Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          4VA5VLINa33lFd2fi+B8ycxbCY1ZnzWqQcJxAhw8vOc=
Subject key identifier:   AF:82:4B:24:FF:02:4D:D9:A2:FA:20:63:27:32:CC:9B:F1:BA:C0:F1
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       019F17F99311CD460F2D6E303EC30172B942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 10:00:59 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:59 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:59 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: f5I/9GJLrjdFhM3FeW9SRb0ocOLuVOM4+DDzzCVyigA=)
                          2: p-N3EdizVvRVLmkppfiLBw6qrVA.roa (hash: ONQ5To3WeYsyCD3RqkgWqFExSkcZnR7cjXwSN83Jcb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:93:11:cd:46:0f:2d:6e:30:3e:c3:01:72:b9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Jun 30 10:00:59 2026 GMT
            Not After : Jul  1 10:00:59 2026 GMT
        Subject: CN=af824b24ff024dd9a2fa20632732cc9bf1bac0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:3e:d7:1d:34:68:d2:47:aa:b1:7d:c9:a3:
                    07:97:50:c5:6a:2b:4c:30:20:65:41:49:67:0b:40:
                    2e:75:81:b9:10:85:c4:c8:9d:c7:b5:ad:40:8d:ed:
                    78:f1:2e:70:6c:03:e9:01:07:98:87:86:d6:50:97:
                    d7:5c:22:d6:6c:83:e5:98:f0:c2:a6:ad:dc:bd:d0:
                    ab:fa:24:9b:42:90:7b:a8:23:7e:1f:72:70:b0:e6:
                    a6:87:54:dd:75:f9:74:60:7d:33:d4:c9:40:e3:55:
                    80:27:85:66:84:22:f2:70:3f:75:50:ae:26:ab:02:
                    14:49:3f:a6:fe:8c:23:d6:c5:a9:ef:81:6b:1f:7a:
                    ae:4c:fa:8f:4b:1d:9c:6d:ea:8b:4e:b3:83:5e:36:
                    33:11:34:43:3f:c4:4c:38:3b:4d:f7:cc:c5:df:97:
                    51:0e:a3:46:15:0e:e3:fb:fd:92:e3:23:12:99:7d:
                    12:d5:81:07:77:b9:c3:62:f2:cf:44:3e:20:a0:4b:
                    53:f6:aa:a5:46:08:16:78:a8:94:b8:fe:b6:87:6c:
                    e6:6d:a8:1a:a1:dc:7c:72:2e:ee:a5:72:b4:fb:92:
                    d4:06:5c:e6:a3:3a:e9:d1:82:b2:78:43:df:85:1b:
                    c4:df:5c:f9:2e:d3:72:79:83:86:b7:3a:fd:ba:99:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:4B:24:FF:02:4D:D9:A2:FA:20:63:27:32:CC:9B:F1:BA:C0:F1
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:d0:df:3b:08:e9:91:68:c6:bf:ae:aa:a2:fe:b1:f5:c4:
         6f:a8:1a:9a:52:4e:64:38:e6:c9:56:ce:3a:97:2f:be:ad:da:
         ee:77:e4:2e:80:c9:93:a1:a1:e2:05:a8:04:1f:0e:2b:9d:40:
         e9:1f:5c:db:66:c0:28:5e:d3:00:21:2e:e7:20:12:34:13:0f:
         7d:93:6a:4a:7c:2d:be:28:85:53:f0:a6:1e:fa:b7:81:90:c8:
         f4:03:75:8d:7c:c3:59:12:0c:0a:6d:df:d2:55:9a:45:2e:f5:
         b2:24:06:e8:b7:f4:6a:30:7b:4b:8d:da:9e:66:34:58:3d:9a:
         c3:ae:9e:d0:10:ad:30:2b:46:f7:7d:57:fb:73:23:00:ad:9a:
         30:f9:97:ca:48:8e:f9:81:97:51:09:2f:8b:53:98:81:8d:bc:
         75:cc:38:2c:08:01:ae:ec:0b:e9:c8:0e:0e:20:19:3d:2e:07:
         ef:82:bf:11:54:31:b0:06:1a:14:a5:19:09:8d:d2:e3:3c:6f:
         27:1e:32:a1:a7:36:51:27:68:39:67:19:e0:5d:e4:be:3f:57:
         fd:fe:6f:6a:0b:65:58:88:65:cd:5f:ce:9a:02:ae:74:d2:8b:
         50:4b:56:3e:fe:cb:32:c1:6f:6c:cd:b3:bb:a1:39:a3:0d:ea:
         f7:7a:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:49 2026 by rpki-client