Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
File:                     AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json)
Hash identifier:          uI4ktG3PM0Y5DFGq62MjOv2PPaQ4roYLMmTxceOK/1k=
Subject key identifier:   5E:45:2F:F4:4D:8A:F5:F7:1B:47:EF:2B:59:AA:8E:E2:CA:5B:E5:AF
Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18
Certificate issuer:       /CN=00cb6701ff829394db69ce67c30ad8735f126018
Certificate serial:       019CABD961513D1F9CA9B997746A93DABF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
Manifest number:          052A
Signing time:             Mon 02 Mar 2026 00:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:15 +0000
Files and hashes:         1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: CRnxHMVjfBjU+mUUNOxdHpe64mc/firOS0mNFhpkO78=)
                          2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:61:51:3d:1f:9c:a9:b9:97:74:6a:93:da:bf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018
        Validity
            Not Before: Mar  2 00:01:15 2026 GMT
            Not After : Mar  3 00:01:15 2026 GMT
        Subject: CN=5e452ff44d8af5f71b47ef2b59aa8ee2ca5be5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:26:05:5d:ce:63:74:62:7f:8e:79:ad:b6:
                    9a:ec:74:e9:46:8a:de:77:12:76:d5:d9:c9:a3:77:
                    a6:27:90:b7:37:93:bf:05:43:10:4c:63:f8:12:bf:
                    9f:d1:f7:ca:5d:0d:7c:33:4c:93:79:dd:1e:af:77:
                    04:c0:0e:c7:66:af:79:34:b0:76:25:7f:04:d9:05:
                    2e:d4:bf:49:54:9d:cd:7d:41:81:5a:5e:d8:b7:93:
                    7f:83:1e:14:7b:5e:c1:5e:df:7b:f2:5e:b1:53:0d:
                    37:87:28:d4:fd:bc:a3:25:b9:de:2d:0a:25:3e:ac:
                    df:da:8c:dd:7d:e0:c6:a9:61:3c:c8:9c:77:cd:6e:
                    8a:3b:e7:ab:7f:39:61:d4:5b:cf:3f:b5:ec:a1:c1:
                    b7:ee:be:c6:89:5b:88:b3:50:01:94:d1:f0:8c:c7:
                    98:fb:da:74:bf:e4:46:a3:3b:8f:3d:c5:19:15:2f:
                    a0:72:24:21:d3:3b:5c:7c:c6:36:e3:2e:e0:45:e6:
                    e7:6e:71:99:94:c0:f1:d1:0b:2b:26:66:d7:4f:e1:
                    16:16:54:28:1e:e3:eb:18:01:fe:14:b1:47:6b:53:
                    6b:41:f2:23:44:6c:4f:37:45:94:eb:f6:d6:4c:b5:
                    4a:3b:06:37:8a:8c:89:27:b3:fa:39:cd:9f:0d:7d:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:45:2F:F4:4D:8A:F5:F7:1B:47:EF:2B:59:AA:8E:E2:CA:5B:E5:AF
            X509v3 Authority Key Identifier:
                keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:4a:9c:44:e6:0e:7d:31:c0:6c:8f:57:46:d4:84:ab:2b:
         77:46:61:27:ed:b4:95:35:79:4a:0a:70:43:e9:b5:7f:ef:bd:
         61:12:89:80:68:c2:dc:6f:d8:41:72:56:42:a4:34:51:5a:95:
         3e:52:a2:6f:70:28:92:89:53:63:15:b6:bc:0e:64:5c:75:a5:
         d2:6c:39:84:51:b3:7d:b0:9a:b0:93:f0:7b:f5:53:9a:a0:d7:
         1f:5e:02:13:54:5d:6a:19:c2:1f:ae:b4:ce:59:75:70:d2:15:
         83:c6:05:c8:ad:f8:3f:2a:2b:7b:ff:7a:48:c9:a1:f2:86:68:
         39:0a:8d:f2:2a:51:7a:35:49:92:27:09:2d:10:41:13:06:c6:
         ce:cd:1c:36:4b:a1:f8:0a:ee:bc:45:bf:5c:cd:41:e2:c9:1a:
         ed:da:6e:ba:02:db:89:91:b8:a1:d3:a8:f7:57:42:23:f1:c2:
         c3:82:42:b9:cf:4c:67:f5:cd:f0:cb:e8:dc:61:4d:5e:93:78:
         dc:35:c6:ab:69:d3:2e:5f:4f:32:4f:62:30:a2:0d:56:fa:23:
         fa:dc:cd:3f:7c:be:dc:da:5c:13:23:bc:62:1a:7e:b3:37:d8:
         0a:44:38:a9:89:77:a6:f6:66:6e:15:ed:07:3e:b7:ad:ee:76:
         96:9d:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:30 2026 by rpki-client