Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File:                     02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier:          FF/k2unrGGA2xtNZGkxSPsFDhQ0SLZgoWlBEClgXBh0=
Subject key identifier:   2C:B8:0E:CF:CC:93:51:85:BC:A2:21:7C:AD:30:58:35:4C:E3:4F:D0
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       01A1822BB9DE51AFFFBC176DD576C9F6656F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number:          1ADA
Signing time:             Wed 28 Oct 2026 11:01:05 +0000
Manifest this update:     Wed 28 Oct 2026 11:01:05 +0000
Manifest next update:     Thu 29 Oct 2026 11:01:05 +0000
Files and hashes:         1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: Onu9/Zlqv1/y7qXntDhCJ7/oCsuk+YqSJgabIh0ik4U=)
                          2: 3KHb4LyjMb7GTQzfARliH9VGTGI.roa (hash: u+uDt3VaqBj8WsuUzznZC8YIOei+XhXe+h41yVBm6d0=)
                          3: 461xArYNzHoC1nVBFiDZR5u9vDk.roa (hash: 6q2TnpiTZXieMRIqi2VPrqkjbo1r/JTnD7UrhdGGs1c=)
                          4: 7uRg_T_oiggw4J55UfjOrhQbRRk.roa (hash: Zvntcukjv/uv2VGWPB49suxGMeRDIq3Yqb/Srhl+YdA=)
                          5: 8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa (hash: bgI/tjUhh3faNiwUz0lFyl3PrQvPxHShPGJ4WWbVK9U=)
                          6: 9uaqn-0k0V9eihEbl_1qKZiHOsI.roa (hash: lX7dZ9C+1SMN2ATw1cyM18wsI8aOAPBbMUKXBKlIvtI=)
                          7: EIEUE3ETjR42j8AzPFmGaM3QPUA.roa (hash: dke7pHoGAOXmMbmMcGhOKmr8OHRiGFf0Ci92knKXCs8=)
                          8: UPuwaOxvAn_WKqweTSAjA0k5KMc.roa (hash: 1l216jqafFRv6rwVNGY7SG/c/eKsgMl5lwtfNPrMUB4=)
                          9: lQGqNWtAEeW1v0ZoaLS6zM2cAKg.roa (hash: CWDgSSnIsyWB1Z7WNe/hpRHqTHPu2VcJNOHIRuOk0WE=)
                          10: zgJ_G-9np5VpQcmCxgQMVjklSkQ.roa (hash: 5Tc0Gy3iK8Ur64lX58sfY70FGviygZFZEFyBRuvFACw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:2b:b9:de:51:af:ff:bc:17:6d:d5:76:c9:f6:65:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Oct 28 11:01:05 2026 GMT
            Not After : Oct 29 11:01:05 2026 GMT
        Subject: CN=2cb80ecfcc935185bca2217cad3058354ce34fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1e:01:37:e6:29:cd:18:eb:d3:00:cf:6f:cd:
                    2d:bf:9f:1c:79:96:fc:4e:ef:41:7a:7f:f8:60:11:
                    72:10:d4:25:5c:d9:4c:fb:60:8d:b0:5f:e4:87:85:
                    37:1b:0a:c7:ca:a0:df:fe:3c:72:c0:3c:a9:c2:d9:
                    8f:84:cb:c8:ab:d0:8a:cb:fb:94:f0:17:6f:50:93:
                    81:b3:78:8a:3f:a0:70:29:4b:59:6e:1a:e5:64:c8:
                    1a:28:38:b4:6e:c3:c7:0d:9b:b2:26:0c:f7:4f:8c:
                    52:43:5d:0c:3a:75:9c:db:51:15:cf:46:df:33:66:
                    55:f0:8e:f6:42:f2:de:4d:06:81:35:d2:29:02:1c:
                    d2:2b:58:9c:77:56:0f:63:90:fc:72:27:79:5c:7c:
                    c3:f2:b0:d6:08:42:70:f8:01:52:e7:a7:a3:52:49:
                    0d:4d:66:1d:65:26:d3:bc:d0:2a:e7:76:e4:74:41:
                    e0:a1:35:4e:e0:39:9e:f7:02:71:07:28:29:3e:a1:
                    c0:2f:44:0c:53:0b:60:6e:86:1c:0d:a6:c9:3a:85:
                    ba:40:b5:7c:e3:97:28:7d:39:6a:37:e1:ce:44:29:
                    8f:b7:bd:98:95:10:22:d1:7c:5e:85:5f:ef:86:ab:
                    ba:35:48:3d:69:1f:a1:86:ec:1a:f3:db:69:44:70:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:0E:CF:CC:93:51:85:BC:A2:21:7C:AD:30:58:35:4C:E3:4F:D0
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:26:e9:ef:58:72:bc:c3:5f:78:3e:0f:d4:61:41:5f:ba:
         88:0c:83:1a:db:82:af:47:96:5a:4a:8c:70:40:05:c8:be:a5:
         24:ce:b5:6c:66:4f:22:eb:14:1e:ba:97:39:11:7f:5f:9f:c4:
         d3:9c:ed:70:fa:c3:d9:79:3a:15:34:ba:af:3c:22:68:1e:fd:
         a7:63:68:1b:46:e2:26:6f:b7:c2:b8:5d:ec:95:a8:02:83:d9:
         0f:85:11:f6:d9:d3:d4:51:ed:c7:ef:78:8c:ae:16:ba:1a:ee:
         d1:a5:1a:eb:21:44:30:fe:63:44:6e:97:69:91:f7:d3:0c:a0:
         ab:63:8c:e0:84:3f:de:60:07:6e:fd:4c:4e:ab:35:52:55:06:
         85:fc:b9:b8:a7:e2:c1:00:b6:9d:19:9b:98:c6:37:7b:04:96:
         e3:a6:eb:59:64:dd:d7:5e:a5:b3:ad:67:42:a5:00:25:fb:50:
         3f:57:7b:b3:a1:74:c9:84:dc:e6:6f:12:0c:35:2c:da:d2:92:
         28:e6:75:78:b1:9f:e5:11:7d:e1:2b:c2:3c:13:fe:7a:8c:4d:
         b8:e5:b1:fb:1d:01:fd:ae:f0:8c:f6:ee:62:7b:74:ff:19:8d:
         a2:7e:e2:0f:5c:76:33:e7:7e:fc:4c:3e:79:d6:89:ea:62:96:
         e3:64:f2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:44:40 2026 by rpki-client