Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
File:                     AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft (raw, json)
Hash identifier:          yjNsn7G2Bfpta0W4beQF3Dt36bY2zRci/KoNHWdXXlo=
Subject key identifier:   D0:AC:A0:3E:76:EA:A9:89:65:F8:74:FA:36:9E:19:46:B5:88:9A:81
Authority key identifier: 00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16
Certificate issuer:       /CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
Certificate serial:       019D27DF5A6D720D739FEEAEBB1B7DD18376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
Manifest number:          0244
Signing time:             Thu 26 Mar 2026 02:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:42 +0000
Files and hashes:         1: AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl (hash: nchVNRYvgvaDkn67ZBFE6G55EIipZnbmT0n60PMhchw=)
                          2: TlGLs-ZqoCYcTCIJOkxtEh99Kp8.asa (hash: vIICmhEdB9777okYSyHBv9wIM9j2JAlWk+yTt8NlhuA=)
                          3: XanHRUj2-HyDyPZ77hmHcGeG2lg.roa (hash: ugHcdlNxi9RfyCrcntqXJ3Nl+aNon55mzqLGxiiLo0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5a:6d:72:0d:73:9f:ee:ae:bb:1b:7d:d1:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cadc5c7ba262a9a5b1d087369da5be797fba16
        Validity
            Not Before: Mar 26 02:00:42 2026 GMT
            Not After : Mar 27 02:00:42 2026 GMT
        Subject: CN=d0aca03e76eaa98965f874fa369e1946b5889a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:52:f3:2c:d3:4b:12:40:64:d4:b6:47:cc:
                    da:10:64:26:cd:16:ce:a0:50:7c:47:f4:c6:ce:f4:
                    f1:a2:47:ac:ff:44:ed:93:4c:5d:ed:da:68:77:ca:
                    07:65:52:4d:6a:a5:1f:b6:0d:3e:4b:f1:6d:6b:78:
                    ee:0a:85:87:36:b6:29:af:17:69:c0:b8:99:23:fa:
                    1d:e5:bd:06:b1:03:6f:87:7d:ed:ee:e2:4e:f5:46:
                    b3:df:a3:fb:7c:01:ee:f5:c0:4c:07:ab:6e:ba:dc:
                    61:19:b1:fd:fd:ab:cc:ac:c2:02:c0:6d:a2:c9:3b:
                    9b:3a:3b:59:3b:b6:6d:80:ff:07:8b:e8:f6:50:c1:
                    86:18:00:90:19:1c:a0:9b:97:02:a8:e6:15:47:06:
                    4b:cf:a6:9c:fd:83:b0:96:67:ee:40:6a:1e:ce:7c:
                    bd:65:95:26:cf:38:28:89:a4:85:11:a9:8e:27:5e:
                    dc:43:a8:13:33:dc:1f:eb:3f:6e:b1:f9:a3:d8:b6:
                    eb:47:91:08:01:ef:96:cd:f3:32:1c:e3:cd:c6:14:
                    fc:04:08:5e:32:e2:7e:59:ae:98:da:3e:ce:30:b5:
                    2b:c2:07:93:a1:1c:55:9c:2b:f5:20:42:a9:90:35:
                    c0:be:2b:cc:f5:69:a0:75:79:3d:8b:bd:53:cb:c5:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:A0:3E:76:EA:A9:89:65:F8:74:FA:36:9E:19:46:B5:88:9A:81
            X509v3 Authority Key Identifier:
                keyid:00:CA:DC:5C:7B:A2:62:A9:A5:B1:D0:87:36:9D:A5:BE:79:7F:BA:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMrcXHuiYqmlsdCHNp2lvnl_uhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e2daba-16a0-418a-b7c5-34a4845c1d8c/1/AMrcXHuiYqmlsdCHNp2lvnl_uhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:92:a6:2e:6e:44:32:32:56:f4:6b:d2:80:69:16:dc:2c:
         c4:91:13:93:66:3a:b3:30:c7:90:ca:ca:3b:49:dd:ca:4f:c2:
         46:cb:0d:b3:a0:25:f1:e4:e2:b9:87:25:11:72:b1:28:48:05:
         35:15:13:66:68:6d:1f:6f:85:88:f8:89:47:00:48:12:c5:6f:
         02:b9:82:6e:30:33:87:82:15:34:b4:d2:a7:57:ae:24:05:c4:
         a4:da:dd:9e:2d:be:36:d8:49:ad:2d:2a:df:54:6e:3e:5b:1b:
         bb:b1:f7:d7:9e:19:e9:59:06:9e:34:8f:94:df:08:94:26:6f:
         4f:cd:33:93:bb:21:62:52:bc:78:78:1a:01:21:d1:06:a5:a9:
         a9:46:79:aa:b3:20:40:30:3d:f0:4e:f7:6e:94:d6:42:44:67:
         dd:db:38:c6:65:59:b1:ae:9b:fc:0c:97:c3:79:67:c1:3e:78:
         99:cc:ca:23:99:13:8a:a6:b5:73:c0:8f:16:f3:35:a3:1a:14:
         28:54:3d:76:fb:54:39:eb:16:8d:6c:85:2b:2e:2b:34:23:5f:
         66:4f:4f:2c:31:0a:f2:0d:4e:84:6c:0b:7f:c0:15:35:c5:a5:
         e7:11:21:b2:17:57:46:cc:4e:ec:23:0e:76:87:47:bb:62:03:
         06:0f:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:42 2026 by rpki-client