Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File:                     AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier:          INWQEl3+8e8wclfBhbfHbrDvvaw1HqaVoMB34e8uS3Y=
Subject key identifier:   65:16:FF:F7:1C:00:AC:A1:3B:CE:79:C0:C9:7B:BF:4A:F7:58:CA:07
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer:       /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial:       019E1F10BBEDB8260FB4F765EEBC971FC60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number:          0BF8
Signing time:             Wed 13 May 2026 02:00:50 +0000
Manifest this update:     Wed 13 May 2026 02:00:50 +0000
Manifest next update:     Thu 14 May 2026 02:00:50 +0000
Files and hashes:         1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: cEtz491WvRm7OtW6Ar0fFjk5P36zp33+oC6qEi1v/14=)
                          2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:bb:ed:b8:26:0f:b4:f7:65:ee:bc:97:1f:c6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
        Validity
            Not Before: May 13 02:00:50 2026 GMT
            Not After : May 14 02:00:50 2026 GMT
        Subject: CN=6516fff71c00aca13bce79c0c97bbf4af758ca07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:51:a0:bd:0c:b2:13:cf:76:43:97:24:3a:
                    48:2c:e6:0f:4b:0b:7d:a1:d2:7f:c6:1e:55:ac:90:
                    59:4d:3c:34:52:df:04:12:f2:8a:5b:6b:d1:7b:cd:
                    9b:d5:d6:f9:47:85:69:2e:d0:b1:bb:15:2f:90:ff:
                    5d:b8:4b:c7:59:90:7e:8e:c7:4c:25:aa:8f:8f:e8:
                    8c:54:f8:17:9b:87:04:67:92:81:3d:6c:a8:7d:07:
                    2b:41:55:2a:e8:eb:a6:89:7b:96:0f:9b:b9:04:33:
                    52:de:56:09:c5:5a:07:50:f6:c6:7e:ec:96:11:9d:
                    74:86:4c:38:ac:4f:53:12:c1:a5:7d:be:22:3c:fd:
                    16:95:b2:03:bb:c1:c6:5e:5f:15:9e:ab:0d:ec:75:
                    a5:d6:79:45:ef:8b:4c:d5:81:51:5b:8c:ee:a7:3f:
                    05:ba:89:e6:60:de:5e:d4:d4:cf:6b:f4:d2:5e:ca:
                    56:87:ed:d7:41:e4:6e:fa:04:30:6f:ea:49:ae:a4:
                    fd:17:e5:4c:01:4c:9e:8a:e4:11:04:91:11:70:1b:
                    77:07:b7:96:63:f2:e3:6c:0b:d9:33:38:f0:68:a1:
                    b5:b3:0d:00:c8:62:07:d6:f5:dc:59:41:3d:6f:9c:
                    c1:4d:cd:c4:d0:5c:c1:6b:80:57:89:8e:a9:0d:bd:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:FF:F7:1C:00:AC:A1:3B:CE:79:C0:C9:7B:BF:4A:F7:58:CA:07
            X509v3 Authority Key Identifier:
                keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:76:70:d2:1a:d5:53:1c:50:a7:14:69:1b:d5:59:44:d8:1e:
         c9:b5:02:f8:95:81:8f:05:df:64:9a:b7:63:86:cf:de:2c:37:
         6f:ff:48:93:81:71:b4:f8:55:14:ed:b5:33:15:45:47:9a:37:
         26:a1:3a:b1:92:9f:1d:4b:57:02:c0:fd:21:d7:a4:6a:81:9f:
         08:18:ad:fe:c8:ce:00:a0:e0:5d:f3:e4:03:a4:df:4c:a3:88:
         f9:af:9a:bb:c4:e2:07:d3:c7:9d:75:e9:16:19:9b:a9:e6:8d:
         7b:f7:07:e1:8b:d0:32:86:39:40:92:9a:b0:b5:c5:58:d8:b2:
         5f:dc:8d:a6:bc:42:28:31:e4:1f:98:14:ac:c4:8f:53:60:51:
         2e:f3:1c:93:6d:49:1c:31:b2:9c:65:eb:26:40:12:f2:dd:5e:
         bb:a7:bd:08:7b:58:f3:ce:3e:08:65:cc:22:5c:a7:e1:c7:57:
         cd:19:d9:dd:68:e4:74:b8:f7:db:d9:70:48:1f:1f:09:ba:0b:
         aa:77:9d:71:00:8f:71:51:9e:af:59:bb:99:89:58:1c:1d:48:
         d7:f8:7e:74:b5:ec:8f:c5:94:e1:b9:50:fc:cc:a0:4d:69:b8:
         17:7c:ef:47:33:78:e7:b2:fc:72:33:55:7e:dd:0a:1e:63:2d:
         31:3d:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:29 2026 by rpki-client