:0e:89:7d:b7:fb:ed:f0:19:
         24:17:72:07:70:d3:7e:8a:c0:21:1e:59:ab:58:22:f6:d7:ac:
         19:d5:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:34:21 2026 by rpki-client