Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          JhEnr5LaGtF9kAKKlBHxnR0SIdHA3/9pED6Uo59/nNU=
Subject key identifier:   0A:0B:90:C5:6E:79:CE:4D:69:30:D7:12:AB:08:96:A7:78:16:BE:FE
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       019CAC0FE2CF993E167307FD58009050F4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 01:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:48 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: OBafqktk/wp93Oe1ZrjcCv1a/qIDlrW4/25EzfqnjQE=)
                          2: p-N3EdizVvRVLmkppfiLBw6qrVA.roa (hash: ONQ5To3WeYsyCD3RqkgWqFExSkcZnR7cjXwSN83Jcb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:e2:cf:99:3e:16:73:07:fd:58:00:90:50:f4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Mar  2 01:00:48 2026 GMT
            Not After : Mar  3 01:00:48 2026 GMT
        Subject: CN=0a0b90c56e79ce4d6930d712ab0896a77816befe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:fc:35:6d:9f:d7:83:e2:d0:e0:78:cc:47:
                    38:56:4f:ac:64:a3:1b:25:1f:e9:f2:fd:ff:ba:31:
                    b9:47:0f:96:66:ec:29:a9:11:bc:9a:b9:75:c0:6f:
                    42:e8:1a:cd:e0:ae:c3:f4:eb:b0:59:50:35:40:32:
                    17:3f:52:60:d8:85:a0:09:d3:a7:0b:ac:a4:25:d6:
                    fb:eb:1a:a0:99:f6:3c:6c:9f:3d:0f:c1:84:9e:59:
                    77:af:64:5a:9c:ee:02:38:0c:f4:d9:f3:79:0f:88:
                    aa:08:e5:1e:56:6e:71:eb:63:97:2c:2b:d8:3a:bd:
                    bf:5a:53:6d:20:06:58:dd:68:29:fa:21:9e:d6:dc:
                    c6:25:70:e4:3b:7a:88:e2:21:8b:bd:b1:bf:67:8b:
                    15:0a:72:3b:24:e7:04:07:ff:7e:af:67:21:fe:6e:
                    59:e8:c4:74:a0:fc:af:ac:a4:0c:da:95:9b:2e:65:
                    ce:9b:18:04:3b:9e:12:a6:6d:e4:36:39:7e:fc:c5:
                    13:fc:9d:4c:98:5e:6b:76:a0:2c:3f:cd:52:bf:51:
                    4c:4f:7f:d0:b3:7f:fc:0b:ec:c9:0d:fa:e3:e3:81:
                    08:9d:34:62:bc:19:f9:56:d5:08:ad:04:cd:01:d0:
                    85:f2:a5:91:8b:cd:be:98:79:55:32:8d:b6:f8:74:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:90:C5:6E:79:CE:4D:69:30:D7:12:AB:08:96:A7:78:16:BE:FE
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:c5:7a:da:7e:75:40:ff:35:c9:0c:11:ea:78:a9:62:0d:
         35:91:ed:6f:d2:37:aa:79:80:b7:03:94:31:51:7c:a4:55:3a:
         cb:70:c7:62:67:01:d0:90:51:66:9a:40:0e:0a:5b:7a:b1:28:
         86:fd:f6:5b:a3:bb:22:40:e7:2b:ff:50:aa:20:9d:23:4c:22:
         31:10:4b:10:67:c0:95:7d:04:97:00:e8:2f:05:24:76:7a:b6:
         91:8f:e1:95:b9:69:d4:24:bf:67:8f:0e:51:56:c4:e9:79:7d:
         8e:b1:c6:7d:ec:03:d6:da:fe:d0:71:8a:78:b6:16:e1:02:8f:
         01:19:92:67:4e:9d:47:ed:4f:46:4b:87:59:f0:51:7e:95:d7:
         72:98:b8:8a:ed:6f:3e:f1:f7:11:c6:0c:25:3b:32:33:d6:5e:
         fe:91:81:ed:ad:29:41:f0:cb:6a:10:dc:70:71:6c:cb:40:c2:
         f2:5a:f0:88:7a:22:3d:52:8c:ed:4a:79:2e:14:82:c6:30:23:
         a9:08:d2:12:a3:1a:de:60:40:b0:f2:96:39:f7:8b:81:6a:42:
         73:87:92:a5:06:10:f3:e9:e5:54:97:33:73:4b:04:b1:42:42:
         c2:07:2b:49:43:df:bb:0a:f9:fa:29:e2:32:5f:58:f1:62:c4:
         d4:87:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:41 2026 by rpki-client