Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File:                     AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier:          HNXHZKPoUEloAGVvKiK7rktItH3RBfCe1WEFwqtVwPQ=
Subject key identifier:   C4:7B:8E:B3:0B:B8:92:EC:6F:E2:D2:46:AB:95:E7:6E:19:2D:D6:0F
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer:       /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial:       019F17F9A77BA976AB63A196AAA593997C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number:          09DA
Signing time:             Tue 30 Jun 2026 10:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:04 +0000
Files and hashes:         1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: TA7bN95NAiCxEWtPV+DmNvRHFJLXcCbMkHkZ9/2XbOM=)
                          2: uiwMttqxMzyYLQF8qEOVXUg9Ojg.roa (hash: e2JqwtqqkS6AcVv80pzTttUERY6557Im301R/2ucBQs=)
                          3: xSMo8UNuABk66wueztspa3AS7aE.roa (hash: 0TgB5/hOvn7dMDflKmn1c8RImHQ34JWH4S779C2eW2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:a7:7b:a9:76:ab:63:a1:96:aa:a5:93:99:7c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
        Validity
            Not Before: Jun 30 10:01:04 2026 GMT
            Not After : Jul  1 10:01:04 2026 GMT
        Subject: CN=c47b8eb30bb892ec6fe2d246ab95e76e192dd60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:56:a5:5f:3b:39:00:98:cc:94:16:31:90:
                    6a:7a:4f:4d:14:8e:74:9f:2f:a1:ce:0a:2d:9f:02:
                    81:f3:9b:8e:0d:08:0c:1e:e0:66:43:ac:a7:b7:84:
                    5b:87:3c:d9:cd:18:1b:06:b8:3c:69:fb:8e:6b:9b:
                    d6:fb:60:19:0b:2a:a5:e7:8d:cf:08:61:9e:92:fe:
                    72:53:5e:0b:50:bd:a8:da:49:68:46:42:97:c5:dc:
                    7a:94:9b:23:f0:1c:65:2a:2e:df:c5:74:04:0d:2e:
                    36:fe:56:1d:19:8c:9e:55:4f:32:d6:ca:a3:62:56:
                    6d:b9:49:ad:90:b9:8d:40:23:71:43:01:ca:4c:b5:
                    f5:d2:f3:df:dc:a6:e5:b2:ff:99:16:a3:71:e9:c5:
                    08:23:8f:22:3d:25:10:bf:a9:5a:29:49:8b:2e:c4:
                    2e:88:a6:73:18:ff:af:0c:6e:ff:f4:51:14:74:50:
                    e0:b6:91:1e:0a:e4:50:60:e6:fa:c8:06:3e:81:f3:
                    2f:70:64:58:c9:69:da:93:cd:d3:f7:39:79:c2:a9:
                    06:6d:bf:72:b8:94:79:16:dd:65:8b:74:fd:03:5b:
                    96:bc:26:d6:d6:35:ee:09:5f:e7:dc:38:3e:e0:01:
                    f2:31:07:7d:fe:72:79:b3:2f:58:07:e1:84:4f:c4:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7B:8E:B3:0B:B8:92:EC:6F:E2:D2:46:AB:95:E7:6E:19:2D:D6:0F
            X509v3 Authority Key Identifier:
                keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:97:79:6b:fa:8f:61:c9:cd:2d:84:a3:e7:b4:83:a3:ae:39:
         e8:a0:06:94:93:06:70:53:30:69:db:1b:18:e1:e4:08:a1:38:
         85:3d:3f:7a:3e:5a:75:3f:b1:07:a0:2c:1e:ed:cf:a9:b9:43:
         27:61:c7:92:35:ca:09:34:c6:18:77:48:73:af:28:7b:e2:aa:
         47:bf:e9:0a:e9:1f:f1:0b:12:31:80:b4:3c:ca:25:0c:df:00:
         a9:23:10:67:55:a0:67:3a:7c:73:b6:ca:fa:f0:4e:a4:1f:44:
         b5:e6:46:0e:3d:2d:72:5f:d1:60:1f:fe:1f:cd:40:22:95:d0:
         19:2f:c5:33:0f:a9:73:b7:17:e1:62:7a:ac:e8:08:26:ad:28:
         80:4a:af:16:b2:e0:45:66:72:7a:36:49:ed:c0:94:c3:65:90:
         f7:b5:e9:c7:93:08:de:37:29:7d:84:dc:6b:3f:c4:8b:25:c7:
         80:36:1d:e0:93:f3:a4:1b:19:0f:81:11:f1:3b:90:1e:61:76:
         96:69:78:36:ad:5e:3e:8b:7a:0f:3c:49:99:c0:53:3b:4c:48:
         d9:d8:f7:ec:2d:c8:a6:df:28:d5:ef:98:73:94:ac:4e:46:b2:
         f4:5f:e0:72:b5:14:40:0c:2e:05:ca:f5:00:29:74:9e:40:95:
         2f:79:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:25 2026 by rpki-client