Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File:                     AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier:          9K2b3oHtZWwnYN7cpSLm83Hi0FzReI6WepJva74yvSw=
Subject key identifier:   84:1F:A3:4F:E6:CD:31:B2:AB:0C:4E:B7:12:CB:FA:2C:2C:DA:22:73
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer:       /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial:       019DD0F551620D3970624CDB0BB98165CE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number:          0327
Signing time:             Mon 27 Apr 2026 22:00:31 +0000
Manifest this update:     Mon 27 Apr 2026 22:00:31 +0000
Manifest next update:     Tue 28 Apr 2026 22:00:31 +0000
Files and hashes:         1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: 3vnmJfKGlAqzVjdT9DF7OEP1EraynFpDQOLdasYers0=)
                          2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d0:f5:51:62:0d:39:70:62:4c:db:0b:b9:81:65:ce:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
        Validity
            Not Before: Apr 27 22:00:31 2026 GMT
            Not After : Apr 28 22:00:31 2026 GMT
        Subject: CN=841fa34fe6cd31b2ab0c4eb712cbfa2c2cda2273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:a9:aa:43:cc:4a:49:42:38:d3:ef:47:33:
                    3b:a1:e1:de:3f:8e:0e:f3:c4:f3:23:83:40:ac:3f:
                    58:0c:85:34:d7:4f:ba:9c:f3:e4:e5:69:14:16:58:
                    3c:8a:3b:a4:53:55:70:af:d8:8c:4f:6f:f7:d7:b1:
                    1d:6d:9c:0b:69:ef:89:ac:2f:2f:9a:e0:14:c4:3f:
                    47:66:53:27:5b:23:c7:cd:e1:b6:16:56:bc:95:e0:
                    6f:7b:2e:a2:65:e5:ef:9c:8f:90:24:07:16:65:9f:
                    03:03:5b:52:0e:0f:24:98:1a:ba:da:43:9b:c2:6b:
                    29:bd:b9:80:a6:ec:04:68:62:84:4a:59:4c:ba:2c:
                    c4:61:c4:f3:b5:77:61:a1:06:7c:7c:5e:b6:0d:fa:
                    67:16:d4:4f:4d:79:74:65:0a:ff:66:34:f9:25:3b:
                    8e:31:6a:a2:ea:7b:59:19:7d:c0:c2:b3:8c:e0:fa:
                    2d:29:d9:ec:a3:c1:42:66:34:e8:7d:7c:62:98:88:
                    c3:a7:88:bf:b6:f3:70:29:05:e7:72:a8:99:03:99:
                    8a:eb:60:9e:5b:6a:ff:a4:6e:25:29:52:72:0f:5a:
                    d0:13:05:0b:7e:e2:99:56:3e:49:8f:37:d2:08:22:
                    45:87:3c:ad:ea:31:66:c1:73:b6:4d:e2:6a:55:fe:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:A3:4F:E6:CD:31:B2:AB:0C:4E:B7:12:CB:FA:2C:2C:DA:22:73
            X509v3 Authority Key Identifier:
                keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:21:91:35:89:98:93:c5:e3:7b:ce:cd:2e:4a:78:ba:9b:
         23:41:29:82:bf:04:1d:5c:82:b5:d7:bb:ad:4d:a8:2f:be:47:
         ab:5b:9b:4c:a8:b6:51:36:4d:96:b8:34:f1:00:88:ce:94:53:
         32:18:e9:8f:2e:b6:8c:ef:0c:4f:69:ea:9e:17:f6:fb:59:d5:
         f6:b9:15:ea:83:57:cd:6e:c5:af:48:0e:d0:13:40:a1:5b:9b:
         77:b1:cb:68:ad:25:a1:b5:22:db:85:de:c1:c1:86:c9:a2:56:
         a8:cf:19:7e:af:97:ae:2f:c8:43:ab:a5:3c:97:67:3c:d0:b8:
         9b:03:69:6f:99:79:46:6d:21:61:1a:8a:d2:7e:1b:58:5c:d5:
         5d:60:89:f8:ca:71:92:8f:28:40:e6:2d:a7:5a:8d:fe:11:27:
         ee:83:fa:23:ed:91:b8:7c:31:0b:c8:87:bc:b0:b6:8e:b5:13:
         9b:e6:9b:d3:7c:ee:97:fb:58:6b:2b:ad:d8:f2:bd:96:31:9e:
         5a:f1:6a:2f:3d:23:e0:37:9a:9f:99:83:e1:39:0d:a0:25:03:
         7f:68:07:09:5a:48:d3:de:f7:1a:3d:ad:c4:da:38:6d:dc:2c:
         a5:28:f0:74:50:4e:d2:5a:06:33:06:cf:76:c4:1c:8a:c8:d5:
         e4:d2:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:00 2026 by rpki-client