Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File:                     AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier:          wFZg9kynBImKZZpPnnJbVBhF7tVLRXYbMQin0nd4aZM=
Subject key identifier:   6E:07:4B:3F:EA:6D:BE:06:BE:36:8A:8F:C5:B8:2B:61:1D:6F:3A:21
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer:       /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial:       01A00100F82AEF274C3654E2C9A096640E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 16:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:35 +0000
Files and hashes:         1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: FVQjQNid+BxmM7Q2v5jjKdBIk5RtYUnBvae6ds88+VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:00:f8:2a:ef:27:4c:36:54:e2:c9:a0:96:64:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
        Validity
            Not Before: Aug 14 16:00:35 2026 GMT
            Not After : Aug 15 16:00:35 2026 GMT
        Subject: CN=6e074b3fea6dbe06be368a8fc5b82b611d6f3a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:f0:79:09:41:fb:f2:54:0f:7f:85:b8:63:
                    0c:14:05:c7:05:c9:6b:9b:07:51:93:0e:6c:60:80:
                    e2:e9:03:5d:ab:c0:86:ec:af:56:38:55:16:89:3e:
                    8a:e6:72:fa:0e:d9:81:cd:c5:10:72:38:4d:c0:12:
                    10:8f:38:8a:08:af:5b:1d:f2:00:5d:5f:7a:3e:aa:
                    ed:95:f2:85:47:08:73:0d:11:7e:66:9d:70:01:eb:
                    b5:8d:df:fc:73:24:58:dd:24:b2:c2:5a:8b:f2:ca:
                    f5:15:c4:ff:eb:ef:b7:89:47:fe:da:a9:e1:13:40:
                    ae:ed:13:86:23:a4:ab:c6:4c:f0:7e:dd:ac:6e:05:
                    67:67:33:0d:86:84:cf:36:ce:fd:1d:df:85:1e:7a:
                    85:69:43:dd:30:f3:66:d4:bf:3a:a2:03:61:48:93:
                    98:eb:24:1a:e0:f8:92:f2:82:c4:46:58:c2:b0:fe:
                    2e:cf:fa:ee:c0:e5:d4:f2:1a:73:90:59:e7:98:3e:
                    c3:bc:f3:89:46:c5:e4:61:be:98:49:c2:eb:c4:2c:
                    64:08:4d:5a:03:af:23:1d:48:f2:70:8f:e9:e4:52:
                    4f:32:6c:2a:39:a6:ba:d8:47:cf:0a:0c:da:36:3f:
                    34:be:77:14:d9:32:51:5e:e4:1f:4f:8e:df:9b:64:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:4B:3F:EA:6D:BE:06:BE:36:8A:8F:C5:B8:2B:61:1D:6F:3A:21
            X509v3 Authority Key Identifier:
                keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:56:a5:1f:51:49:96:07:39:5e:37:3b:5c:a5:cf:fc:fe:
         04:79:99:6f:9a:7b:61:2d:03:28:10:94:b3:76:ee:49:cf:c2:
         ee:62:86:5f:75:a2:37:c8:53:80:82:fc:7f:94:1b:8c:51:05:
         9f:aa:ec:c1:99:f9:fb:a0:de:91:9e:81:69:04:e4:ea:9a:5a:
         a6:2c:ac:b2:13:71:8b:c9:88:6f:9b:b6:c4:c9:ea:7c:0d:de:
         96:9d:87:59:b2:1a:82:8c:d8:83:fe:7b:45:ce:e2:b7:b9:3e:
         38:c9:6d:e2:35:0a:80:07:80:ed:5a:92:72:03:b4:5d:e7:0e:
         60:89:d1:24:7c:28:c4:5a:77:84:41:a1:a1:86:62:2b:97:22:
         2c:b8:72:59:d0:0e:b3:9c:f5:ff:cb:e7:b4:d9:ee:51:ac:f3:
         06:96:b9:e3:9e:8d:2c:e0:20:51:8c:22:db:16:6e:6e:af:ff:
         db:49:35:db:96:94:27:cc:da:c0:0f:64:72:6b:7c:00:3a:16:
         bf:65:2a:4f:7b:aa:e3:ee:4e:17:92:24:39:90:97:27:a0:f2:
         cb:8d:63:e5:ad:97:20:f3:4f:66:6b:95:f8:c5:27:7a:d8:7d:
         af:bd:36:3c:27:24:7a:06:0d:13:8f:f8:a9:af:da:23:50:1b:
         04:d8:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:05 2026 by rpki-client