Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
File:                     p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json)
Hash identifier:          GwwaWklfyAqnj5dHHZQ+fLrpxqFrmAa3U00BIpdjL7k=
Subject key identifier:   0E:33:D0:62:E1:0C:87:0B:FC:DF:46:FC:AE:45:EA:89:BA:67:F1:93
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Certificate issuer:       /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial:       019DA29CC0DC8FD89015BEC762A751A3413E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
Manifest number:          0369
Signing time:             Sat 18 Apr 2026 22:01:15 +0000
Manifest this update:     Sat 18 Apr 2026 22:01:15 +0000
Manifest next update:     Sun 19 Apr 2026 22:01:15 +0000
Files and hashes:         1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=)
                          2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: gdfPSIpG7S96HdV+BTNa8a7312gNfdwT4QgRGVKBAgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:c0:dc:8f:d8:90:15:be:c7:62:a7:51:a3:41:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750263823402b83c11c5014d32666dcab111447
        Validity
            Not Before: Apr 18 22:01:15 2026 GMT
            Not After : Apr 19 22:01:15 2026 GMT
        Subject: CN=0e33d062e10c870bfcdf46fcae45ea89ba67f193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:99:5b:e0:2a:8e:38:e4:a2:4f:56:0c:c6:
                    97:88:0d:14:71:8a:c4:09:55:86:ec:32:9b:8d:c3:
                    1c:86:a4:60:b1:54:d0:32:46:ab:b8:6c:fd:31:62:
                    a3:57:21:ed:da:f7:07:da:f6:3b:39:e9:59:b1:e8:
                    02:ef:7c:59:b3:92:f6:70:dc:37:35:2b:20:bb:6f:
                    4d:69:e8:f8:e0:28:9d:9a:f2:35:8b:65:2d:94:61:
                    bb:08:88:ec:e9:1e:8b:c1:1b:c5:f7:08:b9:99:ad:
                    70:d4:bf:6a:49:aa:5d:12:58:bf:58:97:c7:75:65:
                    49:5f:86:9e:94:44:dd:7a:57:87:70:35:ef:5c:d7:
                    41:d5:0f:3b:60:bb:0f:f8:d5:fe:ca:82:63:51:e4:
                    a7:3f:0f:af:15:bd:17:f1:23:e1:76:71:71:f0:49:
                    1f:82:87:d1:ab:7a:68:56:59:7f:dd:fd:38:89:c4:
                    13:80:83:36:06:9e:8f:a2:db:c8:90:05:c6:ef:8d:
                    cf:14:7c:47:c0:4e:7d:f4:a4:41:19:c1:42:c2:d8:
                    b5:40:54:69:67:f9:0a:1f:56:a5:89:a0:92:5c:11:
                    3e:e2:61:dd:82:70:a5:84:c3:ee:72:7f:b8:4d:cd:
                    0e:ea:94:18:63:03:ed:5d:3f:8c:af:16:ee:94:b8:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:D0:62:E1:0C:87:0B:FC:DF:46:FC:AE:45:EA:89:BA:67:F1:93
            X509v3 Authority Key Identifier:
                keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:53:ca:88:1d:35:dc:39:6a:fc:fb:23:df:ca:f1:85:21:7d:
         42:7f:98:c2:5b:69:58:34:7d:cf:45:87:8b:ff:c8:77:89:31:
         ad:3a:9f:b8:ea:86:a3:32:e0:63:9f:b7:26:14:9a:90:61:e5:
         ca:fe:88:a5:d9:b8:42:be:a4:8d:70:57:e5:5a:17:73:ec:b1:
         5f:a1:48:0d:ba:1b:64:5d:71:2c:62:e3:f4:49:6d:9f:b8:bb:
         88:ac:e7:2c:b5:1b:9d:e1:d7:f8:af:4f:ff:0b:36:fd:35:bb:
         a7:c3:5f:bc:81:9e:f9:22:27:06:f7:07:10:a7:69:5c:f3:b8:
         e9:f0:b5:1b:b3:c7:63:60:75:5a:62:1b:71:f6:0c:6c:99:59:
         f1:14:f7:41:a2:54:4c:9d:2a:5e:47:c1:5b:5a:8e:11:4f:3c:
         8d:ed:eb:92:af:0b:a1:e7:3b:49:9d:d9:55:30:b9:f4:d9:6a:
         65:01:b4:38:3e:10:0f:09:10:97:3c:b7:01:46:16:69:0c:bd:
         d1:ab:76:87:a2:ed:fa:68:3e:cb:8f:88:96:44:02:3f:8a:da:
         6b:51:a3:82:14:73:b2:8c:0b:4b:4b:27:a4:76:0c:4b:c3:3f:
         e9:9f:ca:3c:ff:88:ab:23:18:af:5b:2c:5e:29:10:29:8c:31:
         84:45:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:53:44 2026 by rpki-client