Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File:                     aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier:          2z+CLx402tWwZ/wwrG7hsJMkjHHifaPaCODZOXs+6p0=
Subject key identifier:   A9:74:CC:44:7E:70:32:7E:87:1B:03:A8:BC:4A:FC:81:E4:83:0B:F5
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer:       /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial:       019D98509477410AFF64A512F2520FA023D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number:          184F
Signing time:             Thu 16 Apr 2026 22:01:50 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:50 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:50 +0000
Files and hashes:         1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: 7UEPHlnRmp4qK4bOwm3YKGX0ZFYeUwqFq/KZIBbm2GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:94:77:41:0a:ff:64:a5:12:f2:52:0f:a0:23:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
        Validity
            Not Before: Apr 16 22:01:50 2026 GMT
            Not After : Apr 17 22:01:50 2026 GMT
        Subject: CN=a974cc447e70327e871b03a8bc4afc81e4830bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:23:b0:7e:d9:4c:ee:db:4c:58:31:ce:7d:
                    16:7e:99:78:d2:e6:56:c5:8a:38:41:05:81:ae:a8:
                    a5:94:4a:e5:4e:6d:a5:4f:5b:f9:36:79:35:8a:7c:
                    71:a6:ba:7c:db:bd:1e:24:3b:a9:1c:a4:32:f2:a2:
                    a4:db:64:8d:71:8a:35:27:15:d7:25:13:68:2e:9d:
                    92:03:37:7c:f6:73:a0:c1:58:19:c4:1c:9e:8b:f1:
                    65:34:7d:25:4a:13:d2:e8:99:83:df:ae:64:c4:3b:
                    96:24:46:33:7d:ba:51:98:cc:87:e4:2a:6c:ae:58:
                    7d:a0:b8:75:8f:65:f7:36:e1:8e:1b:16:11:63:c6:
                    ae:21:7e:55:55:e3:6c:ba:09:2c:90:6c:5f:88:5c:
                    67:51:48:e9:95:a9:88:6c:36:ba:b8:95:3f:0d:0d:
                    53:5a:b4:48:d4:c4:0d:79:fa:b3:49:97:c2:52:84:
                    88:23:5a:52:8f:58:0f:b0:10:38:58:be:b8:42:33:
                    31:c7:48:02:bc:c6:2f:dc:24:2d:8f:5f:5a:5c:c2:
                    3a:bd:84:07:8e:f6:44:7d:e7:8d:d9:be:ad:53:63:
                    dc:0c:fb:ef:c8:53:ca:d0:21:dd:9e:d9:00:2f:1c:
                    82:55:c3:a7:a4:99:7d:e2:a6:30:8c:c7:b5:6d:f7:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:CC:44:7E:70:32:7E:87:1B:03:A8:BC:4A:FC:81:E4:83:0B:F5
            X509v3 Authority Key Identifier:
                keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:08:56:92:2f:05:97:b1:3e:d7:70:65:a1:4e:92:7c:03:
         3f:25:cb:7d:d5:fd:8b:a2:3b:7d:f0:a3:dd:fd:2c:d8:67:c7:
         1e:09:2a:7f:63:d0:a6:c0:e8:41:d9:3c:12:30:5d:0b:b1:eb:
         b8:29:eb:fd:16:21:1c:7e:05:ab:97:b1:c3:14:6c:6e:4f:5d:
         a9:b6:cc:b9:de:15:76:d0:1d:df:c6:1f:84:94:eb:ea:56:ce:
         3e:76:98:5c:ab:cb:d1:19:d7:4e:91:26:d9:22:11:13:8d:04:
         aa:8d:7f:d5:fc:7c:a4:c0:98:e3:36:20:f1:5c:13:96:81:c1:
         14:e3:9f:fa:7b:95:f4:07:70:54:9f:6b:91:ea:6f:8d:8a:3a:
         36:62:be:9b:cb:ec:5e:fd:fd:67:2d:0e:21:40:e9:1b:a0:c6:
         ab:09:8f:97:70:63:36:9b:50:2a:e2:c1:0f:14:40:d1:69:87:
         69:47:5f:fd:57:90:35:5d:fe:3d:69:7f:86:44:f8:3a:8f:0b:
         2f:a0:e3:63:5d:4f:b1:36:48:f6:96:1a:0f:fb:f3:65:5c:df:
         dd:ad:e3:e9:e0:ac:0e:18:78:37:a8:da:76:fd:11:5b:4a:8f:
         33:b5:23:07:65:7a:5f:05:ea:30:67:8a:17:93:45:0c:b8:6f:
         c5:8f:f2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJR3QQr/ZKUS8lIPoCPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhODk5MzYyNzZhZDJkMTg3MTA3ZGZiNzQwMDc5MzAwM2Fj
MTQ5YTcwHhcNMjYwNDE2MjIwMTUwWhcNMjYwNDE3MjIwMTUwWjAzMTEwLwYDVQQD
EyhhOTc0Y2M0NDdlNzAzMjdlODcxYjAzYThiYzRhZmM4MWU0ODMwYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt8jsH7ZTO7bTFgxzn0Wfpl40uZW
xYo4QQWBrqillErlTm2lT1v5Nnk1inxxprp8270eJDupHKQy8qKk22SNcYo1JxXX
JRNoLp2SAzd89nOgwVgZxByei/FlNH0lShPS6JmD365kxDuWJEYzfbpRmMyH5Cps
rlh9oLh1j2X3NuGOGxYRY8auIX5VVeNsugkskGxfiFxnUUjplamIbDa6uJU/DQ1T
WrRI1MQNefqzSZfCUoSII1pSj1gPsBA4WL64QjMxx0gCvMYv3CQtj19aXMI6vYQH
jvZEfeeN2b6tU2PcDPvvyFPK0CHdntkALxyCVcOnpJl94qYwjMe1bfcKOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl0zER+cDJ+hxsDqLxK/IHkgwv1MB8GA1UdIwQY
MBaAFGqJk2J2rS0YcQfft0AHkwA6wUmnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYWI2MmQtMDcwYy00YjA2LWIzOGEt
NzNhN2E0NzM2MDM4LzEvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yYWI2MmQtMDcwYy00YjA2LWIzOGEtNzNhN2E0NzM2MDM4
LzEvYW9tVFluYXRMUmh4QjktM1FBZVRBRHJCU2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl04IVpIv
BZexPtdwZaFOknwDPyXLfdX9i6I7ffCj3f0s2GfHHgkqf2PQpsDoQdk8EjBdC7Hr
uCnr/RYhHH4Fq5exwxRsbk9dqbbMud4VdtAd38YfhJTr6lbOPnaYXKvL0RnXTpEm
2SIRE40Eqo1/1fx8pMCY4zYg8VwTloHBFOOf+nuV9AdwVJ9rkepvjYo6NmK+m8vs
Xv39Zy0OIUDpG6DGqwmPl3BjNptQKuLBDxRA0WmHaUdf/VeQNV3+PWl/hkT4Oo8L
L6DjY11PsTZI9pYaD/vzZVzf3a3j6eCsDhh4N6jadv0RW0qPM7UjB2V6XwXqMGeK
F5NFDLhvxY/y3g==
-----END CERTIFICATE-----