Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          FRMWH+/3qz+Jj1GDRUPa7BYLf6mYHgj0hWeRKzUrPLY=
Subject key identifier:   9D:CA:80:33:34:ED:C6:96:C6:11:25:F0:39:2C:A1:DA:D7:81:E9:08
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       019D38D3A1D8F2D3077AB076408C616B1CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          15CD
Signing time:             Sun 29 Mar 2026 09:01:26 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:26 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:26 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: 9fCDQiMXok4+Z1P5QuKTnOrKwHKyGc3wI2ysodVMnns=)
                          2: CE_wAiqEaLlY4PiPuIL18YIWuwM.roa (hash: OlnxplWWb8DevOWdDae7qGSmPCkkY07nIKLwN62bMGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:a1:d8:f2:d3:07:7a:b0:76:40:8c:61:6b:1c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Mar 29 09:01:26 2026 GMT
            Not After : Mar 30 09:01:26 2026 GMT
        Subject: CN=9dca803334edc696c61125f0392ca1dad781e908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:fc:94:0f:13:68:fb:15:95:71:db:33:34:
                    24:6e:68:dd:78:b9:1a:26:f1:be:3d:e4:59:cd:1c:
                    0f:f8:c4:be:f4:8b:07:66:39:7d:1c:26:20:49:35:
                    1e:74:2c:21:01:c5:38:00:ff:31:ba:20:95:d7:8a:
                    b6:52:08:81:8f:67:00:cb:20:96:11:bc:60:c8:01:
                    32:31:38:03:da:53:11:96:e6:de:08:0d:c9:c7:80:
                    f7:ab:6e:c9:ce:94:8a:24:7b:6c:24:51:87:78:c9:
                    8b:09:4b:14:5d:a3:d9:26:f0:c1:6a:ec:55:df:9c:
                    56:13:97:22:63:2c:55:bc:fd:79:79:12:29:f2:76:
                    ee:62:d4:66:1a:fc:31:05:45:3b:07:43:4a:11:05:
                    b2:3d:c4:f7:0e:0d:30:08:63:7f:16:81:27:3b:79:
                    56:49:62:48:e4:82:52:32:c8:03:ee:4b:5c:28:c8:
                    64:94:85:88:1a:e3:38:c2:aa:58:1e:dc:fd:40:3b:
                    34:cd:e4:58:57:fc:e0:26:7a:e3:c7:11:c3:bb:24:
                    9b:e6:0c:82:aa:20:84:ce:56:81:c2:d7:2f:b4:62:
                    22:87:80:7b:d8:c4:cb:3b:08:f7:2c:e5:29:14:2e:
                    1b:5a:2f:6b:54:f9:55:4a:32:10:54:e8:ae:d3:05:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:80:33:34:ED:C6:96:C6:11:25:F0:39:2C:A1:DA:D7:81:E9:08
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:34:8f:e4:4b:b9:05:6f:22:0b:f1:ed:10:75:bb:34:24:
         fd:6d:82:43:ea:76:27:d4:a8:46:0e:9d:5e:ed:63:d1:88:e9:
         9e:65:36:58:35:d7:59:ab:18:a2:9e:1a:90:f7:81:06:66:b7:
         94:9e:67:11:ba:d1:1b:b0:f1:5f:aa:f8:60:46:99:21:f1:db:
         94:b3:ff:0c:ca:ab:8b:9d:87:9b:7a:a8:5a:47:01:b7:9c:7e:
         38:95:37:ab:ba:57:c9:62:5b:ee:f8:64:c9:aa:37:36:3a:4b:
         e3:fc:a9:7d:c6:2b:13:a7:f0:ac:e9:8e:4a:9f:49:74:1f:6b:
         16:bf:fb:96:aa:1f:a8:80:fc:50:12:06:7d:fb:a8:29:e3:6e:
         b9:ed:d1:cb:52:fd:ba:c6:be:62:73:9c:d8:b1:c6:c7:e8:3a:
         a9:5e:ef:24:6b:af:b6:d4:ec:b8:1d:4a:3b:e8:99:15:5c:a4:
         57:3f:bf:cc:e1:c3:c1:1a:e0:37:e3:57:b5:92:ae:13:0b:a7:
         e9:6d:5c:0c:b3:7a:5e:9e:3c:95:a4:70:92:fd:ea:1f:74:9d:
         9c:c8:fc:f5:2c:65:36:64:d9:05:f5:f7:f4:81:57:c8:4c:8e:
         8f:75:72:ec:c2:35:dc:d2:3a:11:12:d2:c5:6f:fa:fc:84:a1:
         e8:55:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:18 2026 by rpki-client