Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
File:                     atlkHKRH6y4wxdtRkcFrzUdyids.mft (raw, json)
Hash identifier:          uL8noaOjixLx2MS0ZcRScjNJOxuYh5DZEIp48MYTGvo=
Subject key identifier:   E8:A1:3F:E5:98:48:47:1A:D9:61:8A:9B:99:91:58:46:22:71:A7:38
Authority key identifier: 6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB
Certificate issuer:       /CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
Certificate serial:       019D3941C154F977FF24472AF95889062408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
Manifest number:          17E4
Signing time:             Sun 29 Mar 2026 11:01:43 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:43 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:43 +0000
Files and hashes:         1: SaVujfTiEW7eIhJiwtzGISk3J7c.roa (hash: ojyOqfyhqMrakPrBeTa1q21z4BPjR20mz69yF35BNRM=)
                          2: atlkHKRH6y4wxdtRkcFrzUdyids.crl (hash: v67Erm/NEeRb+tTlF0WmUKPZU9gYggVHEULVBTpzZwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:c1:54:f9:77:ff:24:47:2a:f9:58:89:06:24:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad9641ca447eb2e30c5db5191c16bcd477289db
        Validity
            Not Before: Mar 29 11:01:43 2026 GMT
            Not After : Mar 30 11:01:43 2026 GMT
        Subject: CN=e8a13fe59848471ad9618a9b999158462271a738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:c6:3e:ff:66:22:df:92:6d:32:c4:93:2a:
                    60:f7:19:8b:74:fb:d8:32:6a:04:5e:55:7b:5d:ab:
                    be:6e:27:f2:d0:19:45:b5:2c:71:38:f9:f3:0c:3f:
                    b2:bf:47:e5:42:e1:79:9c:40:74:99:9e:13:d6:50:
                    d7:98:00:60:d6:aa:c1:e1:6f:78:24:02:03:b9:5c:
                    c5:b8:67:a6:a5:e4:ea:90:67:53:dd:29:fd:36:0e:
                    d9:cf:ac:1b:d5:ab:de:7b:c1:9a:8e:e7:fb:c3:0d:
                    91:c3:81:2c:d8:85:5d:14:27:ef:85:37:27:0d:1c:
                    b8:fd:0b:ae:9d:06:69:d8:b1:df:e5:be:d1:a2:ed:
                    68:00:71:32:a8:f5:b3:c4:4a:22:5c:94:16:ac:a3:
                    9b:0a:63:9d:b7:74:11:45:b8:38:31:5a:74:de:1d:
                    36:40:94:f4:af:87:d0:69:87:2f:a3:5d:1e:10:9e:
                    8a:ea:fb:70:30:4e:3e:ba:74:31:9b:6b:70:83:da:
                    f7:9c:84:18:59:de:be:65:2f:45:c8:dc:fa:a8:79:
                    62:0a:ac:5f:c5:dc:d5:10:49:f1:55:22:43:db:01:
                    e0:50:32:87:a3:e1:b4:88:d6:2c:d2:05:66:67:02:
                    2c:f9:89:f3:42:6b:16:6f:6f:1b:e0:40:37:50:67:
                    bd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:3F:E5:98:48:47:1A:D9:61:8A:9B:99:91:58:46:22:71:A7:38
            X509v3 Authority Key Identifier:
                keyid:6A:D9:64:1C:A4:47:EB:2E:30:C5:DB:51:91:C1:6B:CD:47:72:89:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atlkHKRH6y4wxdtRkcFrzUdyids.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d1664b-a315-4e2e-80bf-311c2e6eeb46/1/atlkHKRH6y4wxdtRkcFrzUdyids.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:c9:8f:bf:4c:7f:77:7c:5f:4e:48:41:f3:ca:e8:86:2e:
         cd:c8:88:ef:db:13:d8:b6:42:46:aa:46:fc:d4:5e:42:77:63:
         10:06:60:c9:27:02:f6:bd:96:7e:7f:1b:24:32:de:45:71:2d:
         cf:41:85:51:82:7c:f9:fb:76:85:11:29:e1:ce:2e:a5:2c:25:
         cf:d2:70:0e:c0:a7:22:41:67:5d:93:f3:02:d2:9c:65:b2:a2:
         3f:f8:da:e7:18:fa:d8:60:b2:a8:ca:8b:20:7d:4d:ef:4b:1c:
         67:96:a1:be:ae:43:2a:14:7e:f9:b8:94:4f:4a:9a:46:4d:54:
         d1:10:2f:49:f6:2b:cf:4c:9a:14:fa:bb:55:33:2b:2d:32:ab:
         8c:8d:b1:27:c5:05:9a:10:f3:94:00:89:1e:8e:54:02:de:41:
         ae:d3:42:1b:0d:d0:34:25:ff:8a:7e:75:a4:36:13:8d:ae:00:
         41:7c:b4:c9:df:99:db:ed:55:93:e9:6e:2c:76:08:0b:e2:6e:
         93:2d:8c:39:fb:ee:22:1d:22:ab:c3:b2:cc:3c:c6:b7:01:3f:
         62:15:69:a4:35:29:b6:e1:9c:91:72:03:7f:24:e2:88:4c:1b:
         81:12:7e:82:36:f3:38:cc:67:a9:11:7d:a0:6d:8d:43:97:8e:
         74:9b:eb:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QcFU+Xf/JEcq+ViJBiQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDk2NDFjYTQ0N2ViMmUzMGM1ZGI1MTkxYzE2YmNkNDc3
Mjg5ZGIwHhcNMjYwMzI5MTEwMTQzWhcNMjYwMzMwMTEwMTQzWjAzMTEwLwYDVQQD
EyhlOGExM2ZlNTk4NDg0NzFhZDk2MThhOWI5OTkxNTg0NjIyNzFhNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8HGPv9mIt+SbTLEkypg9xmLdPvY
MmoEXlV7Xau+bify0BlFtSxxOPnzDD+yv0flQuF5nEB0mZ4T1lDXmABg1qrB4W94
JAIDuVzFuGempeTqkGdT3Sn9Ng7Zz6wb1avee8Gajuf7ww2Rw4Es2IVdFCfvhTcn
DRy4/QuunQZp2LHf5b7Rou1oAHEyqPWzxEoiXJQWrKObCmOdt3QRRbg4MVp03h02
QJT0r4fQaYcvo10eEJ6K6vtwME4+unQxm2twg9r3nIQYWd6+ZS9FyNz6qHliCqxf
xdzVEEnxVSJD2wHgUDKHo+G0iNYs0gVmZwIs+YnzQmsWb28b4EA3UGe9wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOihP+WYSEca2WGKm5mRWEYicac4MB8GA1UdIwQY
MBaAFGrZZBykR+suMMXbUZHBa81HconbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRsa0hLUkg2eTR3eGR0UmtjRnJ6VWR5aWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kMTY2NGItYTMxNS00ZTJlLTgwYmYt
MzExYzJlNmVlYjQ2LzEvYXRsa0hLUkg2eTR3eGR0UmtjRnJ6VWR5aWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kMTY2NGItYTMxNS00ZTJlLTgwYmYtMzExYzJlNmVlYjQ2
LzEvYXRsa0hLUkg2eTR3eGR0UmtjRnJ6VWR5aWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYHJj79M
f3d8X05IQfPK6IYuzciI79sT2LZCRqpG/NReQndjEAZgyScC9r2Wfn8bJDLeRXEt
z0GFUYJ8+ft2hREp4c4upSwlz9JwDsCnIkFnXZPzAtKcZbKiP/ja5xj62GCyqMqL
IH1N70scZ5ahvq5DKhR++biUT0qaRk1U0RAvSfYrz0yaFPq7VTMrLTKrjI2xJ8UF
mhDzlACJHo5UAt5BrtNCGw3QNCX/in51pDYTja4AQXy0yd+Z2+1Vk+luLHYIC+Ju
ky2MOfvuIh0iq8OyzDzGtwE/YhVppDUptuGckXIDfyTiiEwbgRJ+gjbzOMxnqRF9
oG2NQ5eOdJvr7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:41 2026 by rpki-client