Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File:                     AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier:          STk5kSHko+hvPrer22PIpgiJXDvbQluvtgV4HCW78pI=
Subject key identifier:   71:54:18:51:09:64:14:7D:29:9F:27:32:D2:C0:31:76:C2:A7:0E:32
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer:       /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial:       019FAAF5CA460018750E40935E2DA6A53402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number:          0391
Signing time:             Tue 28 Jul 2026 23:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:02 +0000
Files and hashes:         1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: auKUeZ3Ooe7Jmez1ucGYjNYvpLJFHN+jHyaf4O+X8lA=)
                          2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
                          3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:ca:46:00:18:75:0e:40:93:5e:2d:a6:a5:34:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
        Validity
            Not Before: Jul 28 23:01:02 2026 GMT
            Not After : Jul 29 23:01:02 2026 GMT
        Subject: CN=715418510964147d299f2732d2c03176c2a70e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:98:96:cb:d9:ac:1a:6a:16:00:8e:24:ed:
                    f3:74:8e:c6:a7:69:6f:bd:86:a1:e6:ee:29:26:3c:
                    03:0a:2e:2d:a8:73:db:8f:84:ad:e8:7b:39:5e:68:
                    a6:4c:8f:d5:9e:6c:27:ab:1c:b1:74:76:d5:5b:6d:
                    45:9a:b3:92:8a:63:9e:30:1f:02:4d:51:dc:90:0c:
                    10:da:a9:7a:86:fc:d3:27:1b:df:9e:d8:62:7d:78:
                    01:ab:43:3e:c4:fc:95:1c:55:dd:78:2f:02:7d:18:
                    38:fe:89:85:3a:7c:74:bb:44:45:1f:e0:f6:15:4c:
                    68:5a:24:44:b5:81:85:ba:d3:f8:cc:1f:33:cc:7a:
                    00:7f:ae:32:57:9a:4d:0c:c3:b4:15:4f:26:12:7a:
                    02:be:1a:a4:1e:5b:22:3c:87:a8:a8:3c:d8:05:b4:
                    af:85:7f:8d:22:7b:01:10:13:02:b2:e8:a3:3f:8c:
                    58:4f:4b:d6:b5:a5:07:83:3e:1b:2f:27:3b:8e:27:
                    96:05:e1:c9:de:65:46:9f:36:f9:80:2a:22:79:2d:
                    e9:ae:97:fd:92:51:4d:71:7d:d6:de:9c:b2:dd:07:
                    5a:eb:60:1f:6b:85:4a:7e:70:b3:4d:99:37:b0:ad:
                    3f:24:56:77:31:9c:3b:d5:00:b4:ce:eb:45:db:4d:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:18:51:09:64:14:7D:29:9F:27:32:D2:C0:31:76:C2:A7:0E:32
            X509v3 Authority Key Identifier:
                keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:51:dd:9d:67:fd:04:5d:21:aa:9d:6d:3e:8e:c9:31:25:16:
         ec:b5:3b:d9:b4:57:08:42:6f:1f:9b:8b:77:d5:00:5f:9c:0c:
         2c:22:09:70:df:ce:06:26:88:ac:75:ed:bd:a8:03:0f:ec:d4:
         46:0e:35:b3:75:12:a2:40:84:e9:85:2a:ff:ac:e9:53:ae:b8:
         5c:79:96:da:c6:b9:53:53:a2:e7:92:14:9d:9a:22:5a:60:6f:
         cf:cb:cd:36:7a:e1:78:c9:a7:eb:66:e2:d7:ec:c5:0d:09:f7:
         8e:28:d5:b3:37:7c:e8:34:55:a2:8a:4f:fa:b7:bc:48:f0:a5:
         9d:70:05:96:05:78:5a:ac:be:f7:bb:12:1e:ff:ea:57:50:8a:
         b0:93:14:c2:85:65:e4:0b:40:49:6d:94:96:fa:a8:22:62:5f:
         24:6e:04:0c:eb:4d:93:07:5e:47:28:77:20:e7:c1:5e:e3:5e:
         b4:0f:48:93:f7:f9:d8:ff:1e:15:b4:e0:e6:ec:02:15:44:99:
         88:bc:b3:06:ad:82:dc:14:7a:23:df:9f:66:9e:44:ca:88:bf:
         9f:8d:39:c1:1d:c4:35:f7:52:38:1b:b3:e7:20:09:54:b2:6b:
         59:b8:c5:56:e0:19:12:9a:8f:f8:05:7b:c7:30:0a:cb:3e:05:
         9c:61:7a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:36 2026 by rpki-client