Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          roD9A0rEXvtUtygjrroHXMwcvrHbsdpLql8PZ0KOqIk=
Subject key identifier:   F9:4F:7D:CB:06:F3:A6:84:56:7E:D2:C2:5B:C1:AD:B7:00:BB:5E:8B
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       019E1D22553D0D2E014D9C634561DF6526DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 17:00:49 +0000
Manifest this update:     Tue 12 May 2026 17:00:49 +0000
Manifest next update:     Wed 13 May 2026 17:00:49 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: OkmRNzBEPh5vrkclN1Gq05czvUk7AqyW3N520rOQDi8=)
                          2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:55:3d:0d:2e:01:4d:9c:63:45:61:df:65:26:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: May 12 17:00:49 2026 GMT
            Not After : May 13 17:00:49 2026 GMT
        Subject: CN=f94f7dcb06f3a684567ed2c25bc1adb700bb5e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ee:3b:93:cd:c5:c7:91:29:8e:03:f4:62:bd:
                    f7:79:cd:01:fa:29:4c:5c:14:df:e7:1a:88:39:c2:
                    95:4a:04:6a:7d:49:c9:a9:6f:1e:b2:d8:ce:0a:ab:
                    f2:51:d4:04:7c:f0:f7:99:27:f0:f9:d2:b0:74:79:
                    5b:8d:fc:83:ad:36:86:d7:9a:2c:81:a3:8b:e2:7f:
                    de:bf:d6:b1:18:47:58:46:9c:61:0d:3f:4d:9c:c9:
                    3c:e3:9c:47:84:3d:ab:2d:68:07:8b:af:d6:ca:6d:
                    6d:ef:e2:a6:c0:0b:f4:dc:92:ab:be:2a:01:c0:be:
                    09:e6:6c:aa:b2:f2:0e:f0:2b:a4:ac:82:f0:f9:87:
                    cd:44:68:7a:7b:d9:70:63:82:05:a6:dc:94:45:31:
                    8b:f9:5d:22:25:a4:55:87:c1:6d:07:b9:4d:fe:16:
                    3b:61:77:30:db:50:47:f2:6c:6a:20:60:e5:97:0a:
                    7a:1e:66:3c:f6:c1:0b:a4:68:09:ff:55:6c:ef:9b:
                    1e:40:ab:b7:5c:de:8f:04:7f:6d:95:f1:e8:81:be:
                    00:e6:7e:61:79:3d:dd:ea:59:37:f3:19:42:7d:95:
                    f7:42:14:82:02:0e:25:0e:d5:37:34:a0:3f:37:90:
                    3f:47:98:d6:71:eb:35:a2:3a:b0:d4:35:70:02:93:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4F:7D:CB:06:F3:A6:84:56:7E:D2:C2:5B:C1:AD:B7:00:BB:5E:8B
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:84:33:5f:45:0e:d2:16:65:07:73:0a:35:eb:aa:cc:5c:b3:
         a7:57:42:26:cb:d4:fc:d2:31:9f:8c:b1:73:bc:23:c4:ed:1c:
         8b:91:ec:cf:12:5b:20:d0:d1:9e:6d:4a:70:45:54:2c:fb:8b:
         dd:9e:2a:2d:79:9e:eb:cf:3a:db:74:65:d7:60:f0:e9:de:98:
         81:c1:70:f0:3b:4b:89:5c:7d:f0:64:20:8f:63:0f:19:e1:9a:
         36:8f:b8:c7:fb:b8:e9:c2:2f:8f:19:e7:d3:76:f2:38:15:2f:
         44:8e:38:ba:a8:61:b4:a4:8a:03:43:7e:85:bf:89:1a:37:b6:
         e0:57:36:bd:37:50:da:f0:43:4d:db:06:a6:3f:99:57:55:29:
         10:ac:62:bb:56:cc:74:e4:c5:b3:aa:cd:14:fc:d4:5e:a3:36:
         e6:61:8b:4e:49:64:69:c8:6c:00:f7:71:7e:b9:36:aa:71:26:
         27:7d:34:9d:44:b6:c8:3d:5c:75:17:5b:b5:48:54:9c:a0:8e:
         7a:35:f1:91:3d:31:58:cf:7d:38:58:15:9c:9c:92:3c:6c:76:
         08:51:d8:f3:df:04:9a:41:f9:25:91:f6:54:a8:3f:0e:b9:d9:
         01:c5:8a:3b:ea:61:6e:86:51:ce:4f:1e:17:57:bc:97:d5:4b:
         35:1a:64:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIlU9DS4BTZxjRWHfZSbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjYwNTEyMTcwMDQ5WhcNMjYwNTEzMTcwMDQ5WjAzMTEwLwYDVQQD
EyhmOTRmN2RjYjA2ZjNhNjg0NTY3ZWQyYzI1YmMxYWRiNzAwYmI1ZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe47k83Fx5EpjgP0Yr33ec0B+ilM
XBTf5xqIOcKVSgRqfUnJqW8estjOCqvyUdQEfPD3mSfw+dKwdHlbjfyDrTaG15os
gaOL4n/ev9axGEdYRpxhDT9NnMk845xHhD2rLWgHi6/Wym1t7+KmwAv03JKrvioB
wL4J5myqsvIO8CukrILw+YfNRGh6e9lwY4IFptyURTGL+V0iJaRVh8FtB7lN/hY7
YXcw21BH8mxqIGDllwp6HmY89sELpGgJ/1Vs75seQKu3XN6PBH9tlfHogb4A5n5h
eT3d6lk38xlCfZX3QhSCAg4lDtU3NKA/N5A/R5jWces1ojqw1DVwApP/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlPfcsG86aEVn7SwlvBrbcAu16LMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4QzX0UO
0hZlB3MKNeuqzFyzp1dCJsvU/NIxn4yxc7wjxO0ci5HszxJbINDRnm1KcEVULPuL
3Z4qLXme688623Rl12Dw6d6YgcFw8DtLiVx98GQgj2MPGeGaNo+4x/u46cIvjxnn
03byOBUvRI44uqhhtKSKA0N+hb+JGje24Fc2vTdQ2vBDTdsGpj+ZV1UpEKxiu1bM
dOTFs6rNFPzUXqM25mGLTklkachsAPdxfrk2qnEmJ300nUS2yD1cdRdbtUhUnKCO
ejXxkT0xWM99OFgVnJySPGx2CFHY898EmkH5JZH2VKg/DrnZAcWKO+phboZRzk8e
F1e8l9VLNRpk4w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:49 2026 by rpki-client