Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          zJLtyzqx5iefH4d/QbY5Mra+oy7su8DspzFvge/MEUg=
Subject key identifier:   75:08:3E:32:6A:1A:DB:36:3A:C4:C9:DE:C6:64:07:0D:AD:43:EC:8C
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       019D99CFBD3595C248018B6DB0D57FE656DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 05:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:21 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: ZB7Zj0OqzCCClr9+KZ5SuMzgh3HrWo6RC1+uSqtuwUo=)
                          2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:bd:35:95:c2:48:01:8b:6d:b0:d5:7f:e6:56:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: Apr 17 05:00:21 2026 GMT
            Not After : Apr 18 05:00:21 2026 GMT
        Subject: CN=75083e326a1adb363ac4c9dec664070dad43ec8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:10:9e:17:20:75:c7:ee:8d:ea:f2:3b:c7:
                    c8:88:a2:d1:7f:2d:bb:5d:69:f2:41:74:65:ef:ad:
                    5f:2d:09:d5:b2:a3:d9:36:b4:3b:49:8c:a1:99:0b:
                    92:ce:f9:de:13:1c:a6:c9:05:a7:e4:80:c5:48:42:
                    6e:df:de:01:69:89:fa:a4:b2:17:7c:d6:87:70:b4:
                    26:44:76:25:e1:2d:e9:59:2c:b8:32:ab:6c:4a:13:
                    ac:b2:e9:e5:81:fd:bb:0f:8c:f4:cd:7a:b7:15:11:
                    9b:70:3e:e7:ff:65:57:37:7e:34:47:41:31:ca:ab:
                    e9:60:97:8e:3e:53:3f:45:68:fa:22:c6:86:a6:3f:
                    bb:80:9e:0b:b9:11:30:4f:84:7e:df:e2:58:25:14:
                    8b:5b:be:c1:ee:62:08:56:c8:c4:c3:11:3d:bf:fd:
                    dd:b3:6b:51:59:da:18:c6:f4:b7:60:2d:28:aa:36:
                    6f:4f:cb:c7:35:50:bc:36:d7:7c:4e:12:11:3a:71:
                    58:9c:c2:1b:12:85:f9:75:fd:1b:df:23:9c:30:d8:
                    ca:1f:a6:fb:6f:75:bf:9c:a0:9f:96:0c:a3:cf:a4:
                    6f:bd:44:47:01:81:5e:d7:39:a8:b1:dc:04:11:e8:
                    d6:bf:92:af:94:c3:ca:de:a0:61:ba:5e:3e:74:30:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:3E:32:6A:1A:DB:36:3A:C4:C9:DE:C6:64:07:0D:AD:43:EC:8C
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4b:28:26:d8:c5:7f:1d:16:29:91:6a:83:ab:78:bf:ce:0f:
         21:27:5c:92:4e:41:80:47:9e:7a:88:31:72:0c:c1:8e:e5:9a:
         8d:74:f5:e1:d6:64:72:a4:3d:5c:78:34:ea:57:8f:6f:3c:65:
         0d:46:91:4d:7e:79:ad:cd:ea:59:4b:2f:a4:bf:5b:3d:ae:1d:
         fa:58:d9:dc:46:c6:29:94:2e:a3:39:3d:2b:cc:b9:91:43:67:
         bf:68:ec:50:cd:57:a5:b1:3e:de:dc:19:ab:68:3a:b9:66:b2:
         34:a1:b0:b9:99:64:24:96:f9:a2:16:8c:6c:8b:9e:13:c2:ed:
         17:05:82:e4:b7:ec:08:d8:73:23:60:0b:b9:27:86:eb:a3:48:
         5a:92:b7:96:af:3c:82:b7:43:7a:bd:7b:12:82:b9:96:97:b8:
         38:8c:0a:c6:07:f4:c8:61:90:31:3d:63:bf:0b:20:74:6b:b0:
         28:2e:67:2d:8d:a5:14:11:b7:17:63:45:ec:4f:6a:fb:3f:dd:
         80:9a:ee:7e:4e:36:5b:6f:91:e4:83:cd:54:c5:be:95:a4:45:
         22:96:f0:af:85:8b:0a:68:83:7c:81:84:ee:21:b6:d9:62:6f:
         ea:67:e3:27:22:de:88:e9:d5:1c:00:e2:17:88:9c:71:60:75:
         c0:9e:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:28 2026 by rpki-client