Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          XlVfhaj2Tg/FU3L6Z50ApInA0zIjhNCWhtjulrt9HHs=
Subject key identifier:   43:A6:7F:48:20:DB:E3:24:C7:3A:20:D1:A2:F9:91:15:88:E1:EE:D7
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       019F17C2E14402F103C9C1B6A832EBA78528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          16C5
Signing time:             Tue 30 Jun 2026 09:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:15 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: PxRyYrZrVErIuFuYcNEGhQZxMfir7w9mO8xz5tJDb98=)
                          2: CE_wAiqEaLlY4PiPuIL18YIWuwM.roa (hash: OlnxplWWb8DevOWdDae7qGSmPCkkY07nIKLwN62bMGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:e1:44:02:f1:03:c9:c1:b6:a8:32:eb:a7:85:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Jun 30 09:01:15 2026 GMT
            Not After : Jul  1 09:01:15 2026 GMT
        Subject: CN=43a67f4820dbe324c73a20d1a2f9911588e1eed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8f:c6:ca:a1:c0:bc:5a:c0:6e:ec:39:ea:6f:
                    e1:ad:e1:3e:3f:2b:93:5e:36:0b:de:6c:c9:21:1c:
                    c2:20:2f:2c:d0:e6:1b:26:74:ae:e4:7d:ad:94:f3:
                    93:df:e2:a8:bc:f6:fc:78:a1:9d:a0:53:6d:57:89:
                    a9:6e:fb:80:db:80:8f:9d:f5:e7:75:1c:59:ec:b4:
                    56:cc:dc:3c:44:1b:eb:d2:b6:ad:51:1b:ad:31:12:
                    c5:74:73:a5:16:44:a4:0c:bc:7e:94:08:b3:65:c4:
                    fb:fe:23:b4:85:40:df:1d:08:c0:33:24:cc:2c:1c:
                    06:dd:0f:1f:49:8d:78:6b:45:2d:8d:42:e8:2d:1c:
                    8d:73:b0:c0:07:63:3c:a7:d0:d1:4f:8a:03:6c:23:
                    7f:40:1f:3c:0e:e5:b8:7e:e0:07:37:3a:72:52:07:
                    b1:12:6f:29:18:36:7f:ac:a8:a0:dc:83:04:78:bc:
                    0d:4f:e5:2a:70:26:af:c9:7b:7e:ca:2d:cc:07:75:
                    a9:fb:00:41:00:b5:ee:2e:03:ae:fd:c8:11:b5:c2:
                    36:e9:c8:20:db:2f:be:ea:e1:41:d8:8a:40:31:58:
                    3b:29:7e:e9:1d:e1:9a:0f:30:5f:7e:af:0c:88:06:
                    9b:bb:ba:91:ca:89:46:61:bf:f1:82:5e:66:33:7b:
                    c4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A6:7F:48:20:DB:E3:24:C7:3A:20:D1:A2:F9:91:15:88:E1:EE:D7
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:9e:f9:13:00:72:a0:a1:cc:6c:08:84:e0:05:8d:d4:26:
         da:80:40:82:b2:5b:3d:d7:03:f7:8e:73:e1:af:c8:71:fb:82:
         f4:fd:5e:ab:4d:86:62:f1:ae:d0:fe:4e:b6:a6:e3:2d:4d:44:
         bd:94:1a:3c:ab:c6:c7:37:5a:f2:52:bb:95:d3:51:bb:7a:0a:
         e3:68:1b:03:29:55:02:2f:ef:aa:8f:f3:94:45:4a:f8:cc:22:
         98:c8:be:19:b0:e9:6d:b3:31:aa:54:ad:a4:9c:fa:e7:ba:35:
         33:79:7c:90:60:8b:ed:dd:14:b7:29:31:09:68:30:d2:9f:d4:
         28:39:0b:da:0c:f5:ec:14:60:41:c3:5a:ec:4c:4c:1b:1c:0d:
         b5:5a:55:94:06:eb:a2:7d:b5:da:94:1e:58:22:c9:4f:40:42:
         a4:62:36:f7:02:75:fc:f8:7b:fa:6a:8a:0d:fa:4f:f5:a0:4e:
         0d:3f:d3:86:35:e1:fc:b0:81:bd:28:41:1b:fc:30:e7:dd:c4:
         23:13:9f:7c:da:42:b5:a3:c3:fb:8c:53:eb:0b:03:ef:52:da:
         ef:98:05:38:53:73:25:d7:3c:21:bd:73:22:d5:8f:65:9a:94:
         84:a8:ef:33:51:7b:1c:a8:29:7b:e8:14:1b:97:64:07:28:af:
         6e:04:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:35 2026 by rpki-client