Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File:                     AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier:          iqk51NAfc0mFYXSN4itM/sV4DGL4DliGhMsKzSP68Ns=
Subject key identifier:   22:96:AD:E6:FE:5B:F3:1C:E7:BA:9F:62:F7:D1:68:BC:D9:33:AB:8F
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer:       /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial:       019CE259CDCF38917ACE1878CFA8E115DB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number:          1569
Signing time:             Thu 12 Mar 2026 14:01:02 +0000
Manifest this update:     Thu 12 Mar 2026 14:01:02 +0000
Manifest next update:     Fri 13 Mar 2026 14:01:02 +0000
Files and hashes:         1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: fmjh43KAo18oUSeFOFWhqWqwIWtYm20qIYI+zpiniVo=)
                          2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:59:cd:cf:38:91:7a:ce:18:78:cf:a8:e1:15:db:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
        Validity
            Not Before: Mar 12 14:01:02 2026 GMT
            Not After : Mar 13 14:01:02 2026 GMT
        Subject: CN=2296ade6fe5bf31ce7ba9f62f7d168bcd933ab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:c8:5d:96:04:37:49:99:fd:16:a1:bd:28:
                    d2:e6:43:52:78:26:7e:ae:b0:8d:31:dd:d0:2b:5d:
                    48:e1:2d:51:48:2b:29:d2:07:f5:8e:10:bd:14:6d:
                    d0:dc:18:c9:e7:34:fd:d9:9a:10:7a:70:6d:96:5b:
                    76:d8:8c:03:a0:ae:a4:b6:23:02:3b:b3:20:97:cf:
                    f0:76:34:c3:77:75:d7:4c:35:58:ec:f4:a1:b0:8a:
                    a5:8e:34:48:84:e0:be:c0:c3:ff:63:8f:3a:bb:98:
                    fe:ee:15:e5:2c:0f:a6:d7:ae:1b:d0:db:db:38:44:
                    e4:9b:b2:dc:90:42:ef:8d:81:08:28:e0:ca:e3:f6:
                    95:16:aa:01:34:d9:c9:08:c6:97:08:92:6d:5e:b8:
                    3a:42:b2:e5:10:70:81:d9:a9:5a:b6:ae:e4:c2:38:
                    70:d2:54:ee:31:53:8c:88:33:e3:b3:5f:1d:d8:c7:
                    f2:65:a8:2f:1f:95:95:24:45:7d:ce:53:c1:ed:da:
                    2d:13:9c:6a:0f:cb:7c:d2:44:c8:b8:1d:ea:11:7c:
                    52:b2:24:d2:10:f1:02:41:0a:54:9f:f9:38:0b:4a:
                    db:a5:93:69:0a:80:49:1a:e0:47:21:48:0d:10:38:
                    9b:25:56:61:93:21:0e:df:38:5f:2f:f7:b2:a0:8a:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:96:AD:E6:FE:5B:F3:1C:E7:BA:9F:62:F7:D1:68:BC:D9:33:AB:8F
            X509v3 Authority Key Identifier:
                keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:79:57:0f:48:1c:7d:34:a8:f8:03:ed:67:ab:b3:58:9c:
         64:24:6a:25:bf:eb:a3:40:ad:51:7e:46:b8:ac:84:b0:fd:cf:
         9f:9c:17:c8:8a:b8:c2:4e:8d:dd:b3:1b:68:eb:1c:bd:7f:74:
         0b:3c:9b:79:84:1b:4c:c7:e4:a0:3d:cb:79:2b:3f:66:2e:53:
         e1:1b:ff:00:b1:f6:dc:ae:6d:c7:b6:27:1c:e9:91:68:a2:eb:
         92:ab:ee:fc:35:6b:78:31:d5:cf:15:8b:08:ee:43:cc:76:9f:
         b6:71:3d:05:3c:d8:51:6c:ab:04:64:90:63:03:80:cf:da:45:
         84:2f:8b:28:f9:4a:5b:2b:7a:0a:64:2d:7b:b9:36:11:02:c3:
         e3:6c:6d:c8:23:34:b3:d2:0b:83:cf:ea:56:c6:c7:1c:c3:fd:
         43:29:39:c4:df:ca:88:06:7c:fa:08:d8:7a:a2:6f:22:10:d7:
         0a:0d:bb:99:9b:a0:8a:0c:56:8f:e9:3b:eb:44:18:17:21:f1:
         66:94:a3:43:6c:43:41:53:6a:62:f3:c1:93:22:9a:e4:2f:74:
         55:2d:61:a2:7d:7e:88:fa:b2:2c:ab:11:9d:c0:c6:66:d3:05:
         32:e6:6c:2f:52:48:b5:8a:6e:07:1c:99:2f:e6:84:60:0b:ec:
         f7:0f:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:14 2026 by rpki-client