Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
File:                     AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json)
Hash identifier:          Nz1D2PVJ7OE9za68+IhVHG8/FhiauoLmQ0Rbk9tnKnQ=
Subject key identifier:   D1:49:78:A7:91:7C:59:A3:DF:ED:AA:7A:A2:6C:8E:A5:C6:FF:22:EF
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Certificate issuer:       /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial:       019E30720012D071E90587C4EC99184439E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:00:37 +0000
Manifest this update:     Sat 16 May 2026 11:00:37 +0000
Manifest next update:     Sun 17 May 2026 11:00:37 +0000
Files and hashes:         1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=)
                          2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: Ul778HbSzFokj7QjbfhoqmAuuAOpd405ydx+SDM85JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:00:12:d0:71:e9:05:87:c4:ec:99:18:44:39:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
        Validity
            Not Before: May 16 11:00:37 2026 GMT
            Not After : May 17 11:00:37 2026 GMT
        Subject: CN=d14978a7917c59a3dfedaa7aa26c8ea5c6ff22ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:76:bb:d4:90:f0:e5:3d:1a:de:bb:cc:66:
                    ff:88:49:7f:b9:ce:c2:80:0b:dd:e8:a1:b2:8a:42:
                    01:52:57:09:3e:32:58:e7:5c:21:1c:cd:4f:f5:b9:
                    de:45:72:0d:19:94:1b:46:90:f1:ca:70:3b:8c:ca:
                    b9:1b:e2:c7:cd:c9:9e:a6:45:4a:a1:a7:35:81:96:
                    9d:d0:22:55:3f:06:48:47:c3:d8:e5:3f:00:0f:ce:
                    96:0f:98:35:49:65:c5:76:4c:2b:05:29:f3:05:eb:
                    b4:13:5a:00:c3:e4:ad:57:5a:13:9e:df:f3:28:32:
                    b2:18:4f:29:91:85:bb:02:6b:1b:b1:3a:17:b3:6b:
                    52:56:f1:02:4a:0a:84:b3:44:8b:70:d0:74:16:86:
                    bf:84:81:91:34:b1:a7:0e:3b:36:05:0b:9b:4b:a2:
                    93:08:62:8a:7a:1a:54:a6:a0:53:51:8a:b2:1b:7d:
                    e3:e1:67:0d:e3:bb:fc:c1:17:21:5b:e6:30:a2:1c:
                    6c:6b:23:39:9b:88:61:59:27:57:42:28:b4:db:cc:
                    24:d9:14:7a:73:14:78:3c:c1:f3:d1:e1:aa:46:f8:
                    91:81:6a:8c:f4:b4:ed:36:41:99:88:f2:4a:9d:34:
                    6d:86:c2:24:ea:5f:e0:40:d0:35:51:e3:42:a9:ac:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:78:A7:91:7C:59:A3:DF:ED:AA:7A:A2:6C:8E:A5:C6:FF:22:EF
            X509v3 Authority Key Identifier:
                keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:e2:5e:89:ae:a9:08:8e:cd:8e:9b:8a:1d:d7:4c:b7:6d:
         1d:31:bc:57:a7:7c:76:32:2c:87:ae:de:ef:e9:bf:24:3b:0e:
         55:d5:8b:ae:31:0e:1a:f7:93:4a:2d:2b:e3:e3:81:99:bd:51:
         c4:e5:c8:af:93:05:bc:76:93:61:fe:8c:54:fa:9a:25:bc:22:
         5e:fb:cf:93:24:73:9d:28:53:33:7b:76:6f:f6:5e:0c:a1:c2:
         34:18:a5:03:e5:03:58:a2:62:85:2c:91:cb:9f:3d:a0:b7:e9:
         10:60:42:ff:07:49:b1:f2:53:48:0d:38:65:0e:24:8d:05:2c:
         aa:cc:61:2f:aa:79:56:cd:03:ac:df:3e:77:b8:50:14:64:b8:
         53:e3:0a:cc:24:b1:e7:49:a6:09:56:26:2d:e7:53:8e:ce:59:
         bc:6b:bb:9f:f7:89:20:ac:cd:10:eb:c0:b4:a8:c2:51:59:17:
         71:e7:d4:2d:a2:6f:96:72:e5:b2:65:b2:17:6b:47:4d:90:2e:
         b8:fd:96:36:ad:10:f2:ff:e3:4f:09:3c:33:a7:90:39:08:a4:
         a6:03:41:a3:20:cb:ef:5c:55:cb:01:2d:33:42:0f:79:da:2a:
         71:20:32:99:87:2e:4c:05:3c:29:57:3f:1c:36:cb:fa:af:b1:
         1d:c7:48:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:16 2026 by rpki-client