Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          jVD2kqoq63sZsZjY7Tzics1TWC66zx5AVWum/+5mfRE=
Subject key identifier:   0C:48:6B:B6:9D:03:4F:81:6E:B1:C4:32:28:1E:1B:03:C3:D6:90:84
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       019D38D2A58E3A8A3CFDD06A15007E2C5F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          0573
Signing time:             Sun 29 Mar 2026 09:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:22 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: fAYYmCiIyA3DYUcqsEECwZsT3pd+eSm/mmVXexbaXvw=)
                          2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:a5:8e:3a:8a:3c:fd:d0:6a:15:00:7e:2c:5f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: Mar 29 09:00:22 2026 GMT
            Not After : Mar 30 09:00:22 2026 GMT
        Subject: CN=0c486bb69d034f816eb1c432281e1b03c3d69084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:ef:97:2c:4c:24:f3:96:75:63:01:1e:65:
                    d3:99:be:1b:30:35:4d:d2:73:59:ed:14:ab:14:91:
                    d3:6c:6d:b1:f5:5f:e8:0e:ce:e1:4a:a5:9a:83:80:
                    c6:ad:95:a1:e9:f7:7e:a8:c3:1e:e9:a5:f7:fb:92:
                    ec:90:e0:ca:30:b4:46:b9:33:ab:1f:4b:17:7a:a9:
                    4d:15:55:3a:45:e5:d9:46:e2:ac:4d:c6:1a:8d:3b:
                    f8:02:0f:d6:f6:de:69:71:ed:da:1e:30:6a:31:67:
                    7e:2b:d3:ac:2e:69:4b:6a:86:27:e9:1a:6b:06:3e:
                    ac:83:56:ae:a4:4b:74:e2:52:b3:4c:71:5c:88:69:
                    1e:81:4e:c9:cc:6f:73:b6:5a:44:ce:46:ad:c9:48:
                    33:4c:fe:66:66:40:53:7d:54:8d:e3:19:08:04:b8:
                    67:9a:62:bd:32:ce:95:87:5b:58:82:ad:76:a8:66:
                    9b:5e:dc:5b:80:b2:eb:38:f8:3b:31:21:68:e4:73:
                    b4:01:5c:3b:97:09:7f:55:14:ba:3d:0b:5d:90:1d:
                    27:c0:49:61:35:6e:43:79:9d:96:b8:f3:7c:8a:ad:
                    b5:7b:c3:38:38:83:7f:8f:29:ef:92:c0:b2:cd:1a:
                    3b:bf:71:01:a8:3a:cf:cd:22:58:aa:d9:9b:b0:a0:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:48:6B:B6:9D:03:4F:81:6E:B1:C4:32:28:1E:1B:03:C3:D6:90:84
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:8d:3e:2a:8a:c5:74:15:1a:ef:d6:4b:96:91:c3:de:09:
         16:0b:36:f2:52:61:4d:10:72:f8:9d:1d:82:fa:f1:e4:00:62:
         2e:d7:73:08:17:6d:eb:35:bf:9c:1a:ef:c2:ea:82:a0:7f:a8:
         07:da:92:b0:46:e6:7e:30:9c:e7:62:69:ac:f4:02:ae:ba:74:
         5e:54:f4:84:b0:c8:e4:bd:8b:f7:6a:8e:ad:2d:c8:ce:53:30:
         db:91:1b:66:24:49:36:0f:6d:45:79:0e:e6:40:72:ff:b1:f3:
         45:ea:d0:0c:45:52:27:29:86:4d:25:af:bf:8e:ac:bc:87:c0:
         2f:e3:e7:cf:7c:27:f6:2f:58:14:72:77:eb:c8:19:4d:f9:94:
         29:8b:17:51:f0:85:a0:3b:8e:70:ff:e2:21:c2:3e:fc:ab:08:
         2f:e4:7f:be:94:5b:b6:13:64:0c:48:02:e3:6f:ba:1d:ae:ea:
         58:09:0f:06:35:f1:b8:33:2c:68:73:30:65:40:09:c8:22:83:
         84:9f:b2:8a:d8:88:70:8b:44:0f:9d:f8:06:69:4c:5f:28:6f:
         23:df:66:ab:44:cd:09:8f:56:4f:c8:be:e5:8a:63:32:f8:60:
         05:9e:04:3b:35:c1:c6:d0:49:3d:d1:98:8c:3a:e0:c3:8f:17:
         a3:8c:5b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040qWOOoo8/dBqFQB+LF8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx
MjYwMTgwHhcNMjYwMzI5MDkwMDIyWhcNMjYwMzMwMDkwMDIyWjAzMTEwLwYDVQQD
EygwYzQ4NmJiNjlkMDM0ZjgxNmViMWM0MzIyODFlMWIwM2MzZDY5MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHvlyxMJPOWdWMBHmXTmb4bMDVN
0nNZ7RSrFJHTbG2x9V/oDs7hSqWag4DGrZWh6fd+qMMe6aX3+5LskODKMLRGuTOr
H0sXeqlNFVU6ReXZRuKsTcYajTv4Ag/W9t5pce3aHjBqMWd+K9OsLmlLaoYn6Rpr
Bj6sg1aupEt04lKzTHFciGkegU7JzG9ztlpEzkatyUgzTP5mZkBTfVSN4xkIBLhn
mmK9Ms6Vh1tYgq12qGabXtxbgLLrOPg7MSFo5HO0AVw7lwl/VRS6PQtdkB0nwElh
NW5DeZ2WuPN8iq21e8M4OIN/jynvksCyzRo7v3EBqDrPzSJYqtmbsKDq3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxIa7adA0+BbrHEMigeGwPD1pCEMB8GA1UdIwQY
MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct
MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj
LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo2NPiqK
xXQVGu/WS5aRw94JFgs28lJhTRBy+J0dgvrx5ABiLtdzCBdt6zW/nBrvwuqCoH+o
B9qSsEbmfjCc52JprPQCrrp0XlT0hLDI5L2L92qOrS3IzlMw25EbZiRJNg9tRXkO
5kBy/7HzRerQDEVSJymGTSWvv46svIfAL+Pnz3wn9i9YFHJ368gZTfmUKYsXUfCF
oDuOcP/iIcI+/KsIL+R/vpRbthNkDEgC42+6Ha7qWAkPBjXxuDMsaHMwZUAJyCKD
hJ+yitiIcItED534BmlMXyhvI99mq0TNCY9WT8i+5YpjMvhgBZ4EOzXBxtBJPdGY
jDrgw48Xo4xbKA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client