Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          nYroDHaxImMWTJZu8sQjyHsYXPNJ5Un7RKkURjrf6Hw=
Subject key identifier:   3C:3C:91:57:03:7B:B4:F6:28:97:CA:0C:DF:61:5B:47:FE:DE:3B:CA
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       019EBEECAD7E5971A2D7A55C58661C1DBAC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          1697
Signing time:             Sat 13 Jun 2026 03:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:42 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: fKpCk3kG6U1e3QOA/qqPAf3rtMntgX55EWICGEaYsWM=)
                          2: CE_wAiqEaLlY4PiPuIL18YIWuwM.roa (hash: OlnxplWWb8DevOWdDae7qGSmPCkkY07nIKLwN62bMGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:ad:7e:59:71:a2:d7:a5:5c:58:66:1c:1d:ba:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Jun 13 03:00:42 2026 GMT
            Not After : Jun 14 03:00:42 2026 GMT
        Subject: CN=3c3c9157037bb4f62897ca0cdf615b47fede3bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:00:b4:b8:57:e2:15:dd:f9:2b:59:1e:c9:
                    b6:9d:01:23:d8:84:e8:34:90:d9:73:64:14:0f:d6:
                    bd:6b:f9:6e:ab:c8:15:aa:e5:5a:dc:53:ad:78:b8:
                    f5:2a:22:02:43:d9:45:75:59:1d:df:55:7b:d7:cd:
                    82:f5:69:7d:80:3d:bf:29:98:1e:a5:ec:a3:e4:7d:
                    67:44:6a:f8:d5:6e:f4:18:34:52:c7:49:ab:3f:e4:
                    7d:57:23:14:c3:e3:51:39:0e:8d:fd:86:fa:e1:77:
                    f6:ae:0d:3d:7c:34:1a:c0:37:35:e3:6f:30:be:05:
                    4b:ef:06:69:d0:2a:6c:22:37:f4:46:78:81:2f:9e:
                    1d:ec:84:4a:73:77:fe:1b:c1:25:b3:d1:3f:cf:cc:
                    79:c7:0a:56:7c:88:61:af:d0:79:53:86:32:4a:5c:
                    13:0e:97:22:d2:0a:58:23:58:fe:16:30:85:96:6a:
                    08:2f:06:af:81:72:c8:af:cf:7f:4a:73:59:68:64:
                    ef:77:73:07:6c:c9:66:fa:d5:19:aa:d4:2e:09:0e:
                    88:3d:63:da:4b:7d:b7:82:d7:44:ba:68:a3:41:8a:
                    48:01:80:b7:14:8d:0f:c1:f5:1b:3c:6e:c9:35:24:
                    ee:f8:51:32:df:15:50:19:f1:9a:88:ea:e9:4e:d7:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:91:57:03:7B:B4:F6:28:97:CA:0C:DF:61:5B:47:FE:DE:3B:CA
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:3a:db:d0:2f:0d:84:cd:23:4c:a5:49:f7:bd:11:9b:37:
         ae:dd:85:89:b0:a7:be:c0:c7:34:cf:43:d3:ca:35:f3:52:4e:
         9f:06:59:64:bb:9e:4c:09:5b:19:5e:11:9c:72:ca:24:14:2e:
         57:64:b6:80:37:c2:20:2f:f5:fe:3c:5b:d5:08:91:16:e0:43:
         26:f6:5d:f5:a0:b7:65:e0:90:21:9d:e8:dc:2e:52:95:3b:71:
         61:7e:90:e9:03:23:04:07:41:a5:e1:03:9f:91:b7:37:7e:3d:
         59:46:8f:81:26:92:3e:87:ce:92:00:2c:82:a7:ee:99:1b:59:
         ce:18:61:dc:30:a0:03:2c:eb:5e:00:f1:0c:a8:cd:ae:36:a4:
         d1:d1:01:31:e5:68:7f:1e:63:e8:14:19:aa:81:25:2f:3d:b9:
         59:7e:13:89:36:e6:60:67:90:36:3a:99:83:2f:29:51:a5:8d:
         4b:39:cb:e3:69:d2:51:6d:79:40:67:f7:0c:37:eb:d9:39:b6:
         a6:b9:d4:b9:b8:5d:e2:cc:61:8e:c9:52:76:43:fa:f2:6b:d6:
         3d:34:98:4f:24:44:ba:66:ab:8b:59:2c:1d:e6:d1:f3:a0:f9:
         e8:09:0f:e8:2d:87:05:0c:51:fc:7b:01:a9:27:41:73:98:be:
         32:38:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:04 2026 by rpki-client