Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File:                     AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier:          hxThihyj1V7SHxDsQ+8aZ17xuQCmljdSHe8uuKdxf+s=
Subject key identifier:   6A:88:0A:5D:66:13:16:25:48:76:BF:B3:2A:4D:19:13:BD:9F:B3:84
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer:       /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial:       019F194392B9E9CFCBFAA4A8CA0ED74D4D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 16:01:26 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:26 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:26 +0000
Files and hashes:         1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: 5H4yTSiVCGRpo5bBy9z8L7RfWqilE+uNyYI+PcZPpYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:92:b9:e9:cf:cb:fa:a4:a8:ca:0e:d7:4d:4d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
        Validity
            Not Before: Jun 30 16:01:26 2026 GMT
            Not After : Jul  1 16:01:26 2026 GMT
        Subject: CN=6a880a5d661316254876bfb32a4d1913bd9fb384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:28:92:92:54:dc:ca:8f:3a:f8:f4:8f:e8:
                    e1:95:b1:48:22:2f:6c:2b:f6:27:1c:29:d1:b3:0e:
                    91:09:f6:de:f3:65:7c:82:07:c4:84:b2:fe:b5:45:
                    53:9d:32:94:91:f0:85:97:ee:fc:74:b8:17:7f:8b:
                    62:3b:9f:2f:6b:dc:16:f6:8e:99:b5:07:a2:bf:8a:
                    e7:d1:f6:72:c1:0f:25:29:f1:f5:b3:69:c0:99:58:
                    e9:94:72:4d:f6:f1:83:54:88:92:f1:f0:f6:dd:da:
                    b1:5d:de:71:91:a0:f1:00:9f:b3:64:d9:d9:02:8e:
                    7f:15:3b:55:c9:d7:ab:ea:0b:eb:eb:3d:a5:6d:61:
                    22:eb:43:1b:48:3e:64:31:2d:2e:cd:cb:c3:75:05:
                    99:58:ab:8e:e2:b1:43:83:81:f9:c4:01:66:85:10:
                    b1:c1:28:4a:a6:08:f1:78:ee:b3:f9:33:c6:0b:5e:
                    b3:08:b0:b8:9a:dd:9b:b9:b3:f2:53:f8:25:27:ce:
                    bc:da:9f:04:ed:dd:d8:51:5e:57:5b:13:fd:97:e9:
                    3e:e4:a3:23:51:94:f4:f5:c3:c0:86:31:63:1c:f7:
                    57:84:18:89:24:01:94:6f:bb:c2:47:5e:cd:70:9a:
                    0f:76:13:57:6b:d6:11:dc:e5:b2:59:65:c1:cc:a4:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:88:0A:5D:66:13:16:25:48:76:BF:B3:2A:4D:19:13:BD:9F:B3:84
            X509v3 Authority Key Identifier:
                keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:50:8e:ed:17:d8:c0:a1:b5:b3:7d:ea:90:94:84:d2:fe:1a:
         9f:d4:7b:b6:7e:28:1f:c2:ee:e5:61:63:2d:d9:07:9a:35:1f:
         c6:62:6d:7c:77:0a:b3:6a:6b:c6:b5:be:70:7a:dd:c6:1f:67:
         d5:7b:b9:67:81:de:fc:f8:16:62:6c:0f:a7:ee:47:d6:fc:34:
         b4:96:1b:ba:29:4a:50:70:6c:c3:67:e4:c1:4c:48:78:d2:3e:
         23:ff:fb:f5:70:11:50:47:4a:a2:e4:2d:91:26:a6:fe:f9:59:
         9f:c7:8a:ae:00:a5:50:f2:da:7e:e1:7f:b9:a1:96:09:3e:27:
         a3:c8:65:93:c5:4b:8c:5f:1d:b0:04:c4:b6:02:21:57:24:37:
         51:42:b8:81:3f:7e:ef:79:60:69:44:10:56:d8:88:c9:35:f9:
         75:f4:99:50:56:48:cb:1b:67:44:c5:cc:ac:4e:b0:2e:b4:06:
         f5:32:d4:f4:03:a0:85:c7:72:f3:52:c8:ad:e7:14:ff:ac:72:
         13:9f:30:30:c9:76:d9:6f:a5:a5:a2:6b:82:87:da:d3:76:f1:
         a4:9b:e1:ac:1f:9f:49:db:b9:45:c2:88:d2:83:bf:93:08:02:
         4c:38:8b:d5:de:f5:dc:66:a8:c5:2d:d5:f8:32:75:72:9d:71:
         4d:1e:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:29 2026 by rpki-client