Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          h4Vy0YlbmJ9iSHUYp9LTEeaC+T42fe254FFRn1lPS9g=
Subject key identifier:   22:12:3B:F3:3A:18:7E:F1:25:53:04:0F:7B:86:30:F9:1E:99:F7:37
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       019E22EDB2CA97BE13A28B2034CBF2721140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0E37
Signing time:             Wed 13 May 2026 20:01:03 +0000
Manifest this update:     Wed 13 May 2026 20:01:03 +0000
Manifest next update:     Thu 14 May 2026 20:01:03 +0000
Files and hashes:         1: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (hash: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20=)
                          2: 7r93jnvgm30A0j6huIv9VvOm-J8.roa (hash: Aw/Q13x7Ay9BPZImeqJObXIZcMuEIiS7Ocw9loL85Y8=)
                          3: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: TqDNXzNupDlPQyJ059E1k/8Rs4sPLtfmqQeICNwfi88=)
                          4: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (hash: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek=)
                          5: k4Ty00vW-Mz9vPvcOZ23ox0H6kU.roa (hash: Hp1EXNjMbh6L6PMiyCI3K99QvfaWVLoaMdZebP34RrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:22:ed:b2:ca:97:be:13:a2:8b:20:34:cb:f2:72:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: May 13 20:01:03 2026 GMT
            Not After : May 14 20:01:03 2026 GMT
        Subject: CN=22123bf33a187ef12553040f7b8630f91e99f737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:af:84:c3:b8:6d:f5:27:93:4b:a6:f0:0a:
                    5e:8c:01:13:9c:b7:d7:c6:9d:39:23:78:73:9a:07:
                    06:d3:c6:a4:2d:51:44:ae:af:b0:fc:b7:9b:39:5a:
                    37:10:e9:b0:72:8f:71:35:c1:40:4f:6c:27:9c:a7:
                    d9:0d:3d:bd:cc:54:32:68:22:44:63:82:da:6e:17:
                    ee:41:0f:64:fc:84:63:9b:97:35:8c:33:ac:d8:39:
                    b7:e7:0d:e7:2a:8c:39:72:4b:60:a9:7f:b7:cc:20:
                    3d:3c:be:a4:c2:0a:6e:67:31:45:cd:32:1d:93:2c:
                    39:ee:ea:16:20:b2:fc:e0:9d:6d:de:1b:b8:b5:b7:
                    2c:d4:79:dd:ec:80:34:ce:cf:3b:04:eb:08:c2:b2:
                    a0:2f:52:22:dc:60:ac:f8:f1:6f:0f:b0:9f:fd:1a:
                    00:5f:07:48:29:02:91:07:3d:18:b3:ad:d0:96:02:
                    5b:46:c2:fd:25:9e:d2:bc:46:34:20:a6:c1:7f:7d:
                    31:6a:07:6d:5f:d3:f2:27:3f:25:c8:3c:8a:29:e3:
                    ae:7e:e5:32:4a:28:31:11:e4:0c:59:71:28:2d:86:
                    bf:b3:36:2d:ce:97:50:92:db:0f:b9:89:75:a9:43:
                    73:c5:2c:db:2c:b4:f2:de:4b:c6:2b:59:3a:14:4d:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:12:3B:F3:3A:18:7E:F1:25:53:04:0F:7B:86:30:F9:1E:99:F7:37
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:2e:30:d1:a4:54:73:bd:89:2b:15:63:12:d0:57:e3:e2:7f:
         9e:3e:4f:cc:05:91:9b:5b:e8:2b:d8:5b:82:a2:a5:a5:a1:34:
         a0:2d:63:ee:9f:4c:52:77:24:0a:50:62:f2:eb:b5:9a:ec:d3:
         d7:80:fc:57:5a:85:b7:1f:02:1e:ff:fb:f7:75:b5:ed:4f:2b:
         f1:53:2b:01:08:07:0b:57:d2:10:49:60:a2:9b:38:fc:68:cb:
         33:d8:cb:33:e7:b7:1a:1f:1c:d8:0f:20:73:d4:97:36:8e:b3:
         1c:be:c2:60:d4:9b:cc:cd:d5:2b:87:a1:51:f4:04:1b:e6:89:
         ff:68:14:75:03:ef:df:b0:95:ae:e2:62:d0:fc:83:eb:a7:86:
         c5:67:98:f9:a1:10:48:2e:85:f8:22:6b:db:a9:50:99:84:e8:
         c7:ef:4c:90:b9:9c:06:67:8f:ae:81:e5:c7:68:7c:9c:5a:ae:
         f1:78:cd:f3:46:2f:42:36:dc:74:9b:10:3b:9f:10:aa:5a:58:
         c6:97:78:7e:cd:db:ff:f0:7a:23:e1:95:db:ea:63:3d:3c:62:
         9b:85:20:58:65:64:a1:6f:7d:53:3c:01:9e:3c:91:5f:70:e5:
         d5:b1:72:44:d0:48:d6:a9:a4:8f:3c:6a:66:d4:36:75:64:7d:
         55:ac:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:22:23 2026 by rpki-client