Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          wItmIfnoj3WxKXBba9cQ72S2TJ4i/xaRkeVxElS8+hs=
Subject key identifier:   C4:A6:83:57:11:B4:D9:4E:7D:62:6E:8E:04:85:7C:5D:B9:63:A1:78
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       019D2DAB393895368F004020896B6269369A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0DB8
Signing time:             Fri 27 Mar 2026 05:01:29 +0000
Manifest this update:     Fri 27 Mar 2026 05:01:29 +0000
Manifest next update:     Sat 28 Mar 2026 05:01:29 +0000
Files and hashes:         1: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (hash: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20=)
                          2: 7r93jnvgm30A0j6huIv9VvOm-J8.roa (hash: Aw/Q13x7Ay9BPZImeqJObXIZcMuEIiS7Ocw9loL85Y8=)
                          3: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: Asa6raf380FSjqucXClTUxuzdawy3h8Ukcc0RyZloII=)
                          4: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (hash: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek=)
                          5: k4Ty00vW-Mz9vPvcOZ23ox0H6kU.roa (hash: Hp1EXNjMbh6L6PMiyCI3K99QvfaWVLoaMdZebP34RrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:ab:39:38:95:36:8f:00:40:20:89:6b:62:69:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Mar 27 05:01:29 2026 GMT
            Not After : Mar 28 05:01:29 2026 GMT
        Subject: CN=c4a6835711b4d94e7d626e8e04857c5db963a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:c7:21:9d:c8:b9:6c:32:7c:2c:ac:5d:dd:
                    ca:fe:68:41:59:ab:68:94:7e:c9:38:a8:94:4b:30:
                    9e:56:e4:79:cf:61:29:36:cf:87:02:4d:aa:72:56:
                    3c:97:a4:e1:9a:e0:48:12:06:74:82:ee:93:ca:b4:
                    57:8b:e5:27:db:cc:18:d0:48:d9:b6:d9:69:08:aa:
                    7d:32:90:4e:bc:65:4b:2d:fd:60:8b:89:53:0c:33:
                    66:08:d9:79:e0:90:b7:71:1f:6c:31:5e:04:87:59:
                    ae:ad:02:6b:7b:dd:75:32:aa:8d:2e:90:c0:bd:e3:
                    c2:84:c1:cb:37:ea:bb:42:e8:f0:e3:85:0a:74:3c:
                    04:fb:c9:d8:16:31:b4:b7:37:66:89:b1:f0:c5:80:
                    1d:92:b4:23:0f:bb:3b:76:b6:e2:9f:43:df:57:01:
                    bd:3a:39:1d:76:4f:81:4a:e3:c3:c2:8f:44:98:42:
                    ef:48:c6:f1:e1:e4:f1:ef:1e:85:c5:58:35:b5:06:
                    42:50:42:34:7a:cf:a4:27:f3:03:0a:1b:97:a7:37:
                    18:2e:e5:b6:3f:d7:77:c9:24:c1:92:7a:e8:f5:68:
                    93:8a:27:4b:d4:a9:72:83:c9:ce:1e:0f:97:b5:35:
                    06:a3:66:5a:1a:27:56:5a:93:51:5f:eb:ad:d3:2c:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:83:57:11:B4:D9:4E:7D:62:6E:8E:04:85:7C:5D:B9:63:A1:78
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:19:2f:74:22:85:aa:e8:46:78:12:39:26:4f:e2:f0:47:a6:
         d6:f5:84:71:de:6e:ef:6a:63:77:55:05:c0:ec:97:5f:b6:87:
         be:92:8d:21:c5:a8:71:05:42:8c:ea:ec:8e:f3:47:93:55:e3:
         41:80:b1:3c:79:87:2c:5b:22:e2:0e:40:3f:a6:c2:98:3d:8d:
         37:7c:c3:74:5e:b0:de:5c:f8:7c:06:d2:e7:14:2f:8b:90:c7:
         c1:85:a2:bb:3a:cb:f6:b8:58:c9:3e:41:bc:b1:b4:db:cd:e0:
         bc:67:9b:bc:d4:79:70:ab:c1:3b:8e:4d:15:a5:53:a3:e4:32:
         bf:2c:cf:f3:22:5c:f2:95:a6:07:2a:57:f3:cf:27:4b:29:4b:
         e1:b1:86:bd:64:9a:71:0b:05:42:4a:c7:9d:9d:07:a8:bc:f1:
         95:b8:b5:63:e4:de:ae:9a:a6:74:bd:74:03:e7:32:27:e1:4e:
         83:58:e3:5f:77:62:16:64:64:de:7b:20:5f:d8:31:f2:48:35:
         4d:70:97:02:86:4d:97:f7:4b:3f:c2:83:d9:96:75:0e:c0:25:
         35:48:f1:62:27:05:56:99:bd:3f:e7:8b:ba:af:d6:8e:d7:3a:
         69:27:23:a5:54:52:96:3b:8b:4b:99:17:36:9f:83:dc:96:16:
         5c:bf:97:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tqzk4lTaPAEAgiWtiaTaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjYwMzI3MDUwMTI5WhcNMjYwMzI4MDUwMTI5WjAzMTEwLwYDVQQD
EyhjNGE2ODM1NzExYjRkOTRlN2Q2MjZlOGUwNDg1N2M1ZGI5NjNhMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOLHIZ3IuWwyfCysXd3K/mhBWato
lH7JOKiUSzCeVuR5z2EpNs+HAk2qclY8l6ThmuBIEgZ0gu6TyrRXi+Un28wY0EjZ
ttlpCKp9MpBOvGVLLf1gi4lTDDNmCNl54JC3cR9sMV4Eh1murQJre911MqqNLpDA
vePChMHLN+q7Qujw44UKdDwE+8nYFjG0tzdmibHwxYAdkrQjD7s7drbin0PfVwG9
Ojkddk+BSuPDwo9EmELvSMbx4eTx7x6FxVg1tQZCUEI0es+kJ/MDChuXpzcYLuW2
P9d3ySTBknro9WiTiidL1Klyg8nOHg+XtTUGo2ZaGidWWpNRX+ut0yxJVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSmg1cRtNlOfWJujgSFfF25Y6F4MB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBkvdCKF
quhGeBI5Jk/i8Eem1vWEcd5u72pjd1UFwOyXX7aHvpKNIcWocQVCjOrsjvNHk1Xj
QYCxPHmHLFsi4g5AP6bCmD2NN3zDdF6w3lz4fAbS5xQvi5DHwYWiuzrL9rhYyT5B
vLG0283gvGebvNR5cKvBO45NFaVTo+QyvyzP8yJc8pWmBypX888nSylL4bGGvWSa
cQsFQkrHnZ0HqLzxlbi1Y+TerpqmdL10A+cyJ+FOg1jjX3diFmRk3nsgX9gx8kg1
TXCXAoZNl/dLP8KD2ZZ1DsAlNUjxYicFVpm9P+eLuq/Wjtc6aScjpVRSljuLS5kX
Np+D3JYWXL+Xxw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 13:53:19 2026 by rpki-client