Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
File:                     AAdP4ZSoLAjMjpuEm608JLamR7k.mft (raw, json)
Hash identifier:          ADxAZgM3CKx5Os2g9aPfNYyY8jFEInu3Aw0qx9dde68=
Subject key identifier:   0A:C4:AF:21:49:F2:30:B7:24:45:31:CE:F6:2E:F1:ED:92:E1:95:94
Authority key identifier: 00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9
Certificate issuer:       /CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
Certificate serial:       01A040F2FD96AB246AC6AB9B079AF606ADFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
Manifest number:          83
Signing time:             Thu 27 Aug 2026 02:01:01 +0000
Manifest this update:     Thu 27 Aug 2026 02:01:01 +0000
Manifest next update:     Fri 28 Aug 2026 02:01:01 +0000
Files and hashes:         1: AAdP4ZSoLAjMjpuEm608JLamR7k.crl (hash: Ydq8kO/gf0g9HngnJKlxat+Hp0wyttf+NVn5eGgIJpk=)
                          2: _z9pyycrhZshv0I1f5oyGq23-0Q.roa (hash: 2wz3wcXIoRnyelfu+ni0ylKCy5GgJ+dezMzIh5BJl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:f2:fd:96:ab:24:6a:c6:ab:9b:07:9a:f6:06:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00074fe194a82c08cc8e9b849bad3c24b6a647b9
        Validity
            Not Before: Aug 27 02:01:01 2026 GMT
            Not After : Aug 28 02:01:01 2026 GMT
        Subject: CN=0ac4af2149f230b7244531cef62ef1ed92e19594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:91:4d:16:94:8d:98:71:39:cd:85:2f:fa:
                    77:25:0c:6f:0f:2f:91:87:36:be:7a:3c:aa:6e:8a:
                    a4:2a:cb:05:a6:20:12:3c:34:f4:26:b9:4d:f6:3b:
                    01:3e:53:3d:73:7d:3a:e1:c0:77:6f:de:32:07:65:
                    be:e0:7f:ec:b7:7b:b2:85:5c:24:93:ea:87:8e:89:
                    a7:52:e8:e0:a5:10:34:0d:2c:c1:f9:92:2d:5d:ae:
                    33:85:5c:a3:c0:84:ca:a0:40:50:ed:94:a0:6c:16:
                    e2:2c:42:04:4f:7f:53:d3:7e:7d:45:de:f3:0f:df:
                    1c:13:0c:de:6f:e9:d1:6b:9d:c1:9b:14:ac:49:17:
                    be:91:45:a7:6a:cb:e3:a2:f6:fd:bb:00:58:a1:26:
                    b6:ed:ea:69:c0:4b:36:11:7c:54:b3:5a:52:ec:b8:
                    d1:e2:55:40:80:5c:eb:ab:d4:74:c5:fb:3e:a2:7c:
                    4b:9c:ef:ae:ec:ad:7d:44:e7:ad:e7:6f:9a:e1:dd:
                    b8:80:70:8a:5f:18:9d:44:fe:3b:ca:6e:ab:38:7f:
                    63:a5:f6:f3:90:5d:4e:37:18:0d:ec:d3:18:0d:19:
                    09:ff:50:28:db:86:fb:f5:1c:1a:66:ed:3a:b7:fe:
                    f0:08:4f:2b:1b:59:60:92:bc:5d:79:38:94:5f:c5:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C4:AF:21:49:F2:30:B7:24:45:31:CE:F6:2E:F1:ED:92:E1:95:94
            X509v3 Authority Key Identifier:
                keyid:00:07:4F:E1:94:A8:2C:08:CC:8E:9B:84:9B:AD:3C:24:B6:A6:47:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdP4ZSoLAjMjpuEm608JLamR7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/78e9b5-113c-4ba1-9834-5c9a0e35c8af/1/AAdP4ZSoLAjMjpuEm608JLamR7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:59:13:51:c3:d6:dc:22:85:a5:73:ea:8e:21:eb:d3:9d:ae:
         04:1f:49:9b:a1:36:df:5d:86:8c:68:d9:6b:ab:2a:5b:d9:a5:
         4b:ea:7b:d0:3f:98:e0:9d:7c:bb:7c:72:3a:62:7f:76:ca:a7:
         98:26:78:6f:e0:4f:46:f7:26:a8:74:d1:24:fe:7d:70:48:ef:
         3b:b4:5a:12:6a:5e:4c:10:ce:52:23:23:0b:00:60:19:cd:58:
         21:e3:53:1f:87:3e:2b:28:df:3b:35:3e:d0:d1:1e:fd:c7:24:
         06:14:5d:d4:4a:d1:bc:de:71:82:ec:3a:63:55:5c:b7:bc:26:
         a8:08:93:d4:d8:f6:fb:09:79:ed:32:78:ea:a8:57:f2:45:68:
         2e:4a:06:27:92:97:39:36:9e:59:db:a5:32:a5:f6:a8:3c:2b:
         be:cb:4e:ce:27:b5:d0:a4:c7:e3:f2:8e:49:07:c7:9a:fd:e1:
         37:69:cc:a3:6d:30:6b:5c:4a:c9:43:fe:d0:c4:1c:15:43:02:
         38:59:f0:4a:0c:8f:25:ee:d1:80:b0:49:87:cf:99:e9:75:29:
         df:d0:1b:11:e5:f7:6a:43:31:9a:48:a9:19:b0:35:c3:98:1e:
         fb:bd:09:34:60:dd:c1:71:20:5e:a9:bf:88:f1:a0:b8:13:3a:
         fb:9c:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:50:39 2026 by rpki-client