Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File:                     AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier:          YtkGZ470hk8yorqw7st8f4n0kkM67+nQ10fYWU+eXFA=
Subject key identifier:   D7:5E:03:09:35:FD:F3:EA:35:C8:29:99:92:3D:E3:FE:5B:A5:CD:6E
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer:       /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial:       019D97E1EC03CF6233CA8168ECEE8DA2681A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 20:00:58 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:58 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:58 +0000
Files and hashes:         1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: 6ekNFU4Fqu/u81H8ugOFtD0b6Tk/eYFpqtJBx7hDjso=)
                          2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:ec:03:cf:62:33:ca:81:68:ec:ee:8d:a2:68:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
        Validity
            Not Before: Apr 16 20:00:58 2026 GMT
            Not After : Apr 17 20:00:58 2026 GMT
        Subject: CN=d75e030935fdf3ea35c82999923de3fe5ba5cd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:58:e3:67:99:d4:9d:6d:ee:0d:96:6d:97:
                    be:56:41:fc:24:57:b1:8e:69:35:b1:bb:ee:81:22:
                    fc:f9:4a:46:2b:8a:b3:83:44:9d:82:39:39:64:e1:
                    8f:a1:3d:ba:fb:3c:12:ae:44:91:29:19:8d:de:97:
                    43:9d:aa:cd:c6:2f:f5:ce:92:a9:49:f8:55:8c:5d:
                    37:a0:01:f2:02:cd:07:36:f3:ed:48:58:5d:0c:2d:
                    d8:0e:e6:48:24:37:87:ad:34:23:1b:e5:e6:8f:f2:
                    c8:62:ff:ea:79:f2:db:17:8c:34:08:a1:83:a6:95:
                    fd:ec:64:6a:6f:47:65:3d:97:c9:73:af:07:b3:80:
                    61:5e:b0:36:90:cf:b3:61:e6:38:07:a2:23:23:ed:
                    35:50:5e:c8:a7:a1:8f:d8:d8:10:bd:cf:ec:52:ad:
                    5d:16:84:5e:55:b7:43:94:6f:8c:f2:35:2d:38:45:
                    7f:31:5a:bf:93:52:64:2b:b5:57:ec:57:b5:f4:c3:
                    20:d5:a9:09:ce:19:af:1b:25:49:69:ab:1c:2d:30:
                    91:0c:75:1f:8b:d1:76:03:d8:7c:d4:1b:8e:4d:50:
                    7d:31:d4:b4:d7:85:af:ea:84:b9:21:e6:53:ad:1f:
                    27:9f:2c:d3:0e:9a:84:08:c2:e6:54:30:c9:26:7f:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:03:09:35:FD:F3:EA:35:C8:29:99:92:3D:E3:FE:5B:A5:CD:6E
            X509v3 Authority Key Identifier:
                keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:a5:b2:95:0c:ba:aa:bb:4c:22:67:2b:21:85:ef:e3:60:
         75:02:f1:0e:91:19:86:70:40:69:b7:4c:f8:51:7a:fa:69:41:
         e3:aa:4b:e2:eb:49:7e:0f:84:06:ab:91:31:bf:6f:f9:cf:94:
         44:54:9f:6e:3d:83:8f:f9:c3:6e:2b:a6:3a:ba:83:33:8a:f9:
         f8:5e:f8:73:90:62:02:ed:c2:1f:65:c4:ef:a6:e2:a2:69:0f:
         58:99:97:e5:86:7f:b2:f3:2d:34:b6:e9:27:32:7d:03:6f:7e:
         1e:6f:2d:c3:5a:72:31:f7:57:ea:90:46:23:83:fc:c5:77:31:
         08:fe:a2:b1:0f:c2:75:30:f6:64:b7:1c:59:15:32:bc:20:ac:
         84:e7:b5:38:44:47:d2:b1:a5:f5:f6:35:fa:1e:cc:fa:3b:8d:
         0e:51:0c:05:d0:0d:6c:00:90:ff:07:78:bf:0c:fd:f2:81:34:
         55:9d:5d:99:91:74:a4:53:f3:07:53:e1:bf:89:ab:44:e2:d1:
         22:88:4e:70:7f:47:20:a0:31:d2:f3:5a:86:37:70:a9:dc:00:
         6e:9b:72:52:54:a0:b1:7f:f4:be:b4:7f:14:03:9c:eb:db:f4:
         08:17:d3:21:e8:69:3b:85:66:eb:6c:e7:61:1d:f9:f9:ac:bb:
         ba:bf:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:17 2026 by rpki-client