Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          FOcmZ41JKlKrMJfiafkJg7t9JBTQbbf8MvtmY7N19sY=
Subject key identifier:   7C:EA:DD:91:C2:E4:48:C2:03:62:60:D4:30:68:BA:76:AB:E0:2D:C5
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       019F17C30CE3A481BCC963D85CE8EC166D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          066B
Signing time:             Tue 30 Jun 2026 09:01:26 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:26 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:26 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: okO+lryAEeev6i0xGGXFfpXYUKfKuXsIQXVg82tR13k=)
                          2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:0c:e3:a4:81:bc:c9:63:d8:5c:e8:ec:16:6d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: Jun 30 09:01:26 2026 GMT
            Not After : Jul  1 09:01:26 2026 GMT
        Subject: CN=7ceadd91c2e448c2036260d43068ba76abe02dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:40:1a:1d:83:69:52:76:a3:da:a5:73:c2:6a:
                    b5:ad:38:e6:7d:13:48:71:31:23:1a:bc:f7:a5:3c:
                    71:26:63:b2:db:e5:18:53:82:4f:4b:e0:df:46:55:
                    ca:fd:3e:ad:4a:70:b0:d9:0d:60:bb:97:ab:20:63:
                    66:2a:02:34:1f:08:a8:e5:16:5c:b8:9d:48:d3:11:
                    5c:f0:19:3b:74:f6:3c:6b:97:e4:3d:91:b1:11:58:
                    81:43:f0:86:87:16:af:5a:37:9e:6b:f4:31:b1:34:
                    0c:7a:6d:04:c4:7b:27:b4:e1:7c:1b:6c:d4:05:50:
                    9f:60:19:d0:b1:3a:07:4d:95:b8:cf:44:e3:93:ba:
                    99:d2:98:ba:44:92:8d:2a:22:34:08:9c:9c:58:b1:
                    cc:98:f9:a8:a7:8d:a5:95:5f:a4:f8:83:cd:a3:36:
                    4b:c0:55:09:f4:75:f5:c4:5a:4d:af:e9:cf:60:4c:
                    b9:7d:aa:c3:43:8c:11:90:a8:7b:1a:25:55:e1:1e:
                    11:ca:89:43:31:f6:4e:9b:23:09:00:30:a1:99:4c:
                    7e:ce:12:08:4c:e6:fc:5d:70:7c:65:53:05:fd:b2:
                    5f:d8:ed:66:7b:aa:7d:0e:4d:49:48:b4:20:e8:58:
                    31:0b:78:ce:9e:0f:9f:48:03:4f:c1:a2:0b:8e:62:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:DD:91:C2:E4:48:C2:03:62:60:D4:30:68:BA:76:AB:E0:2D:C5
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:0f:27:f9:da:3e:45:3a:c5:42:61:b8:0b:76:90:a3:56:
         c9:a1:e5:28:65:50:dd:0e:80:80:09:fa:0e:de:4b:bb:ee:77:
         fb:53:f0:ba:0e:83:1a:90:4f:3f:43:fb:89:fe:76:98:59:c8:
         69:21:f2:b3:d3:9a:c5:c5:e9:34:84:cc:89:1e:f9:cc:ec:3e:
         fd:9c:5b:f1:91:64:58:cf:37:46:3c:bb:44:17:f1:7e:62:47:
         71:21:ee:55:87:d5:15:91:fb:34:71:a3:70:69:41:03:42:6f:
         02:df:ef:60:0a:06:57:19:28:3b:f2:cb:d2:52:bd:15:a3:64:
         37:f6:31:33:3e:c3:94:68:40:6f:53:a1:d9:02:5c:88:c6:61:
         f7:73:77:40:13:1c:64:f2:d4:c2:b3:64:cc:b3:c2:55:20:3a:
         78:b0:2e:8a:4f:63:ce:ac:a8:21:3d:9a:62:10:d8:cd:5d:be:
         c2:a7:d9:ed:91:ab:ee:7e:65:c3:76:87:5d:01:d6:b5:e0:23:
         f7:b0:21:f3:ae:6f:45:27:3b:8c:3b:1b:3d:b7:d5:f3:a5:03:
         f2:c9:e5:96:07:d8:3b:01:e0:e8:57:1d:cf:5c:7a:31:76:11:
         07:dd:73:dc:d9:cb:f9:6b:ee:0f:f9:f1:d5:e3:1e:7f:07:38:
         10:9a:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client