Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
File:                     AAdP4ZSoLAjMjpuEm608JLamR7k.mft (raw, json)
Hash identifier:          GtZUcWdQ79xl+vAcTesrxQWKiTy7DgeIboQbCk7Z+mE=
Subject key identifier:   D8:54:FE:22:68:5F:A0:35:F9:87:8B:DD:C9:C6:0B:48:38:47:83:C6
Authority key identifier: 00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9
Certificate issuer:       /CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
Certificate serial:       01A0D5A68756FD8B2CB24368E1A5BCF78F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
Manifest number:          D0
Signing time:             Thu 24 Sep 2026 23:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 23:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 23:00:55 +0000
Files and hashes:         1: AAdP4ZSoLAjMjpuEm608JLamR7k.crl (hash: txj8XoQPvDrG2EAoUsy/DeP5VsACKRSbosi14mxgy14=)
                          2: _z9pyycrhZshv0I1f5oyGq23-0Q.roa (hash: 2wz3wcXIoRnyelfu+ni0ylKCy5GgJ+dezMzIh5BJl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:87:56:fd:8b:2c:b2:43:68:e1:a5:bc:f7:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
        Validity
            Not Before: Sep 24 23:00:55 2026 GMT
            Not After : Sep 25 23:00:55 2026 GMT
        Subject: CN=d854fe22685fa035f9878bddc9c60b48384783c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:c0:07:82:49:b2:25:c9:c4:de:21:17:32:
                    53:90:38:14:b5:fa:f1:38:33:0a:c7:e5:31:fa:3b:
                    f0:bb:72:b5:6b:b3:f0:3e:b8:92:c1:51:5a:53:02:
                    70:31:a0:16:38:76:57:c8:01:35:17:fd:02:9e:49:
                    11:79:70:e2:05:01:29:c8:ec:85:9d:e6:be:81:14:
                    8d:00:e4:f1:50:2f:17:fc:bc:9f:c0:4e:85:56:4e:
                    d5:ac:3e:8a:9b:4b:58:f3:3e:69:e8:56:74:32:ba:
                    bc:76:a0:1d:99:84:40:27:b7:1c:68:63:28:d8:fc:
                    7e:f2:69:c2:dc:a4:d0:9f:04:7e:8d:7f:74:47:16:
                    42:b4:7a:39:71:b9:11:e5:fe:7e:fb:37:21:ee:e4:
                    80:f8:c7:32:55:46:03:bb:b0:29:8a:c6:59:ca:9f:
                    95:6c:fd:8e:ff:00:bb:5a:df:95:67:ae:e0:34:bb:
                    18:f8:b6:65:59:ed:d2:ac:13:89:8b:e9:0b:92:a4:
                    e1:bc:e2:46:1d:a8:17:55:74:48:3a:24:3e:8f:22:
                    b0:bb:ee:5e:e4:63:0b:93:56:b6:e7:68:fc:ae:52:
                    94:bc:1e:56:06:0b:31:68:b9:db:cb:f1:63:55:be:
                    64:e3:33:5e:87:23:e9:5a:af:0d:d4:98:b6:fd:24:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:FE:22:68:5F:A0:35:F9:87:8B:DD:C9:C6:0B:48:38:47:83:C6
            X509v3 Authority Key Identifier:
                keyid:00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:18:ea:39:16:8c:47:92:a7:a2:1d:2c:6e:a5:fd:1c:59:4e:
         1e:a1:d1:69:9d:7e:de:c7:a1:6d:e4:e6:f9:2a:ff:ed:a7:fd:
         8f:49:59:18:d1:0d:c0:ec:de:a8:94:b5:20:15:07:00:39:0d:
         1e:f8:d4:75:e8:36:10:62:a1:29:30:ea:36:63:0b:8a:56:3b:
         8a:79:3c:a4:e3:ad:2c:85:5e:55:10:2a:78:be:67:0d:43:f5:
         02:fc:ca:22:3a:94:67:6a:2b:62:16:18:5e:e3:2b:60:34:ec:
         22:83:43:05:70:7a:ca:0e:a6:9c:22:1f:1a:0a:8c:3e:e2:a3:
         ef:31:a2:b5:d7:25:4a:f1:b8:c4:a0:f5:bf:9e:54:a7:e7:7d:
         4d:5d:7b:b4:0f:7b:e8:99:b1:80:c3:a3:68:a9:fe:41:9b:7c:
         a0:1a:25:c5:eb:b2:c7:1e:ed:6c:3e:91:39:69:27:aa:3c:6e:
         9a:e9:73:8c:74:1a:ad:a9:85:b7:77:d1:7c:73:79:d4:97:ad:
         d2:80:50:76:1c:fa:da:11:2c:30:e8:d4:fd:60:51:e3:38:f7:
         53:dc:58:77:13:1b:75:74:dd:82:29:26:29:49:90:f2:ee:6f:
         49:b9:21:8d:2c:42:57:f9:00:f3:10:d8:0e:41:2a:12:87:5d:
         4e:53:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:23 2026 by rpki-client