Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
File:                     AAdP4ZSoLAjMjpuEm608JLamR7k.mft (raw, json)
Hash identifier:          v4WJ8iYA7foEIvcxTszYHqR1GKfY6tmDSjgNNKNlDbw=
Subject key identifier:   42:04:6E:31:BE:AA:D2:38:B8:60:36:2C:61:D2:7C:45:8C:F9:ED:9C
Authority key identifier: 00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9
Certificate issuer:       /CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
Certificate serial:       019F8F477D1C4598B5D2EBFED53F77CFE01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
Manifest number:          27
Signing time:             Thu 23 Jul 2026 14:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:54 +0000
Files and hashes:         1: AAdP4ZSoLAjMjpuEm608JLamR7k.crl (hash: enOrczvrqv+SDLLwJvPaOjBBPj9QENrdolYEHG+jhXo=)
                          2: _z9pyycrhZshv0I1f5oyGq23-0Q.roa (hash: 2wz3wcXIoRnyelfu+ni0ylKCy5GgJ+dezMzIh5BJl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:7d:1c:45:98:b5:d2:eb:fe:d5:3f:77:cf:e0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
        Validity
            Not Before: Jul 23 14:00:54 2026 GMT
            Not After : Jul 24 14:00:54 2026 GMT
        Subject: CN=42046e31beaad238b860362c61d27c458cf9ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:c0:a2:39:05:bb:10:3c:53:37:d0:03:e6:
                    c9:e2:06:9d:73:1b:61:a2:de:01:b7:16:18:31:e4:
                    94:a0:a9:8e:a5:85:7d:83:79:ae:8f:63:f6:94:80:
                    a8:05:04:10:a9:d4:1c:d0:8b:7e:75:99:29:b4:3b:
                    75:8d:48:f7:35:90:c5:33:32:09:40:93:f3:2d:cb:
                    40:bf:0f:88:a8:33:bd:bb:de:c2:8c:20:d4:eb:6f:
                    4c:e5:85:9a:ce:8e:33:05:99:ee:17:2b:14:81:db:
                    63:ab:8e:93:c8:03:80:46:ca:b5:ca:9e:2e:1a:1e:
                    86:51:d2:a0:a4:a4:08:04:c4:88:45:97:eb:24:a0:
                    8e:ee:62:d9:28:01:a9:6d:60:cf:79:4f:b0:84:dc:
                    8d:ac:04:45:cc:0a:9b:19:75:88:b5:5d:44:de:a1:
                    39:b8:88:77:ce:22:27:55:ac:1e:c0:94:cb:c9:83:
                    e1:01:50:3c:4c:94:47:34:09:e8:a9:a5:2a:e4:93:
                    18:8c:a3:72:cc:38:9e:c4:23:4b:b8:94:53:8d:c9:
                    35:0b:a0:99:68:16:12:e9:03:d7:89:7f:e1:a8:e5:
                    82:58:93:72:66:17:77:3e:ce:01:f8:bc:3b:e6:a0:
                    7e:57:14:fd:a1:01:28:e7:b3:ac:1a:27:b4:3c:75:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:6E:31:BE:AA:D2:38:B8:60:36:2C:61:D2:7C:45:8C:F9:ED:9C
            X509v3 Authority Key Identifier:
                keyid:00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e3:b2:32:f3:f7:63:a1:9e:50:e2:c7:bf:9f:5e:ca:13:a8:
         55:5c:85:07:3a:e2:e5:5a:64:45:e7:e0:3b:ba:35:c9:9e:38:
         a6:f1:00:fb:49:d9:da:d5:69:23:d9:8b:1d:d7:c3:93:47:dc:
         d1:32:46:91:c3:ae:d3:0f:89:dc:4e:a4:4b:77:cd:75:68:88:
         66:41:65:5b:04:46:6f:6a:02:16:6f:e6:44:be:70:48:99:08:
         5d:f9:67:5f:5a:27:bd:45:1b:5d:5b:62:56:41:6c:96:11:77:
         c8:94:9b:a0:f6:16:47:e5:af:33:da:c0:fe:86:34:ef:33:1e:
         b6:bb:f4:65:ec:4e:31:b5:09:43:bb:ca:4e:86:de:e0:3e:20:
         5d:65:ad:e7:2f:8c:39:bc:79:dc:99:a7:eb:bb:16:bc:74:d5:
         f6:66:84:43:ad:b6:36:f5:62:96:01:43:ae:23:1c:84:2f:72:
         e7:74:7a:29:48:37:bc:58:e5:08:31:70:54:87:28:17:98:1d:
         d4:15:11:d5:bb:59:f9:be:3d:16:89:cc:ac:0f:2f:cf:99:25:
         c3:80:7c:0e:b8:72:78:ca:0d:15:99:50:44:03:47:fe:8f:34:
         21:36:1c:c5:7f:12:51:61:7d:fb:2a:1c:1e:e4:bd:60:9f:4f:
         ee:86:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:47 2026 by rpki-client