Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
File:                     AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft (raw, json)
Hash identifier:          H7vmSLI2Jd8wfZN7WbWrzZhXLTuYgA0A5Kkc+mz93N4=
Subject key identifier:   B9:C5:67:29:22:FB:68:D6:44:20:28:B4:84:DC:77:83:75:BC:39:0D
Authority key identifier: 02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5
Certificate issuer:       /CN=028b110f19b1fe54898e9589afc63f903749dff5
Certificate serial:       019FAA50B1913529A68335D9258C1F0B408F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
Manifest number:          06
Signing time:             Tue 28 Jul 2026 20:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:42 +0000
Files and hashes:         1: AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl (hash: A3JLr4FLIBAgUp8bUefBwoaLa++QwZy5Kq/lk4UQjUY=)
                          2: _IpDACBsZMbScuGMBl89ukS0we8.roa (hash: XGdoR2Dqje9kO00dw3KBe8qTky3l0qaCLX0c+Z0GJ58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:b1:91:35:29:a6:83:35:d9:25:8c:1f:0b:40:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028b110f19b1fe54898e9589afc63f903749dff5
        Validity
            Not Before: Jul 28 20:00:42 2026 GMT
            Not After : Jul 29 20:00:42 2026 GMT
        Subject: CN=b9c5672922fb68d6442028b484dc778375bc390d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:83:bd:f4:22:29:64:6e:a7:9d:8c:8b:57:
                    8b:ea:e6:ed:45:eb:5a:81:f2:ba:67:b3:49:b5:93:
                    ff:38:44:a7:ab:9b:40:8d:4d:92:e9:8c:de:ee:8f:
                    17:59:75:22:34:c9:b8:d2:e0:72:74:3d:60:eb:5c:
                    72:d3:d5:eb:02:d3:56:9e:41:07:da:7d:b0:a9:13:
                    e7:79:4c:ed:d2:e3:c2:a4:61:3f:f8:02:ef:be:aa:
                    85:3c:70:3b:ac:05:5e:91:85:11:c0:cf:90:e1:56:
                    6e:ce:f0:2e:f8:2f:40:90:7e:04:12:e2:aa:de:2a:
                    22:5b:93:89:b0:13:3f:27:37:52:2e:78:92:45:37:
                    ce:46:06:b0:59:08:76:5e:db:69:f7:8a:8d:f5:9a:
                    c0:c9:00:f5:e4:82:f4:66:3b:76:a6:45:bb:76:2a:
                    f2:2c:63:39:e6:5c:65:08:68:30:87:33:b2:e8:c9:
                    b4:b4:34:cb:bb:f4:52:f5:21:af:67:7a:05:1b:d5:
                    aa:a4:5a:17:70:ba:34:4d:4e:46:a6:f7:14:4b:83:
                    91:77:13:03:e6:d1:fe:02:87:22:19:80:6d:60:8b:
                    63:7a:26:9c:b2:fd:5f:05:09:81:23:68:28:40:a6:
                    93:c4:39:53:e7:6d:f7:ad:ac:fb:5c:b0:1e:95:b3:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:67:29:22:FB:68:D6:44:20:28:B4:84:DC:77:83:75:BC:39:0D
            X509v3 Authority Key Identifier:
                keyid:02:8B:11:0F:19:B1:FE:54:89:8E:95:89:AF:C6:3F:90:37:49:DF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d07435-750e-4f1a-bf78-6ed8ac7b52bf/1/AosRDxmx_lSJjpWJr8Y_kDdJ3_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:e7:8b:ed:50:53:36:66:f3:e4:9b:1b:9b:c1:51:c0:c4:
         4f:bc:4d:c4:62:39:bf:98:48:22:94:7c:bb:ac:26:8f:d4:97:
         c9:13:04:98:8f:fb:02:a6:e7:02:01:16:15:00:d5:1f:f3:1d:
         64:34:32:5a:17:78:cb:a1:bb:b7:d8:05:45:0f:61:1e:27:af:
         04:ff:ca:5f:d0:92:8d:cf:a6:c7:75:90:7b:1b:a2:fa:8f:4f:
         37:ec:4c:9e:d8:3e:15:1d:a4:55:22:d0:b5:ce:f9:41:d9:7e:
         38:3f:73:45:72:b7:ed:9b:00:25:53:0e:0e:8b:44:11:c1:44:
         16:ab:a9:0e:d9:3c:7d:fd:d3:ee:8c:41:8b:b4:eb:38:91:39:
         2d:80:92:2c:c0:20:89:46:50:01:a0:1b:e5:c1:68:c4:da:13:
         4f:c7:e5:0f:fe:32:59:5f:c4:18:65:56:88:c4:da:7a:ef:37:
         00:b4:88:29:48:49:8d:c0:27:40:89:cd:33:a3:a2:1b:59:17:
         66:af:42:97:69:1b:99:26:43:ee:81:a2:13:81:af:2b:0d:cc:
         93:81:59:f3:cd:c7:26:05:31:43:1c:e4:4b:7f:af:b0:fd:6e:
         43:4b:b9:c8:c3:0b:f9:0e:3b:8c:48:d0:4f:b6:35:3f:d8:fb:
         fe:4b:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:14 2026 by rpki-client