Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          4WvUmFV4IPIXu2VdKcgrlHStR2JxZ3CJVcHDiV7cAWE=
Subject key identifier:   C2:B1:86:6B:01:96:E1:D2:BB:6F:87:0E:01:75:EC:82:45:43:2A:92
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       019CABD9D055D79A50E97587F90EA9E83E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          1584
Signing time:             Mon 02 Mar 2026 00:01:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:44 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:44 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: 93Ko0xeffoBAf+HCVEmDAVK4Ph7Yld0hk5m3x8S9Lfk=)
                          2: CE_wAiqEaLlY4PiPuIL18YIWuwM.roa (hash: OlnxplWWb8DevOWdDae7qGSmPCkkY07nIKLwN62bMGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d0:55:d7:9a:50:e9:75:87:f9:0e:a9:e8:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Mar  2 00:01:44 2026 GMT
            Not After : Mar  3 00:01:44 2026 GMT
        Subject: CN=c2b1866b0196e1d2bb6f870e0175ec8245432a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:da:c8:8f:41:a6:ac:30:85:e8:b6:be:2a:
                    9a:38:aa:22:6d:02:5a:43:16:8e:f9:09:9e:ce:e7:
                    f1:7f:c1:79:a6:a9:fa:27:98:89:a4:95:b7:44:d6:
                    77:3b:6b:ef:a0:85:aa:5c:e4:8d:e8:92:41:7e:03:
                    05:03:b2:c4:83:0e:4f:3d:be:2d:52:69:a8:a8:39:
                    d3:d1:88:69:55:5f:59:e0:8b:38:b0:c6:02:8b:1a:
                    be:4b:9f:e2:80:0d:11:7b:19:3c:da:bf:a3:d2:dd:
                    ee:c4:0e:42:fd:8e:63:86:01:dd:da:fe:0f:40:01:
                    e5:33:05:8a:96:ec:e3:e8:de:44:ec:47:a1:7c:6f:
                    47:3b:b2:a9:58:19:48:9f:dd:ec:14:29:1c:98:67:
                    1d:80:39:64:f1:71:ae:5f:ab:c4:7d:c6:5c:43:cb:
                    6b:c7:e8:83:86:69:1d:a0:b2:37:d3:b6:b5:4e:5d:
                    08:b7:b3:06:f8:a5:c3:5f:4f:e1:da:07:15:d3:ed:
                    81:26:68:f3:0a:b1:9e:86:18:36:59:fa:1c:0b:91:
                    71:58:1e:3d:bd:ff:fc:49:b0:76:a9:96:2f:50:77:
                    32:1b:f5:40:c8:f2:69:1c:16:44:cf:e8:b6:68:b5:
                    ac:b0:84:b2:a6:7c:12:9e:df:d7:3f:13:be:18:01:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:86:6B:01:96:E1:D2:BB:6F:87:0E:01:75:EC:82:45:43:2A:92
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ef:cd:62:52:4e:c3:03:82:d7:9d:5e:d2:a6:fc:3d:a3:9b:
         a7:02:e2:f9:78:b0:23:51:66:9f:cf:f2:c7:61:89:f6:ba:44:
         71:4f:f0:87:b4:50:c8:02:1a:62:55:50:ae:88:d8:1c:31:d3:
         c6:19:18:e1:c3:44:19:46:b3:02:94:68:b0:e7:a7:83:82:70:
         2b:b3:95:5e:2d:2a:55:a0:be:10:6f:d3:5d:ba:a9:de:72:b5:
         89:90:3d:f0:49:24:90:3b:33:f3:78:51:6d:61:cd:87:6e:41:
         43:e2:45:14:e1:29:81:5e:09:24:31:12:e7:f5:3a:86:02:24:
         7c:16:de:60:a3:c9:45:37:a5:5a:e7:97:ce:00:1c:ad:ee:53:
         be:4b:a2:f9:25:ef:50:ef:a5:ac:72:e9:23:a9:77:4b:b3:f5:
         37:5d:46:88:8a:ac:23:4b:5d:40:63:49:0a:86:3c:83:c2:53:
         7b:7d:bf:84:24:a8:75:cd:ef:b5:58:4a:7b:76:be:f8:84:22:
         ad:4a:64:a1:ac:61:62:20:7a:1a:76:c3:96:42:e7:08:89:ee:
         c7:72:47:a8:af:b5:02:c9:e9:3d:bc:33:b6:c8:c1:86:dc:89:
         db:86:f6:11:8e:db:7b:8c:ba:73:6b:2e:da:31:cc:29:4c:5a:
         fe:46:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:02 2026 by rpki-client