Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          848QiWPqKaf0mBsoTgoZs7rCK9e5SoOSVkoP4Njk52k=
Subject key identifier:   12:A7:86:2D:9C:57:8C:FA:1E:A8:EC:1F:E2:F2:BA:A6:7B:DF:C0:45
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       019FA907CB531848EBD5AF6F43CB4DB12C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0F01
Signing time:             Tue 28 Jul 2026 14:01:28 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:28 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:28 +0000
Files and hashes:         1: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (hash: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20=)
                          2: 7r93jnvgm30A0j6huIv9VvOm-J8.roa (hash: Aw/Q13x7Ay9BPZImeqJObXIZcMuEIiS7Ocw9loL85Y8=)
                          3: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: b24FlJJs41+8K2ORATcFjbKuNqdOzMyrowyZrns8ARU=)
                          4: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (hash: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek=)
                          5: k4Ty00vW-Mz9vPvcOZ23ox0H6kU.roa (hash: Hp1EXNjMbh6L6PMiyCI3K99QvfaWVLoaMdZebP34RrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:cb:53:18:48:eb:d5:af:6f:43:cb:4d:b1:2c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Jul 28 14:01:28 2026 GMT
            Not After : Jul 29 14:01:28 2026 GMT
        Subject: CN=12a7862d9c578cfa1ea8ec1fe2f2baa67bdfc045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:e7:72:fb:78:b6:b3:8c:0c:d6:da:7f:96:
                    bd:03:ec:a9:1b:8d:07:00:50:2c:e3:00:e6:b5:b0:
                    00:41:3a:ec:b6:b8:47:53:71:8d:41:5c:34:73:f2:
                    5e:eb:ff:a1:e2:8d:e8:15:c2:76:aa:ec:d0:21:e7:
                    9a:72:d4:68:f9:61:a4:55:15:0b:21:50:de:c6:30:
                    ca:40:18:e5:0a:46:fa:7d:c8:cc:c1:a9:08:a3:f9:
                    52:40:3c:b6:50:4f:7b:39:b3:52:5e:ea:f9:e9:05:
                    4c:95:d4:57:56:77:cf:b4:cf:a9:53:f8:9e:ee:81:
                    77:a2:79:a4:81:46:52:f8:d0:c8:62:b4:52:ad:de:
                    63:da:fa:db:24:4a:03:92:48:64:a2:ab:88:df:56:
                    a9:e7:fa:91:70:9c:67:00:51:13:fe:79:51:04:fc:
                    c9:b0:61:b6:50:5d:a6:70:b8:0d:b0:88:a6:dc:98:
                    54:06:75:eb:5a:2b:7f:d8:fe:ab:df:fa:08:6b:b6:
                    d7:7c:13:26:8e:9d:e4:51:b0:e7:ab:c9:7b:ad:c1:
                    92:d1:58:ca:62:55:3d:3d:99:be:54:39:9f:ad:12:
                    8b:4a:92:4a:cc:73:93:bc:82:58:ef:87:84:a5:ac:
                    75:6d:c9:a2:82:07:6c:62:46:f7:d8:a2:3e:db:ea:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:86:2D:9C:57:8C:FA:1E:A8:EC:1F:E2:F2:BA:A6:7B:DF:C0:45
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:d1:f3:5f:4b:9c:df:d3:df:0c:4f:49:e3:06:3e:3b:c0:
         e4:9f:93:c0:b4:c3:ba:2e:ad:84:b7:f0:e8:d0:4d:88:d2:f5:
         31:1a:55:59:d2:71:a6:ad:6b:db:f1:ac:20:cf:e2:c6:22:49:
         1b:64:18:68:da:c2:f4:2b:9c:15:d0:76:93:0c:8c:a9:62:e4:
         15:e8:a6:8e:07:75:79:97:80:69:2e:e4:dc:76:aa:1e:12:56:
         de:46:ad:f3:98:35:d5:74:ad:e4:a3:d3:a5:5c:10:e0:2d:83:
         52:6c:d2:4a:98:a9:a2:dc:3f:de:96:76:52:30:0f:10:5a:2d:
         09:41:d5:78:b0:b3:ad:bd:2f:6c:4b:95:e5:a9:08:e2:e5:70:
         74:fd:40:74:92:b0:35:85:ff:78:ee:d7:ab:5d:e6:4f:ae:68:
         a4:82:49:20:b6:9f:85:65:46:64:c9:36:81:5d:44:85:d1:e9:
         17:ec:54:ba:05:17:cc:f3:57:fe:11:01:3f:ce:f4:22:44:6a:
         31:74:26:a2:1b:79:34:80:bd:b3:78:46:90:30:96:e9:6a:b2:
         48:be:bf:9c:e9:a5:cd:76:31:1e:0e:53:31:ee:6f:0b:3e:a3:
         93:bd:d6:fe:c6:8f:7e:cb:66:d7:9e:08:0a:24:4d:72:89:fd:
         a4:59:ab:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB8tTGEjr1a9vQ8tNsSxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjYwNzI4MTQwMTI4WhcNMjYwNzI5MTQwMTI4WjAzMTEwLwYDVQQD
EygxMmE3ODYyZDljNTc4Y2ZhMWVhOGVjMWZlMmYyYmFhNjdiZGZjMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQrncvt4trOMDNbaf5a9A+ypG40H
AFAs4wDmtbAAQTrstrhHU3GNQVw0c/Je6/+h4o3oFcJ2quzQIeeactRo+WGkVRUL
IVDexjDKQBjlCkb6fcjMwakIo/lSQDy2UE97ObNSXur56QVMldRXVnfPtM+pU/ie
7oF3onmkgUZS+NDIYrRSrd5j2vrbJEoDkkhkoquI31ap5/qRcJxnAFET/nlRBPzJ
sGG2UF2mcLgNsIim3JhUBnXrWit/2P6r3/oIa7bXfBMmjp3kUbDnq8l7rcGS0VjK
YlU9PZm+VDmfrRKLSpJKzHOTvIJY74eEpax1bcmiggdsYkb32KI+2+qZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKnhi2cV4z6HqjsH+LyuqZ738BFMB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS/R819L
nN/T3wxPSeMGPjvA5J+TwLTDui6thLfw6NBNiNL1MRpVWdJxpq1r2/GsIM/ixiJJ
G2QYaNrC9CucFdB2kwyMqWLkFeimjgd1eZeAaS7k3HaqHhJW3kat85g11XSt5KPT
pVwQ4C2DUmzSSpipotw/3pZ2UjAPEFotCUHVeLCzrb0vbEuV5akI4uVwdP1AdJKw
NYX/eO7Xq13mT65opIJJILafhWVGZMk2gV1EhdHpF+xUugUXzPNX/hEBP870IkRq
MXQmoht5NIC9s3hGkDCW6WqySL6/nOmlzXYxHg5TMe5vCz6jk73W/saPfstm154I
CiRNcon9pFmrpA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:35 2026 by rpki-client