Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File:                     AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier:          ICAXqmdDbHol9qYzz4N2zWdSKSHmtaRorGNj4//vbnM=
Subject key identifier:   7B:F5:B4:BC:8B:46:CC:89:D4:F1:3F:00:6A:74:09:B4:EB:5B:17:AD
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer:       /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial:       019FA907AD262C672B446899EB6C205D842E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number:          16D9
Signing time:             Tue 28 Jul 2026 14:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:20 +0000
Files and hashes:         1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: ZlM9EG7zHnVDWd6PZ5ODi1Co+GT4hcTv/hAPD0AOodc=)
                          2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:ad:26:2c:67:2b:44:68:99:eb:6c:20:5d:84:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
        Validity
            Not Before: Jul 28 14:01:20 2026 GMT
            Not After : Jul 29 14:01:20 2026 GMT
        Subject: CN=7bf5b4bc8b46cc89d4f13f006a7409b4eb5b17ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:74:34:ca:23:00:71:31:3d:ea:f5:b4:66:
                    7d:21:06:5b:1e:a5:57:d7:4c:22:a7:e1:9a:c7:fc:
                    de:9b:53:ba:95:09:95:ee:8a:ef:e8:a1:d9:71:9d:
                    bd:3b:1a:62:b5:de:98:7c:80:45:c8:29:13:51:b5:
                    25:e2:67:80:36:b2:3e:fd:bf:89:4f:69:fe:0f:71:
                    5e:b2:b3:57:c3:c3:b0:93:7b:77:b8:25:40:21:69:
                    0a:f0:40:4b:68:ee:33:fe:98:1d:8e:b9:03:ab:f3:
                    67:7b:aa:50:b6:f0:3e:f5:d8:da:56:73:8b:5c:d7:
                    1f:15:40:5b:e1:2e:d3:94:70:27:dc:ca:c6:5f:7e:
                    1c:8f:5a:88:3b:bf:36:86:a0:e3:1c:1e:88:50:2e:
                    0f:63:5b:9b:08:00:00:75:00:43:7a:d5:8b:2d:72:
                    00:da:74:39:b1:20:03:7d:c3:cf:ce:55:cf:b6:ce:
                    41:8f:00:48:8f:7a:9f:df:56:78:30:dc:52:0a:45:
                    2b:b6:b3:ec:db:2d:89:58:51:0f:37:c7:8f:70:62:
                    e2:c6:b7:4a:fa:4f:cb:40:0a:a7:a8:db:f7:13:00:
                    ee:ee:90:60:67:75:4e:e2:f8:f3:f2:75:7f:07:09:
                    1e:59:86:a9:58:68:9f:ec:78:e9:7b:99:c7:72:5a:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F5:B4:BC:8B:46:CC:89:D4:F1:3F:00:6A:74:09:B4:EB:5B:17:AD
            X509v3 Authority Key Identifier:
                keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:25:12:79:d5:d9:f4:52:9a:e9:03:a1:4c:f5:31:a4:7e:88:
         24:4b:97:3e:20:d2:17:1a:b2:31:8a:18:1f:bc:d2:67:2f:34:
         42:65:94:bb:a0:b7:90:c2:e5:28:f2:2c:58:0f:e1:e8:79:91:
         fd:0d:be:9d:d9:a3:0e:ad:68:3b:57:62:fa:65:be:c9:f2:ac:
         50:07:89:07:4b:ae:8a:3f:6a:84:0e:72:29:cc:c2:9c:b9:7b:
         7c:b2:e1:ef:0a:62:27:63:ff:6e:e4:74:75:90:c2:5c:f3:a0:
         6d:1a:d9:6a:a5:0f:86:2a:7e:b5:61:e1:08:c0:15:79:e9:fa:
         d6:9f:0e:c6:49:8f:ba:3b:82:e0:e9:90:a6:6f:2d:59:7b:d2:
         7f:2f:3a:99:6d:73:5e:0f:15:7a:d9:14:ef:84:f9:66:6c:08:
         13:ae:c1:61:d6:72:5f:a3:07:d0:43:d5:83:2e:ed:ea:64:8b:
         dc:f3:4e:96:a0:cc:ed:66:27:b7:09:25:35:6c:ef:43:57:4f:
         38:8b:ea:33:cf:9f:53:42:5d:af:ae:f0:29:3a:6e:a9:51:84:
         f6:67:e8:6e:3a:11:34:95:ea:c8:55:88:55:22:21:25:d1:a6:
         c5:91:dc:be:a4:56:35:96:4b:6c:74:44:9e:7a:07:b8:56:43:
         4f:2a:b6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB60mLGcrRGiZ62wgXYQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj
NDZjZmQwHhcNMjYwNzI4MTQwMTIwWhcNMjYwNzI5MTQwMTIwWjAzMTEwLwYDVQQD
Eyg3YmY1YjRiYzhiNDZjYzg5ZDRmMTNmMDA2YTc0MDliNGViNWIxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBV0NMojAHExPer1tGZ9IQZbHqVX
10wip+Gax/zem1O6lQmV7orv6KHZcZ29Oxpitd6YfIBFyCkTUbUl4meANrI+/b+J
T2n+D3FesrNXw8Owk3t3uCVAIWkK8EBLaO4z/pgdjrkDq/Nne6pQtvA+9djaVnOL
XNcfFUBb4S7TlHAn3MrGX34cj1qIO782hqDjHB6IUC4PY1ubCAAAdQBDetWLLXIA
2nQ5sSADfcPPzlXPts5BjwBIj3qf31Z4MNxSCkUrtrPs2y2JWFEPN8ePcGLixrdK
+k/LQAqnqNv3EwDu7pBgZ3VO4vjz8nV/BwkeWYapWGif7Hjpe5nHclo1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv1tLyLRsyJ1PE/AGp0CbTrWxetMB8GA1UdIwQY
MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt
YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0
LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0SUSedXZ
9FKa6QOhTPUxpH6IJEuXPiDSFxqyMYoYH7zSZy80QmWUu6C3kMLlKPIsWA/h6HmR
/Q2+ndmjDq1oO1di+mW+yfKsUAeJB0uuij9qhA5yKczCnLl7fLLh7wpiJ2P/buR0
dZDCXPOgbRrZaqUPhip+tWHhCMAVeen61p8OxkmPujuC4OmQpm8tWXvSfy86mW1z
Xg8VetkU74T5ZmwIE67BYdZyX6MH0EPVgy7t6mSL3PNOlqDM7WYntwklNWzvQ1dP
OIvqM8+fU0Jdr67wKTpuqVGE9mfobjoRNJXqyFWIVSIhJdGmxZHcvqRWNZZLbHRE
nnoHuFZDTyq2Mg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:53 2026 by rpki-client