Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          emXHcnGZNrod5R8tdHKCld5hnF54MgqX3bxdyjEXud4=
Subject key identifier:   32:DE:39:DF:73:A6:DA:D5:55:2B:66:1F:C1:36:D8:BD:88:EE:B8:F7
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       01A12767BB57C43078DBE7E00B0FD2D10016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          0FC7
Signing time:             Sat 10 Oct 2026 20:01:11 +0000
Manifest this update:     Sat 10 Oct 2026 20:01:11 +0000
Manifest next update:     Sun 11 Oct 2026 20:01:11 +0000
Files and hashes:         1: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (hash: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20=)
                          2: 7r93jnvgm30A0j6huIv9VvOm-J8.roa (hash: Aw/Q13x7Ay9BPZImeqJObXIZcMuEIiS7Ocw9loL85Y8=)
                          3: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: aLeaf14bhsU/X3TC8KZLUVbuF/4V4Za4W82kFnArwt0=)
                          4: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (hash: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek=)
                          5: k4Ty00vW-Mz9vPvcOZ23ox0H6kU.roa (hash: Hp1EXNjMbh6L6PMiyCI3K99QvfaWVLoaMdZebP34RrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:67:bb:57:c4:30:78:db:e7:e0:0b:0f:d2:d1:00:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Oct 10 20:01:11 2026 GMT
            Not After : Oct 11 20:01:11 2026 GMT
        Subject: CN=32de39df73a6dad5552b661fc136d8bd88eeb8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:2e:b0:0c:c6:e4:2b:e4:14:d7:59:ab:53:
                    bd:95:d9:7f:ff:9a:62:b5:06:dc:74:f8:77:22:f0:
                    8d:0d:80:5f:84:cb:07:db:d2:db:78:fc:6d:95:d2:
                    f1:93:d2:2b:df:cc:85:d9:7d:d6:60:8a:2f:6a:25:
                    83:60:4d:43:c8:b3:49:3d:63:62:2c:43:b1:10:d6:
                    e4:ad:0b:c8:8a:5f:d7:24:82:75:43:1a:37:2b:98:
                    f8:01:58:06:98:8b:26:bf:cd:fa:27:0b:ec:4e:b5:
                    d0:0a:70:e6:de:97:6b:ef:af:bb:c1:ee:24:37:01:
                    f1:13:10:b4:ab:6e:de:c7:4b:09:b2:a1:6f:1c:52:
                    55:eb:b3:51:1e:e2:e9:14:4e:e1:c8:ec:0d:1f:5c:
                    ca:a7:bd:1c:0b:5c:e7:3c:9a:a3:58:ff:5e:0d:d1:
                    af:f3:3e:dd:d7:eb:e4:6a:7c:91:a4:5f:38:b4:22:
                    cf:6f:2b:5f:12:57:75:d2:e2:13:7b:83:66:d4:74:
                    c1:58:31:4c:ec:74:e4:e6:78:4f:e3:d5:7e:64:18:
                    f5:22:62:2d:fe:61:99:66:c8:66:3b:27:86:29:bf:
                    94:07:2c:61:3c:6a:c2:05:f0:51:74:ec:57:cd:d5:
                    34:c6:de:a5:99:f7:e8:6f:e1:c3:b3:e6:d4:91:83:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DE:39:DF:73:A6:DA:D5:55:2B:66:1F:C1:36:D8:BD:88:EE:B8:F7
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:66:7c:30:e4:06:76:36:bd:6e:c5:85:0a:b6:b1:29:0d:1c:
         7f:bf:99:ef:9d:5e:3e:d2:0d:09:84:2b:44:f1:d7:dc:5d:4a:
         a2:b8:2c:57:29:b5:ba:c7:a7:97:91:61:ca:cd:da:03:16:dd:
         53:a8:82:43:23:84:29:97:e8:1c:f4:5d:d0:9e:7f:c4:84:32:
         8f:fc:e4:25:28:1a:84:0d:d3:55:e7:7b:15:a6:ef:82:b9:18:
         c0:f4:68:82:c9:8f:7e:f8:13:ba:15:46:b5:6d:8f:f3:51:ba:
         2b:56:ae:f2:f1:70:6f:72:73:a1:28:94:f5:e1:ce:fe:06:9d:
         97:f3:f0:28:8c:1b:61:aa:f3:e8:2b:a2:12:b5:7c:79:4d:2c:
         78:28:a5:23:e1:1c:61:0d:e9:30:60:02:62:14:2b:9d:27:72:
         2f:a8:9a:be:33:ac:f2:3c:de:98:8f:44:52:21:50:04:7b:9a:
         98:cb:e2:3b:a7:98:89:97:38:82:af:03:ec:bd:9d:c7:d8:29:
         e6:14:4d:0e:31:35:a2:78:a7:e8:98:17:ff:85:46:4b:58:8b:
         6b:2f:08:ef:8f:f3:d7:2d:3e:83:79:a0:e8:90:5a:b0:77:71:
         ca:82:ae:3e:61:5e:aa:c4:43:9e:5f:f5:44:96:f2:f4:04:f2:
         b6:05:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:20 2026 by rpki-client