Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File:                     AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier:          adqkaKShPpuOQVeBQ3qCHHhDV24RusF+s6YzmKbRpQo=
Subject key identifier:   97:06:F0:80:38:B5:F9:F2:4B:54:9F:0E:89:A5:45:6D:43:95:71:11
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer:       /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial:       019EBF5B428B4A116CAA5681AE3E06085BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number:          0F25
Signing time:             Sat 13 Jun 2026 05:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:29 +0000
Files and hashes:         1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: a3IWS1I+rezr0ZpD/A5pJaxama0tXRCBSW1THgpOP2s=)
                          2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:42:8b:4a:11:6c:aa:56:81:ae:3e:06:08:5b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
        Validity
            Not Before: Jun 13 05:01:29 2026 GMT
            Not After : Jun 14 05:01:29 2026 GMT
        Subject: CN=9706f08038b5f9f24b549f0e89a5456d43957111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:31:9e:a9:3f:40:0b:c2:4e:67:80:11:4b:
                    ad:eb:f0:34:a7:01:2a:d2:5c:3d:5c:25:6a:26:b9:
                    f6:81:87:39:91:68:49:92:d8:3a:9b:44:71:cf:6a:
                    92:4a:19:de:58:5e:08:64:dc:b2:26:f6:db:e7:90:
                    ee:4f:bd:4f:f8:74:25:5a:bb:42:5f:d2:56:bf:9a:
                    28:c6:ec:53:4d:8b:c8:71:1a:43:70:f1:66:9d:f3:
                    59:17:cf:fa:b2:f5:c0:a0:18:59:a3:41:6a:6a:40:
                    62:48:dc:23:f9:c1:67:70:6b:5b:4a:69:d4:32:94:
                    7c:46:00:53:e8:5f:a5:60:9f:de:e9:7c:cc:68:63:
                    ac:11:57:0b:ea:d7:70:4b:22:cd:12:26:76:24:aa:
                    11:9b:0c:c4:b3:b7:17:7b:09:9f:be:51:9d:43:81:
                    07:42:80:9a:60:5d:ca:cb:4a:a1:fa:e9:5f:6f:c9:
                    86:b9:ca:a7:a0:e6:48:51:ca:9a:75:72:02:71:7f:
                    1c:62:92:37:03:06:6e:8b:0a:95:14:49:22:07:ba:
                    6a:55:ad:f4:92:57:0a:2a:fd:1b:ed:14:21:da:f1:
                    1f:c0:c7:66:9c:00:9a:ee:8e:0d:10:6e:5f:36:52:
                    a3:6c:fc:24:8b:57:f2:f8:9e:01:96:6c:e1:38:ec:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:F0:80:38:B5:F9:F2:4B:54:9F:0E:89:A5:45:6D:43:95:71:11
            X509v3 Authority Key Identifier:
                keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:89:26:b1:8f:4e:10:6a:9c:ee:85:83:77:eb:63:83:b2:6a:
         4b:88:39:8b:4e:1d:38:2e:c9:3a:20:64:c0:d7:be:93:10:d5:
         6e:f6:db:d6:c8:65:d5:a5:9f:b3:8a:4b:c4:52:ce:e6:06:a2:
         ce:25:7d:dd:7a:c5:d0:57:cb:0c:3b:33:18:ff:42:5c:79:5f:
         8c:58:75:48:52:6c:e4:32:81:a5:d1:96:d7:73:9a:49:42:8e:
         f0:19:c6:8a:d6:55:fe:e5:8a:12:08:27:be:eb:0a:ce:e4:4c:
         a7:71:7b:5a:44:8c:46:3b:be:ff:7e:e8:87:f3:b6:1d:66:e9:
         14:29:23:7b:4d:1a:1f:30:a5:b5:bc:7d:4e:18:d3:cc:04:91:
         d6:61:df:c1:ec:42:d9:09:88:eb:47:ef:98:e1:88:f3:fd:c6:
         11:ff:a0:86:35:38:9b:54:aa:93:70:40:46:95:bc:1a:83:e7:
         71:0d:32:3d:0c:f1:8e:13:18:ad:de:81:bd:c9:a9:84:4f:53:
         e2:3e:dc:0e:41:38:ec:d6:9d:c1:cf:18:6a:0c:de:a2:d4:23:
         c6:b2:71:0d:77:02:47:87:f2:1e:64:18:57:a4:87:1f:18:2a:
         97:c8:ea:ef:16:d9:0e:5a:aa:f3:26:1a:a4:5e:9f:1a:c3:47:
         7d:c6:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:11 2026 by rpki-client