Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          WzfiUminHtWtEQ5rW4U+bvLbL/Wua8jyfS0Hb0f+te8=
Subject key identifier:   FF:39:20:B7:F8:DC:91:46:72:FF:CF:44:D0:48:9C:05:54:7E:98:F2
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       019E2FCD9A7ACD8556691B31671F68BEC0A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          0B30
Signing time:             Sat 16 May 2026 08:01:03 +0000
Manifest this update:     Sat 16 May 2026 08:01:03 +0000
Manifest next update:     Sun 17 May 2026 08:01:03 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: O8HXKwV7/Tnvnd568N+PGlgvtwfwV6+E3jUeKUk8f9Q=)
                          2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:9a:7a:cd:85:56:69:1b:31:67:1f:68:be:c0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: May 16 08:01:03 2026 GMT
            Not After : May 17 08:01:03 2026 GMT
        Subject: CN=ff3920b7f8dc914672ffcf44d0489c05547e98f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:46:13:71:45:f7:01:c7:16:47:58:7a:cf:
                    cd:88:5f:b2:b2:95:5a:b7:15:b5:9e:e5:86:82:08:
                    c3:4b:c8:88:01:a5:3b:ab:a2:81:52:c4:39:cb:0d:
                    8d:a4:46:c3:96:48:2e:83:bb:7b:dc:7d:88:e7:30:
                    c4:2e:e1:f8:a7:1a:85:6b:d7:22:cc:d3:cb:2a:1d:
                    34:71:36:0b:2c:24:67:64:b8:1d:03:ac:91:ab:e4:
                    d5:ab:68:70:8a:e9:dc:7d:d3:e7:17:12:d4:5a:c4:
                    dc:5f:2e:90:b7:15:25:43:d8:ee:6e:36:e5:00:4c:
                    47:91:10:d8:85:cf:1c:2f:d7:58:d6:19:5e:a7:75:
                    f7:90:a7:d9:82:03:eb:8e:5f:06:5d:13:15:c4:23:
                    8f:6c:ac:89:24:e9:5b:03:c5:82:9c:ff:04:ec:08:
                    81:9f:a8:f8:d8:2e:d5:6a:c9:8d:6d:3f:86:f3:40:
                    fb:50:c4:02:99:1b:84:be:f5:2b:85:bd:5f:64:68:
                    3c:ea:d4:00:33:d5:b8:bf:cf:ec:44:46:23:99:94:
                    de:f6:e8:4b:9f:47:9a:e9:15:99:92:e4:5d:4b:03:
                    69:36:d4:d4:eb:60:0e:ba:39:17:7f:bb:9c:ce:73:
                    b3:b1:64:9f:32:95:25:d6:2f:91:f7:80:f3:12:70:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:39:20:B7:F8:DC:91:46:72:FF:CF:44:D0:48:9C:05:54:7E:98:F2
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:c6:9e:f0:a8:7c:23:49:de:aa:86:5f:89:1f:22:ee:0d:
         a6:33:98:ea:f7:0c:57:8d:34:ff:eb:8c:5c:2d:3d:b2:22:39:
         cf:78:ee:e0:0c:22:79:f9:78:7c:38:ed:c4:c5:7d:ef:1e:86:
         a2:db:55:57:41:e2:b7:0d:ed:fd:e7:5c:76:df:8d:6b:b5:ac:
         32:aa:a0:83:58:ef:b7:1e:fb:e7:6d:8a:86:b5:ae:0e:ad:d1:
         ba:42:b8:b6:24:b4:27:90:ad:fe:b9:59:b0:a8:51:85:27:2f:
         0e:b0:5b:ac:f5:7c:88:b9:15:84:72:af:81:dd:9a:2c:d5:ef:
         92:b1:26:79:bd:3d:56:26:01:a0:75:d7:72:81:9e:72:0a:c9:
         4c:18:e3:8b:cc:06:0e:69:c8:80:35:c6:3d:88:16:a3:59:65:
         b2:e6:91:77:85:7f:4d:0c:52:34:70:4e:a2:71:cf:b0:e6:d6:
         9e:ca:bc:ba:5e:d5:9c:fc:53:ca:64:23:b4:42:ff:42:cd:12:
         80:84:01:a1:40:05:44:d9:48:a7:25:91:30:94:be:13:51:9e:
         d0:a1:34:48:aa:56:95:1f:59:22:8c:dd:8b:a7:cb:13:8d:d6:
         83:93:90:7f:ff:2c:ef:83:a8:66:c0:dc:8e:18:5d:3d:28:52:
         e2:0a:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:20 2026 by rpki-client