Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File:                     ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier:          /j43b/c8ylphwTYbhn8jDiwBs97nNBfY2QFEi4OmA3M=
Subject key identifier:   9F:99:BF:07:8B:17:22:45:73:C3:E6:59:CC:35:F8:F3:56:93:78:66
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer:       /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial:       019CAC0F9E60E743A5115DD9F713B9701EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number:          15A3
Signing time:             Mon 02 Mar 2026 01:00:30 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:30 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:30 +0000
Files and hashes:         1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: tiATom5NpC6sipgvbFNVaQ5GubrJZ2y7jGOhRWHqezg=)
                          2: rM0FGnvlMxVnBDejgMVa-ko-qg8.roa (hash: xaR1odMEKAJSPNcFWjrniRDpb0Y5i0ojVSbD/UxfcDQ=)
                          3: w8ZuRQyK62OI8GoGdanaljFmtMI.roa (hash: xLIOqMZ/996WD0cHfz0VFhrfrePPUxfR1CU3QVv6WKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:9e:60:e7:43:a5:11:5d:d9:f7:13:b9:70:1e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
        Validity
            Not Before: Mar  2 01:00:30 2026 GMT
            Not After : Mar  3 01:00:30 2026 GMT
        Subject: CN=9f99bf078b17224573c3e659cc35f8f356937866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:6e:ba:bf:98:3b:c5:a6:5b:89:bf:f6:00:
                    60:49:a4:c6:b9:e1:e9:11:99:00:35:bd:9d:3c:7b:
                    e1:00:94:16:91:a8:05:17:22:0e:ea:ca:fa:05:5f:
                    cd:36:d0:e0:10:30:84:9f:4a:34:8c:26:0c:30:f9:
                    df:ad:7c:96:79:63:f8:6c:58:b1:92:73:ba:04:26:
                    2c:55:e6:6c:d5:ec:ab:bb:9b:dd:b8:e6:c1:47:2d:
                    1a:cb:d5:5c:a9:40:c6:4d:97:f3:15:a9:a0:30:09:
                    94:74:be:f0:a5:80:d9:21:80:2c:95:fa:ad:f4:b0:
                    30:a9:ba:05:43:5a:4c:67:75:15:9b:c6:b7:b5:f8:
                    1d:50:25:ce:5a:5d:68:56:a5:13:7c:69:ca:c2:7a:
                    7a:3d:38:da:13:33:36:6f:53:68:35:d0:26:4a:c5:
                    9c:0f:64:78:e7:a7:cc:15:d3:2b:fe:ea:c3:b0:9d:
                    8b:4f:dd:4b:6f:2e:c6:da:10:80:4f:58:87:c1:44:
                    c9:d4:56:2b:4a:f9:22:1f:6a:3f:39:25:94:c5:66:
                    6b:1a:d5:d9:b0:f8:9c:f5:c4:9f:ca:a5:44:bc:40:
                    9d:3e:bf:a3:f6:28:48:fe:c8:51:b7:76:41:8a:a7:
                    44:2b:40:6d:cf:2f:c0:24:4b:b3:ea:4d:cc:6f:54:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:BF:07:8B:17:22:45:73:C3:E6:59:CC:35:F8:F3:56:93:78:66
            X509v3 Authority Key Identifier:
                keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:82:6d:3b:f3:04:7a:de:d4:6b:91:cd:9e:a1:62:2f:a1:
         19:81:bd:0b:1b:50:2f:11:3a:8a:98:53:99:b3:e5:31:88:b9:
         b7:38:6f:e4:47:7a:74:66:d3:90:74:f7:2b:04:f7:1c:d3:0c:
         59:bb:0f:50:19:26:c4:51:20:30:bd:30:c0:72:20:23:82:2f:
         bc:3c:c5:82:35:70:37:c1:b5:bc:10:8e:3a:0b:ff:86:6f:ec:
         71:1e:d8:e5:d5:3c:50:43:8a:06:13:1d:fd:a5:88:80:7d:ac:
         18:32:93:09:2f:e6:90:59:7d:09:3d:d5:b6:73:4e:2f:85:3b:
         f0:bd:aa:f0:e3:5e:ac:ef:0c:e1:bb:9f:61:41:b8:d7:4c:ca:
         13:1e:ab:30:61:56:6e:eb:ac:9a:35:7b:06:23:3d:fc:a5:6e:
         18:10:87:a9:af:a5:1d:4f:b1:48:42:11:6a:00:e1:d5:34:f6:
         74:a6:8f:da:49:e9:52:88:32:c6:2b:3d:fc:e9:28:72:59:c1:
         b1:cd:8d:a8:df:f4:fb:87:25:57:33:b8:73:c6:e2:6f:70:55:
         f1:2e:8d:bd:60:45:da:e9:ca:29:48:da:17:79:97:e9:c1:b8:
         a7:f8:22:72:44:90:46:da:11:dc:c4:64:c4:c4:82:05:2c:a1:
         f7:1b:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:33 2026 by rpki-client