Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File:                     AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier:          P/P0jwtHdIBOCB+FCpyVr4BR+k2sb0dBaEgn6SDmKnQ=
Subject key identifier:   BD:7D:23:46:CE:80:2B:1A:86:34:19:D9:2B:BA:60:D8:FB:EB:83:E3
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer:       /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial:       019CAA58E52989816956ABE4CFAA2473B422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 17:01:18 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:18 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:18 +0000
Files and hashes:         1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: tExKsn6rAmRhuZM5dwVmEZENFFhrtbx0LHmCGyaMCrI=)
                          2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:e5:29:89:81:69:56:ab:e4:cf:aa:24:73:b4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
        Validity
            Not Before: Mar  1 17:01:18 2026 GMT
            Not After : Mar  2 17:01:18 2026 GMT
        Subject: CN=bd7d2346ce802b1a863419d92bba60d8fbeb83e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:46:81:2c:cf:a2:b0:82:58:38:a8:1a:1a:
                    b0:23:4d:6b:e9:31:be:1d:23:c7:31:32:a6:31:b3:
                    83:2e:e6:d3:dc:08:94:cd:3e:77:0a:e2:07:39:14:
                    af:2d:d9:2e:43:fd:de:90:02:94:4a:55:22:08:a2:
                    25:20:e4:9b:80:46:ad:ec:37:d2:2a:c7:de:97:f2:
                    09:96:17:a5:ca:a5:6c:9f:f2:4e:a2:10:85:92:53:
                    ca:11:85:80:64:87:ad:3a:ed:d0:d6:6d:46:e2:bd:
                    16:6d:4b:04:d3:12:60:08:74:42:27:a0:2a:ef:4c:
                    89:07:35:78:d1:dc:95:fa:4e:29:b7:58:51:f1:12:
                    db:26:22:bb:ee:87:50:58:34:87:33:55:51:76:4b:
                    aa:b2:77:cc:37:57:32:37:40:7e:03:c9:a8:3f:00:
                    11:b9:85:ad:f6:55:e1:f2:16:30:62:08:a6:50:97:
                    eb:33:b8:ee:92:1b:42:5c:70:b3:a4:ec:51:da:e8:
                    2e:4e:fa:99:3b:ba:e3:32:a6:bd:4d:db:db:82:c7:
                    06:25:b0:8d:30:28:68:0d:58:c7:3a:e3:e5:bd:87:
                    91:67:ac:dd:00:5f:06:8d:a9:e5:d1:fb:ec:00:27:
                    a5:8f:58:cb:ec:a8:17:bb:e9:2a:37:36:ef:59:e0:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:23:46:CE:80:2B:1A:86:34:19:D9:2B:BA:60:D8:FB:EB:83:E3
            X509v3 Authority Key Identifier:
                keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:da:ce:5c:6a:90:67:19:66:67:9c:0b:80:04:83:05:ae:
         03:08:af:34:b4:72:9b:7a:a7:96:58:7f:b4:8c:a0:0f:4b:ee:
         18:5a:b8:c3:3f:13:e4:b0:7e:66:98:87:af:27:76:1c:d0:d5:
         24:53:ce:02:61:ac:11:89:ed:ef:91:63:b4:fa:e0:b7:eb:60:
         7b:eb:48:2f:9b:46:63:73:2c:e2:a9:7e:b6:2d:d9:f9:4b:c0:
         30:62:09:a9:ac:4c:44:99:12:35:cb:82:e0:5f:4c:c2:fb:c9:
         bb:7c:74:36:bb:c0:a3:1c:b6:3d:8e:46:54:17:cb:2b:db:54:
         21:72:ea:ef:ab:bd:84:a3:19:a9:14:ae:15:c4:a1:00:1f:7e:
         e5:3d:bf:ce:c4:8a:52:76:79:53:75:9a:41:5a:93:af:ac:5c:
         13:42:c9:35:21:eb:15:d2:1f:f6:df:1c:d4:22:f2:55:84:6c:
         3f:11:73:d8:a5:36:e1:15:de:e3:53:18:25:c5:3c:2c:9d:c5:
         1e:7d:a8:1b:41:db:5c:0d:53:d3:ec:bb:3f:9d:ca:99:55:f8:
         ed:d5:0b:11:d1:ae:a6:7a:81:3e:28:7a:72:95:cf:bc:af:5c:
         fb:6d:c9:55:53:28:ea:3f:66:49:28:99:84:c4:e9:d0:96:b8:
         8c:d8:ae:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWOUpiYFpVqvkz6okc7QiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjBiNzBhNTBhZGVhZDM5YjcwOWI1OTAwNDZjNTJlMGNj
NjkyOWIwHhcNMjYwMzAxMTcwMTE4WhcNMjYwMzAyMTcwMTE4WjAzMTEwLwYDVQQD
EyhiZDdkMjM0NmNlODAyYjFhODYzNDE5ZDkyYmJhNjBkOGZiZWI4M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9hGgSzPorCCWDioGhqwI01r6TG+
HSPHMTKmMbODLubT3AiUzT53CuIHORSvLdkuQ/3ekAKUSlUiCKIlIOSbgEat7DfS
Ksfel/IJlhelyqVsn/JOohCFklPKEYWAZIetOu3Q1m1G4r0WbUsE0xJgCHRCJ6Aq
70yJBzV40dyV+k4pt1hR8RLbJiK77odQWDSHM1VRdkuqsnfMN1cyN0B+A8moPwAR
uYWt9lXh8hYwYgimUJfrM7jukhtCXHCzpOxR2uguTvqZO7rjMqa9TdvbgscGJbCN
MChoDVjHOuPlvYeRZ6zdAF8Gjanl0fvsACelj1jL7KgXu+kqNzbvWeCQYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL19I0bOgCsahjQZ2Su6YNj764PjMB8GA1UdIwQY
MBaAFAJgtwpQrerTm3CbWQBGxS4MxpKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEt
ZWJlYzJhNDJlNjBkLzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEtZWJlYzJhNDJlNjBk
LzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHurazlxq
kGcZZmecC4AEgwWuAwivNLRym3qnllh/tIygD0vuGFq4wz8T5LB+ZpiHryd2HNDV
JFPOAmGsEYnt75FjtPrgt+tge+tIL5tGY3Ms4ql+ti3Z+UvAMGIJqaxMRJkSNcuC
4F9MwvvJu3x0NrvAoxy2PY5GVBfLK9tUIXLq76u9hKMZqRSuFcShAB9+5T2/zsSK
UnZ5U3WaQVqTr6xcE0LJNSHrFdIf9t8c1CLyVYRsPxFz2KU24RXe41MYJcU8LJ3F
Hn2oG0HbXA1T0+y7P53KmVX47dULEdGupnqBPih6cpXPvK9c+23JVVMo6j9mSSiZ
hMTp0Ja4jNiuKw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:38 2026 by rpki-client