Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File:                     ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier:          cGh3FY6yMiQb9oUG5AcJ1mbYnHBIz9T4ia3TfoReXVM=
Subject key identifier:   40:DD:78:16:89:CC:3C:3C:68:65:6E:08:8D:78:0E:90:D1:E4:28:B0
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer:       /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial:       019F126506BC9D03A4B7DCBC409B5DBFCB79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number:          1918
Signing time:             Mon 29 Jun 2026 08:00:38 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:38 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:38 +0000
Files and hashes:         1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: w+Qm5L3hSomp4loHmYNnEBxKHKF0wCRj+AbbHABlhiU=)
                          2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:06:bc:9d:03:a4:b7:dc:bc:40:9b:5d:bf:cb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
        Validity
            Not Before: Jun 29 08:00:38 2026 GMT
            Not After : Jun 30 08:00:38 2026 GMT
        Subject: CN=40dd781689cc3c3c68656e088d780e90d1e428b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:bb:24:5d:e0:3a:1f:42:93:0d:d7:c4:bd:
                    82:a5:60:47:64:67:79:9e:32:cc:ff:5c:a8:a1:ce:
                    ca:83:6f:1e:b7:30:fd:31:85:d0:0b:b4:a8:c3:43:
                    2f:8a:76:87:b5:04:93:00:d3:4d:da:40:83:6f:f4:
                    a2:85:c0:6d:9d:41:96:fa:4e:5d:d6:bd:e2:8e:93:
                    92:d3:2d:7d:75:42:4f:93:5c:a4:27:30:3e:25:fc:
                    eb:ed:46:36:6f:3a:e7:44:27:4a:4c:c6:17:a1:a9:
                    00:6a:b4:47:a9:8f:0a:de:ce:9e:c7:ab:45:e0:07:
                    7f:b7:4d:9a:e4:8c:22:29:82:fe:20:20:02:99:de:
                    a9:d0:a7:c2:c9:5a:f9:8b:be:8f:04:dc:bd:1f:25:
                    69:b0:b4:5f:66:cc:42:54:34:db:e6:e5:36:fe:0c:
                    43:75:81:72:ed:a3:e1:03:fb:b3:5d:2e:d0:dc:1e:
                    09:cc:06:af:7d:b4:57:b0:66:07:1c:97:f2:f2:4c:
                    26:ed:50:01:d9:74:23:2b:06:5d:a0:0d:32:39:7f:
                    a4:e6:ba:a0:27:bb:ac:1f:79:90:f3:c6:dc:39:35:
                    45:a3:be:29:b8:0e:2b:84:85:bb:b1:ad:7b:d5:75:
                    b6:89:1c:fc:ed:db:53:4a:18:7e:e3:51:72:5d:b2:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DD:78:16:89:CC:3C:3C:68:65:6E:08:8D:78:0E:90:D1:E4:28:B0
            X509v3 Authority Key Identifier:
                keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:dd:0d:cf:8c:1a:e3:57:83:40:6c:96:a2:05:65:50:ca:20:
         1d:83:f8:5d:b1:fb:bc:e1:bb:0f:6d:79:62:bf:fe:93:99:59:
         f4:72:08:00:20:47:cc:12:56:28:96:33:bf:ed:a1:71:3b:96:
         2f:1a:d0:97:4a:57:0f:14:dc:8f:50:2b:13:54:b3:69:2f:0b:
         2a:68:3a:70:b9:37:71:40:18:90:75:26:7f:43:fc:be:ef:bd:
         ee:c8:30:64:51:29:18:7c:13:a5:bd:4a:c2:80:b0:5a:82:c9:
         c4:cf:f9:f9:64:23:0c:bc:8e:45:c6:29:f7:b9:00:70:31:41:
         c9:df:16:21:14:0e:b1:77:0a:64:e9:0c:c8:01:bd:fd:a4:ad:
         d3:38:c2:dc:66:f2:71:5e:aa:e1:59:72:c0:51:b4:9d:83:b5:
         0b:aa:9c:19:f6:55:f5:1f:40:a7:ea:fd:54:5d:e1:75:35:43:
         23:90:e7:bc:b5:9b:ef:85:aa:9b:ad:e4:91:fd:6a:a7:6f:af:
         48:06:f8:19:c2:0b:97:7b:bf:ed:78:d6:a5:56:87:b7:fc:89:
         e7:38:f6:5c:e7:a3:1c:b8:7b:df:61:65:a3:85:1a:28:73:ad:
         3e:36:8c:4d:65:6d:4c:2c:5e:9c:f0:cc:47:f6:3e:03:09:6d:
         79:38:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:06 2026 by rpki-client