Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          RQ19LQQaoNZrmEYoINFo5bWvZnujLEAsu4fcYh5R3MY=
Subject key identifier:   97:6B:48:9D:0A:4A:C8:30:BF:AC:C8:4B:1F:17:8F:27:56:F5:E2:EA
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       019EBF23F23257C368A7D9311C39D845F69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 04:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:04 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: OMC4CjPRBcH12csqHmBgPmhHWJHXnfULKFfui2uwKqk=)
                          2: p-N3EdizVvRVLmkppfiLBw6qrVA.roa (hash: ONQ5To3WeYsyCD3RqkgWqFExSkcZnR7cjXwSN83Jcb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f2:32:57:c3:68:a7:d9:31:1c:39:d8:45:f6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Jun 13 04:01:04 2026 GMT
            Not After : Jun 14 04:01:04 2026 GMT
        Subject: CN=976b489d0a4ac830bfacc84b1f178f2756f5e2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:cd:00:a1:3a:32:c2:81:5a:b5:3b:f3:49:
                    0a:3c:3a:b6:2b:33:5d:87:01:10:f3:92:c0:68:13:
                    af:b7:22:97:e0:1d:c5:5e:4f:65:a8:10:6a:cc:f0:
                    c9:69:23:7f:a3:e6:eb:4c:db:0a:d6:f3:93:bb:ea:
                    57:84:be:25:a8:2c:0e:50:0a:7d:70:f2:fd:42:9a:
                    cc:e1:ca:21:bc:37:db:11:73:78:fb:6f:54:a4:15:
                    03:bd:ed:c0:b3:03:27:91:a9:0c:52:90:9d:46:9c:
                    22:2e:54:e2:fa:5c:b5:f2:e4:13:11:4d:76:e1:29:
                    9f:ce:f8:ad:6f:63:68:d0:d3:2d:a5:06:b5:93:6c:
                    b1:c7:dd:f3:ee:dc:92:53:3b:09:67:bf:28:56:94:
                    78:2c:14:a4:dd:6a:07:d4:f4:61:7e:48:55:21:47:
                    fe:e6:6b:ab:1b:92:85:9b:c8:40:f3:b0:d9:57:8a:
                    10:23:56:00:f5:90:ac:4b:b2:e6:f6:95:00:20:23:
                    72:8b:63:4d:d2:82:2a:6e:c0:7b:da:59:24:4d:1c:
                    97:19:25:cc:6b:8e:22:c4:ce:f9:2a:a2:ce:7d:1a:
                    d1:30:20:8d:32:3d:3f:c0:ae:14:f8:7a:16:24:de:
                    bb:81:55:e9:a1:1d:ff:fe:5b:d7:c4:f2:62:9e:09:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6B:48:9D:0A:4A:C8:30:BF:AC:C8:4B:1F:17:8F:27:56:F5:E2:EA
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:74:f6:80:4a:7c:a3:d6:5e:2f:6d:d4:de:98:30:a9:b8:f5:
         97:f0:5c:fd:17:f6:b4:e7:68:a3:6b:ba:db:07:aa:ce:30:75:
         26:5e:8b:f2:16:bd:19:01:f0:e9:45:0b:19:d7:14:54:2b:47:
         05:9a:8e:9e:33:e6:81:34:58:c8:28:b2:74:67:53:df:9e:87:
         56:d4:0f:27:c8:11:8a:0b:b7:a3:30:9c:3d:f1:2c:32:8d:9f:
         f6:26:af:d1:13:d1:01:48:5c:82:a5:7f:93:f6:6b:61:4c:cd:
         40:66:93:7c:47:4f:30:df:6c:1f:d1:6d:84:6b:43:3c:34:d3:
         42:bb:be:68:86:93:17:7a:ad:3c:7d:f9:f6:1f:9f:5b:14:40:
         97:ff:31:f0:dc:31:0d:30:cf:68:43:aa:61:11:6a:bc:62:31:
         4a:56:3f:86:48:6c:3a:35:83:25:a9:53:0a:4e:5f:4f:7f:f2:
         39:04:d8:82:1d:eb:e5:f5:02:b0:c7:54:f6:58:de:ba:65:ac:
         c0:33:ea:3a:5f:08:01:73:6e:dd:0c:23:9d:4a:ab:e9:e3:a0:
         19:ab:18:eb:9b:32:3d:3d:3d:63:43:23:a3:fd:d2:aa:4c:21:
         ea:7f:b7:5c:36:ce:0b:ca:47:ea:a4:fd:45:fd:5f:28:f7:7c:
         aa:02:5f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I/IyV8Nop9kxHDnYRfabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk
ODBiY2EwHhcNMjYwNjEzMDQwMTA0WhcNMjYwNjE0MDQwMTA0WjAzMTEwLwYDVQQD
Eyg5NzZiNDg5ZDBhNGFjODMwYmZhY2M4NGIxZjE3OGYyNzU2ZjVlMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PHNAKE6MsKBWrU780kKPDq2KzNd
hwEQ85LAaBOvtyKX4B3FXk9lqBBqzPDJaSN/o+brTNsK1vOTu+pXhL4lqCwOUAp9
cPL9QprM4cohvDfbEXN4+29UpBUDve3AswMnkakMUpCdRpwiLlTi+ly18uQTEU12
4Smfzvitb2No0NMtpQa1k2yxx93z7tySUzsJZ78oVpR4LBSk3WoH1PRhfkhVIUf+
5murG5KFm8hA87DZV4oQI1YA9ZCsS7Lm9pUAICNyi2NN0oIqbsB72lkkTRyXGSXM
a44ixM75KqLOfRrRMCCNMj0/wK4U+HoWJN67gVXpoR3//lvXxPJingkbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdrSJ0KSsgwv6zISx8XjydW9eLqMB8GA1UdIwQY
MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt
ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4
LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3T2gEp8
o9ZeL23U3pgwqbj1l/Bc/Rf2tOdoo2u62weqzjB1Jl6L8ha9GQHw6UULGdcUVCtH
BZqOnjPmgTRYyCiydGdT356HVtQPJ8gRigu3ozCcPfEsMo2f9iav0RPRAUhcgqV/
k/ZrYUzNQGaTfEdPMN9sH9FthGtDPDTTQru+aIaTF3qtPH359h+fWxRAl/8x8Nwx
DTDPaEOqYRFqvGIxSlY/hkhsOjWDJalTCk5fT3/yOQTYgh3r5fUCsMdU9ljeumWs
wDPqOl8IAXNu3QwjnUqr6eOgGasY65syPT09Y0Mjo/3Sqkwh6n+3XDbOC8pH6qT9
Rf1fKPd8qgJfvA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:38 2026 by rpki-client