Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          OV+bMG93xxo2fw/TNB4i83ld+Lb8vkRvmX7LWIhDy18=
Subject key identifier:   D3:09:57:06:D5:00:27:F1:BD:36:61:83:FB:FC:F4:9F:D1:28:6C:D6
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       019E3004BD3F30749CEED6B8536F03EA481B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          05F3
Signing time:             Sat 16 May 2026 09:01:17 +0000
Manifest this update:     Sat 16 May 2026 09:01:17 +0000
Manifest next update:     Sun 17 May 2026 09:01:17 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: JXgko+5IVE35WVeEQPN3+8BC1BDzL9n09L7YrsspT7Q=)
                          2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:bd:3f:30:74:9c:ee:d6:b8:53:6f:03:ea:48:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: May 16 09:01:17 2026 GMT
            Not After : May 17 09:01:17 2026 GMT
        Subject: CN=d3095706d50027f1bd366183fbfcf49fd1286cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:5b:63:b8:57:13:f5:ab:1c:ca:63:d5:c2:
                    c7:5b:4a:28:d1:c5:41:c7:64:ae:83:df:0c:bd:9d:
                    b4:44:4d:78:c8:35:41:6d:ae:e5:36:26:d2:a9:f0:
                    a9:aa:f3:19:8c:d5:15:87:86:b6:14:d0:e4:7f:69:
                    5e:66:35:8e:7a:1e:02:7c:06:4d:c4:49:f3:cb:25:
                    cd:77:1f:c6:e5:44:5c:f8:bf:87:6d:11:46:bd:3b:
                    a3:a1:57:0c:57:9b:1a:65:f2:bf:73:01:e7:72:75:
                    32:83:53:79:21:9b:b5:d9:1a:55:89:46:74:29:25:
                    81:32:2a:f0:0e:ae:f3:ec:d2:6b:96:e5:f8:f2:39:
                    1f:d1:0e:95:ef:af:6c:fd:f9:6e:89:29:94:86:4a:
                    91:cd:10:7f:ee:64:b5:14:b7:ac:da:50:93:16:6b:
                    3f:75:dc:24:f8:87:53:e7:98:e1:85:78:d3:1e:dc:
                    27:02:f6:32:51:d2:f6:d7:1e:6f:aa:98:df:41:8c:
                    3e:a4:f6:43:c4:a7:a7:6c:08:fb:c7:31:9a:2f:e1:
                    71:47:ac:fe:5f:b8:7e:a3:1f:fd:19:5a:a5:aa:86:
                    fe:82:30:81:65:88:d8:66:1f:82:ea:d2:9b:6b:97:
                    b1:d1:a6:01:a2:bd:2c:1d:96:4c:79:9f:18:ed:44:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:57:06:D5:00:27:F1:BD:36:61:83:FB:FC:F4:9F:D1:28:6C:D6
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:1a:cb:93:50:fb:46:67:4c:60:3f:77:34:d1:8e:37:b3:
         56:a7:81:f5:67:83:92:ff:3c:ef:5c:24:51:19:ec:d9:a0:18:
         65:67:04:47:1e:a2:ce:78:77:51:8c:d7:24:65:3f:9e:c0:b2:
         86:99:c5:9a:4e:87:73:60:8e:3f:eb:0b:5b:85:a4:f8:eb:40:
         f5:83:a4:b0:0a:8b:e8:11:17:ee:ee:66:7c:a6:b6:ad:21:7f:
         f4:18:26:1b:82:56:ae:e9:e3:c7:ac:d1:0b:b7:a3:78:df:4f:
         c2:c8:82:ad:13:16:12:8a:d1:bb:10:39:5a:e9:63:f2:ec:a2:
         45:a4:67:08:57:12:b9:5e:33:2c:7b:9e:e1:fe:43:bc:25:85:
         5c:dd:3b:10:b5:71:93:c5:7d:64:4a:69:11:d4:fb:5c:dd:42:
         a1:d6:33:88:af:0c:ff:e8:5c:9a:28:c6:e7:93:ab:e0:30:4b:
         02:da:57:a7:93:d2:11:9d:db:f3:09:fc:44:1d:0d:b4:d8:eb:
         2f:f5:10:92:98:6b:92:e8:91:42:c1:f5:e2:79:77:6a:76:b0:
         03:e7:5e:96:3c:25:71:04:54:1d:7b:88:c2:0e:f6:fd:d4:a6:
         e0:ba:25:47:8a:73:93:db:0f:31:4e:11:f2:1b:40:82:94:7b:
         9a:2c:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:30 2026 by rpki-client