Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File:                     AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier:          A88uvwv85CWlcoN9wFvPNXC0KrLG5enmhK4Eax+3HXc=
Subject key identifier:   06:CA:45:65:1A:80:8B:76:44:0E:0B:9A:59:D5:40:FF:CF:B2:06:31
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer:       /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial:       019FA90794934F013296281BA34AF466D8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 14:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:13 +0000
Files and hashes:         1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: 3pap9uVGu7446Twk8ywx3lNIcl7W6zFFrJB4gdkahHs=)
                          2: aODoyPRmt8JcVuQjiY5gOaPNlms.roa (hash: HPGIEJFG3TeELk+Kqb8GHJ+AFHjRK9+4B5FMIaiouhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:94:93:4f:01:32:96:28:1b:a3:4a:f4:66:d8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
        Validity
            Not Before: Jul 28 14:01:13 2026 GMT
            Not After : Jul 29 14:01:13 2026 GMT
        Subject: CN=06ca45651a808b76440e0b9a59d540ffcfb20631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cb:b9:bd:9f:37:79:ec:2e:10:3b:a9:8c:e4:
                    df:44:88:f3:d7:d2:6b:a0:9b:2c:75:5f:c9:91:e8:
                    bf:77:d0:f6:30:6f:8b:77:d6:6e:1d:55:c2:3c:2b:
                    9b:60:0f:6f:b7:2a:37:72:47:cb:b2:10:3f:11:b6:
                    e3:44:ba:c8:cb:f2:7d:66:07:40:1b:5c:92:4c:ca:
                    6c:f0:72:9a:4a:da:42:dc:46:8f:92:aa:e5:6d:7f:
                    aa:c3:01:aa:2f:fa:7a:c3:7b:84:ee:64:ca:14:05:
                    c2:27:e9:a5:47:1a:3a:4c:b8:35:3e:49:e3:71:ec:
                    0e:c7:68:e2:57:8e:bf:ae:77:f7:5d:18:c9:e5:e3:
                    73:23:bd:b0:90:8f:93:d3:f0:bc:78:4f:ee:91:3f:
                    7f:56:e7:7f:5d:a8:48:de:39:34:a7:c9:0c:56:d1:
                    ad:03:3a:30:b8:e0:ab:cf:f7:6b:e0:9a:ac:98:6a:
                    e1:a5:8a:77:41:ec:9d:6f:74:66:e8:77:1c:be:fa:
                    b9:44:46:49:a4:ff:b4:64:62:e5:8a:26:14:7e:cd:
                    9e:7a:a8:b1:4d:35:ab:b2:ee:44:55:9c:3e:15:1a:
                    5d:0d:a0:b0:ab:1b:8d:c7:c5:ec:bb:bf:18:97:8d:
                    39:b2:b2:36:66:96:e2:f3:f4:48:7f:34:39:27:48:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:45:65:1A:80:8B:76:44:0E:0B:9A:59:D5:40:FF:CF:B2:06:31
            X509v3 Authority Key Identifier:
                keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:46:6a:ae:d8:46:c6:02:a5:05:f2:57:fa:ec:5d:cb:3a:
         ed:e5:7a:e0:5a:f6:eb:1d:9b:6e:3b:f3:a1:c0:b0:e7:ca:e5:
         a0:47:04:1b:d3:2d:fa:ff:65:34:43:7e:af:9c:a2:6f:5d:76:
         5d:d0:f7:99:4f:a4:ff:57:ff:eb:85:57:ac:7e:b4:81:c4:79:
         85:ff:62:2c:75:08:2b:d3:cf:2c:9a:18:05:56:65:bf:0b:d6:
         ba:1c:ed:9e:48:c6:9a:58:48:e7:09:34:95:19:54:ae:21:72:
         0e:d4:43:19:87:56:c6:68:15:38:18:ad:04:9b:a0:2e:6e:5d:
         f2:6b:34:74:85:ac:f0:ba:8b:d6:29:70:be:e5:86:13:15:0c:
         9f:c5:d8:ff:c9:4f:67:fc:24:3a:c2:2f:7e:80:6a:44:8d:b3:
         ac:7c:75:25:57:1f:c5:0f:30:cf:d2:6f:5b:b0:6b:06:5f:72:
         9d:3e:35:39:02:b4:e1:44:4c:ed:f8:a8:73:65:68:e0:d1:9a:
         bd:ce:12:41:f1:8c:df:ac:b6:d6:b7:97:9f:8a:65:c7:08:66:
         4d:51:0c:74:bc:1f:d8:2e:54:19:85:9e:a2:a0:5e:d1:39:fe:
         c1:00:c1:7e:a1:f4:2b:ee:8d:ee:1c:0c:94:12:0a:45:33:52:
         d7:fd:e6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB5STTwEyligbo0r0Zti0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNjBiNzBhNTBhZGVhZDM5YjcwOWI1OTAwNDZjNTJlMGNj
NjkyOWIwHhcNMjYwNzI4MTQwMTEzWhcNMjYwNzI5MTQwMTEzWjAzMTEwLwYDVQQD
EygwNmNhNDU2NTFhODA4Yjc2NDQwZTBiOWE1OWQ1NDBmZmNmYjIwNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0su5vZ83eewuEDupjOTfRIjz19Jr
oJssdV/Jkei/d9D2MG+Ld9ZuHVXCPCubYA9vtyo3ckfLshA/EbbjRLrIy/J9ZgdA
G1ySTMps8HKaStpC3EaPkqrlbX+qwwGqL/p6w3uE7mTKFAXCJ+mlRxo6TLg1Pknj
cewOx2jiV46/rnf3XRjJ5eNzI72wkI+T0/C8eE/ukT9/Vud/XahI3jk0p8kMVtGt
AzowuOCrz/dr4JqsmGrhpYp3Qeydb3Rm6Hccvvq5REZJpP+0ZGLliiYUfs2eeqix
TTWrsu5EVZw+FRpdDaCwqxuNx8Xsu78Yl405srI2Zpbi8/RIfzQ5J0icvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbKRWUagIt2RA4LmlnVQP/PsgYxMB8GA1UdIwQY
MBaAFAJgtwpQrerTm3CbWQBGxS4MxpKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEt
ZWJlYzJhNDJlNjBkLzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZWIxMzAtYTBmNy00OWFmLWEyNzEtZWJlYzJhNDJlNjBk
LzEvQW1DM0NsQ3Q2dE9iY0p0WkFFYkZMZ3pHa3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBtGaq7Y
RsYCpQXyV/rsXcs67eV64Fr26x2bbjvzocCw58rloEcEG9Mt+v9lNEN+r5yib112
XdD3mU+k/1f/64VXrH60gcR5hf9iLHUIK9PPLJoYBVZlvwvWuhztnkjGmlhI5wk0
lRlUriFyDtRDGYdWxmgVOBitBJugLm5d8ms0dIWs8LqL1ilwvuWGExUMn8XY/8lP
Z/wkOsIvfoBqRI2zrHx1JVcfxQ8wz9JvW7BrBl9ynT41OQK04URM7fioc2Vo4NGa
vc4SQfGM36y21reXn4plxwhmTVEMdLwf2C5UGYWeoqBe0Tn+wQDBfqH0K+6N7hwM
lBIKRTNS1/3mAQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:26 2026 by rpki-client