Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          d7tI4xWi8PZHze4Yg8aGoBgKnab3zVPXIsnceE9UuUQ=
Subject key identifier:   65:6B:DC:D3:24:BC:60:0C:88:08:F6:12:D8:90:51:64:6C:15:32:0B
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       01A13E25E6ADF9305D56D8DCDFB939342AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          0788
Signing time:             Thu 15 Oct 2026 06:00:33 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:33 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:33 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: O+D+NITqXMkq20lTe/GISYlXQrxFhvvCkY3p1t6VYkU=)
                          2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:e6:ad:f9:30:5d:56:d8:dc:df:b9:39:34:2a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: Oct 15 06:00:33 2026 GMT
            Not After : Oct 16 06:00:33 2026 GMT
        Subject: CN=656bdcd324bc600c8808f612d89051646c15320b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:9d:cc:51:71:ef:17:49:aa:6a:f1:12:d3:
                    95:5a:f5:37:88:5b:0d:2a:d7:b7:8d:1c:6d:75:bc:
                    89:db:c5:fb:41:b4:ad:9b:1f:73:23:a4:85:4b:19:
                    b4:09:00:41:43:6b:4c:ed:31:3d:38:9c:0e:68:cf:
                    a9:40:40:bf:f0:a0:d9:7d:9b:2d:15:84:0c:26:23:
                    16:ee:73:34:d1:aa:b0:d5:4e:5d:5d:3f:24:8e:38:
                    ff:e1:e2:5e:4d:82:f7:be:60:ee:0b:a8:53:df:28:
                    36:c8:f8:c3:0a:a1:bf:8c:d4:e5:af:46:f6:57:d8:
                    1a:9f:41:21:74:0c:a1:7b:9c:d3:27:bd:6a:ad:4a:
                    f4:5a:c4:ae:cc:a9:6d:5a:fe:7e:dc:80:fc:af:d5:
                    f4:85:5b:45:ce:d6:71:48:06:8d:5c:d9:f2:26:0a:
                    9e:9a:6e:56:c8:31:a1:5b:6a:83:3d:b5:83:fa:48:
                    4e:b8:5b:5d:e5:4e:5f:e4:36:91:6a:48:bb:91:65:
                    1d:eb:f3:2d:94:15:95:59:a5:f6:d6:1f:93:c3:5d:
                    80:6f:a1:af:cc:9b:e5:a0:f3:85:49:79:73:c4:7a:
                    d4:9b:e5:c3:85:b7:cd:da:a8:38:f6:19:22:30:6f:
                    72:22:fb:4b:19:1a:c9:6a:ab:b2:dd:22:e0:7e:00:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6B:DC:D3:24:BC:60:0C:88:08:F6:12:D8:90:51:64:6C:15:32:0B
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:d4:7d:2f:17:fd:03:b7:63:6c:9e:a4:95:b1:74:cc:c6:
         03:3c:35:75:03:e2:41:6c:5a:db:3c:65:96:a4:ad:73:f5:4b:
         9d:7c:95:f0:67:9a:28:fa:bf:2d:c7:96:1b:cb:ec:32:cb:62:
         8a:28:2f:3e:04:d5:ce:c0:48:ac:42:af:d2:c7:5d:2e:2e:71:
         2c:62:b8:07:47:16:da:2d:8e:d8:fe:56:a1:3b:f1:3c:25:06:
         88:f9:9c:bd:81:35:95:29:da:be:a0:45:b5:13:ee:12:2a:a6:
         22:f5:4c:db:c1:c6:ea:9b:30:40:ad:50:03:31:41:97:f0:a0:
         51:17:ea:24:9d:ae:2f:2a:b9:09:53:83:37:0a:c5:01:9e:b7:
         0f:e6:90:66:5c:ec:23:5d:b4:cd:e6:50:63:a0:f7:ac:35:c4:
         6c:f1:b9:8b:1d:e6:38:a0:5f:92:fc:fa:3b:a8:18:18:9a:40:
         51:47:fd:ca:80:0d:9f:4d:ed:64:08:20:42:a8:c2:24:fb:f7:
         c8:4d:e8:84:8e:95:37:12:fc:13:a8:ab:77:0e:f2:f0:94:65:
         c5:06:ca:61:b0:f4:0a:cc:5f:07:3a:8b:bc:0b:2f:80:9f:13:
         a6:b0:d0:77:83:7e:5b:eb:1f:82:5d:be:65:a1:92:ad:df:24:
         3e:b0:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:32 2026 by rpki-client