Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File:                     AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier:          CsJFPlap45dFJ05r7EKx1BMAgY+q2yOfLbMkMMHdiYU=
Subject key identifier:   F4:10:D7:EA:D5:09:99:A1:B3:CE:02:F1:C7:8F:6C:29:18:8A:27:E6
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer:       /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial:       019FA907A9DE2C41199F6C149C50FA62B17F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number:          0F9E
Signing time:             Tue 28 Jul 2026 14:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:19 +0000
Files and hashes:         1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: 2rE6+X4kdkZoUek7f06YGtUYlJHgEqwY9LlbKuv/DT0=)
                          2: GncCV8dgTUVbY24x3mdknqzuxo4.roa (hash: o/kk/cTaqZtbmM6P1+RTVFyqYG8fEQJocGdfkavOgMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:a9:de:2c:41:19:9f:6c:14:9c:50:fa:62:b1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
        Validity
            Not Before: Jul 28 14:01:19 2026 GMT
            Not After : Jul 29 14:01:19 2026 GMT
        Subject: CN=f410d7ead50999a1b3ce02f1c78f6c29188a27e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:29:69:8b:4e:83:22:85:f9:d4:0c:e7:d9:
                    37:fd:4e:cc:90:83:20:f5:50:93:ed:4d:9d:9f:95:
                    13:b9:39:98:06:83:a1:cb:1d:81:84:2c:88:68:eb:
                    c5:23:fe:06:fe:3a:67:ee:9b:a9:42:4d:46:0c:32:
                    78:45:84:32:48:2b:7a:ae:b5:90:28:f3:2a:97:54:
                    ca:63:8a:17:e8:ba:1e:7f:2a:16:0a:b6:47:9b:a4:
                    57:98:54:81:7e:28:a4:30:01:cc:b7:2b:b3:66:7d:
                    1b:69:1d:f6:93:21:8d:c0:a6:ec:9e:18:06:15:20:
                    3b:bc:f5:f0:b9:e5:de:7f:84:b3:ba:3f:e8:dc:64:
                    37:1b:41:48:f3:05:f4:c6:d0:e0:13:ab:35:ca:91:
                    ac:34:92:37:fc:e7:06:43:23:b7:f1:bc:60:fd:d2:
                    ac:ba:97:50:ab:3b:ec:37:6d:24:46:30:ab:a7:09:
                    1d:d9:73:d3:ad:1b:2c:49:f3:02:23:4c:28:c2:6b:
                    5d:cd:73:59:fe:26:e5:d3:3d:4d:35:57:5b:af:19:
                    c9:44:09:ca:f1:25:ae:73:58:99:8a:4a:86:96:b2:
                    45:e5:f6:c3:34:96:09:ae:82:ae:b7:59:4d:06:3c:
                    c4:b5:b5:45:7a:59:6b:d1:50:b6:62:dd:b1:9c:6f:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:10:D7:EA:D5:09:99:A1:B3:CE:02:F1:C7:8F:6C:29:18:8A:27:E6
            X509v3 Authority Key Identifier:
                keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:70:e7:4c:dd:1a:6c:a4:44:3f:7e:ad:f7:3e:88:26:23:20:
         6a:57:d1:c3:c9:4f:fe:d4:20:ee:63:32:be:86:e9:f3:7c:6c:
         c3:c1:e9:83:f8:88:b7:6d:90:26:39:78:02:4b:cb:c4:ab:ac:
         f8:ae:b1:91:e2:64:c8:b4:4d:66:0f:5d:8f:ec:23:4f:e1:e6:
         5b:21:93:e0:ee:07:ec:8a:0b:7e:b0:95:b3:f5:7b:e2:a1:8f:
         90:c7:3f:df:fa:72:a8:44:67:0e:9e:e8:1e:be:ff:9a:e6:fa:
         bd:37:73:b2:1d:25:f9:f5:7f:a1:07:bd:fe:5d:e5:ca:ec:21:
         10:10:89:ff:18:9d:09:e5:a2:dd:eb:37:d0:d4:00:76:c6:ee:
         52:14:bd:05:ba:c5:37:4c:33:2e:ac:ca:f5:30:02:a6:0a:b5:
         73:10:7a:fb:07:ad:9a:f1:34:ab:51:a3:60:a7:69:f4:8e:9c:
         54:c4:71:3e:c2:3d:44:da:a9:44:50:d0:28:77:7f:f5:f1:0e:
         f4:18:a4:53:6b:f2:6c:2e:9e:01:c4:3c:88:66:c9:24:28:00:
         f4:61:9c:12:47:cd:bd:9c:1e:15:05:5e:7a:63:0c:9d:d4:c1:
         27:b8:8f:48:46:b9:7b:12:f3:51:c3:8f:26:d9:9f:42:fb:1f:
         a4:ce:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:15 2026 by rpki-client