Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File:                     AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier:          TrJF47hvXtrQhhP4hlinL7d2ijX2dDq7T4MT03uRvBk=
Subject key identifier:   2E:DC:0C:19:9E:85:46:9A:3C:71:AF:C7:F1:D1:C3:17:79:84:19:F1
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer:       /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial:       019E2F973EA056D187F309EFD95A26BFB32B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number:          162B
Signing time:             Sat 16 May 2026 07:01:41 +0000
Manifest this update:     Sat 16 May 2026 07:01:41 +0000
Manifest next update:     Sun 17 May 2026 07:01:41 +0000
Files and hashes:         1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: uQlTRBYBc6JusGrrTD3ocfqPTpfZWk4NPMgn7HaD+ek=)
                          2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
                          3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:3e:a0:56:d1:87:f3:09:ef:d9:5a:26:bf:b3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
        Validity
            Not Before: May 16 07:01:41 2026 GMT
            Not After : May 17 07:01:41 2026 GMT
        Subject: CN=2edc0c199e85469a3c71afc7f1d1c317798419f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:fb:92:88:75:c4:3b:49:01:68:e1:e7:3f:
                    cd:c4:cf:c5:6a:bf:0d:5f:75:4b:61:83:05:cc:e4:
                    b4:7b:cf:f6:df:b6:6d:a9:44:25:6c:66:86:cd:c1:
                    26:f1:50:48:1a:e6:ec:ce:f5:3a:56:b6:1c:72:c2:
                    25:1e:94:42:d0:c8:1e:fc:ab:2c:50:a6:1b:28:56:
                    d8:28:5a:d9:11:ea:06:b0:98:d8:80:46:82:3a:10:
                    45:73:93:5b:4a:77:a8:5b:71:22:71:eb:61:39:bd:
                    32:0f:5e:77:ec:86:18:df:e0:30:96:49:e1:b0:3d:
                    c5:c7:b0:ff:09:b6:2a:ef:88:e1:8c:fa:d5:b4:a0:
                    98:62:ba:92:c4:4b:68:8f:7b:09:86:41:cd:9d:34:
                    de:b0:3c:e4:8f:f1:de:ae:01:b6:c3:94:13:3f:32:
                    be:df:27:b3:b4:1f:7a:f0:dd:1a:21:3b:7c:50:37:
                    c3:44:89:14:cc:20:f7:cb:90:16:1f:86:eb:1c:fd:
                    35:9d:6f:d0:11:23:b5:f5:b7:e9:5f:b5:52:f1:58:
                    29:a7:3c:e7:7c:26:99:90:59:28:cb:8d:5b:5c:c6:
                    ac:9d:e5:a2:de:f1:b2:8f:aa:1f:62:d6:59:50:17:
                    ff:8e:b7:bd:d9:20:1f:2e:dc:b8:40:d8:fd:d9:72:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DC:0C:19:9E:85:46:9A:3C:71:AF:C7:F1:D1:C3:17:79:84:19:F1
            X509v3 Authority Key Identifier:
                keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:9b:d2:32:74:77:dc:86:0a:99:01:0c:09:32:27:67:9d:
         d7:e6:32:dc:c6:35:af:b2:76:3a:89:00:35:cb:52:51:e3:73:
         d0:a0:e3:fb:6d:4c:04:8b:8d:bd:3d:61:19:c4:af:ef:30:16:
         73:c9:75:b8:42:de:11:15:c6:49:98:c4:9f:4f:07:6b:2d:a6:
         91:94:51:af:45:e2:43:ac:bd:e7:5d:2f:fc:3c:69:a0:f3:c1:
         47:c2:97:0e:4a:41:2a:0c:80:88:4c:18:3c:02:a5:86:61:fa:
         06:3a:58:56:09:e7:3b:e7:b9:06:ba:f0:75:97:af:f4:4c:b9:
         eb:72:75:88:93:42:2b:cf:26:72:e9:26:e6:0c:59:0e:1e:95:
         6a:86:61:20:46:06:59:63:4d:74:cd:ea:df:e4:45:e0:67:f9:
         65:81:7a:e3:a5:0d:f2:0c:ec:75:4e:3e:ce:24:e0:b7:72:2b:
         3c:11:d9:33:3f:dc:40:ed:c4:c7:29:15:ef:c1:5e:e5:12:ec:
         55:c3:cb:27:9f:52:28:52:6a:85:42:08:b3:80:9c:94:34:c8:
         05:29:0d:2e:65:ca:80:d4:b8:1a:37:0e:04:3b:de:32:55:f9:
         da:d7:32:c1:65:72:70:6f:82:9e:1f:4c:d9:70:50:fc:83:ef:
         a9:52:a5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlz6gVtGH8wnv2Vomv7MrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjYwNTE2MDcwMTQxWhcNMjYwNTE3MDcwMTQxWjAzMTEwLwYDVQQD
EygyZWRjMGMxOTllODU0NjlhM2M3MWFmYzdmMWQxYzMxNzc5ODQxOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e77koh1xDtJAWjh5z/NxM/Far8N
X3VLYYMFzOS0e8/237ZtqUQlbGaGzcEm8VBIGubszvU6VrYccsIlHpRC0Mge/Kss
UKYbKFbYKFrZEeoGsJjYgEaCOhBFc5NbSneoW3EicethOb0yD1537IYY3+Awlknh
sD3Fx7D/CbYq74jhjPrVtKCYYrqSxEtoj3sJhkHNnTTesDzkj/HergG2w5QTPzK+
3yeztB968N0aITt8UDfDRIkUzCD3y5AWH4brHP01nW/QESO19bfpX7VS8Vgppzzn
fCaZkFkoy41bXMasneWi3vGyj6ofYtZZUBf/jre92SAfLty4QNj92XLOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7cDBmehUaaPHGvx/HRwxd5hBnxMB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPqb0jJ0
d9yGCpkBDAkyJ2ed1+Yy3MY1r7J2OokANctSUeNz0KDj+21MBIuNvT1hGcSv7zAW
c8l1uELeERXGSZjEn08Hay2mkZRRr0XiQ6y9510v/DxpoPPBR8KXDkpBKgyAiEwY
PAKlhmH6BjpYVgnnO+e5BrrwdZev9Ey563J1iJNCK88mcukm5gxZDh6VaoZhIEYG
WWNNdM3q3+RF4Gf5ZYF646UN8gzsdU4+ziTgt3IrPBHZMz/cQO3ExykV78Fe5RLs
VcPLJ59SKFJqhUIIs4CclDTIBSkNLmXKgNS4GjcOBDveMlX52tcywWVycG+Cnh9M
2XBQ/IPvqVKliw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:37:30 2026 by rpki-client