Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
File:                     aMat-O7KvBBS4feD07zkocXbVBA.mft (raw, json)
Hash identifier:          E6MxHmtAcg+huFMxJgRFQ/66druMT77SbmiIEwGcM2c=
Subject key identifier:   8F:55:35:DA:10:2B:C8:18:C0:EB:CA:64:76:F6:16:11:71:7A:4D:80
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Certificate issuer:       /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial:       019F91DAD8E78900A7E96F0DF07B550A6DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
Manifest number:          116E
Signing time:             Fri 24 Jul 2026 02:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:06 +0000
Files and hashes:         1: 9jVIyUNC_jtqSz5QgzPFxhRriJU.roa (hash: IMd9gg9EGAXTuUYDKOVGT5KovaOc0OoHmBxOdLPHyxE=)
                          2: IK8rxF0fNpLSKD9Dqm0lXn3gA78.roa (hash: 727Jxwhi3j4ZaKKaAIMgbayUGpDpki6NjCGsamcTESU=)
                          3: aMat-O7KvBBS4feD07zkocXbVBA.crl (hash: GL3cgWmkr9RT+ZaOKWToqhhKG7paeOFu/FxIGYa/auk=)
                          4: oRyAm1tY1PPV2HUhoPE8LGygZp8.roa (hash: v2TjvG71n61mmtBwzf8Bvh8DYEC21zypAmmL8cNAlmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:d8:e7:89:00:a7:e9:6f:0d:f0:7b:55:0a:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
        Validity
            Not Before: Jul 24 02:01:06 2026 GMT
            Not After : Jul 25 02:01:06 2026 GMT
        Subject: CN=8f5535da102bc818c0ebca6476f61611717a4d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:bf:1c:fe:4e:69:22:5c:62:d9:d7:96:f6:
                    f6:5a:b6:9a:f8:65:e3:60:b0:c1:c9:19:03:e8:36:
                    04:17:43:af:55:75:ad:5c:53:71:49:58:df:6f:b3:
                    60:f5:a5:3c:6d:bb:f8:d0:ac:1e:85:1b:0e:9b:c8:
                    f3:fc:c0:44:0f:c8:ec:96:83:5a:0f:fe:0d:38:b1:
                    f2:2d:34:ae:1c:0d:27:fd:e7:8a:6b:bb:ac:c4:3a:
                    44:29:9a:ba:f9:c1:33:d4:74:e8:05:b1:e4:36:54:
                    8e:83:44:56:03:4d:ce:92:a3:72:15:fd:1b:e9:a3:
                    05:8f:58:72:b3:ff:9b:36:ec:2c:4f:03:5d:c3:3b:
                    26:5c:9e:36:70:13:06:e5:85:e1:03:72:05:3f:6c:
                    24:b3:de:b2:c3:7f:b5:9a:68:de:ea:5c:55:51:9f:
                    71:78:86:17:8c:33:90:20:c9:f4:95:da:6f:b3:72:
                    27:18:ee:6f:a1:34:4b:1b:b5:15:ff:05:54:40:74:
                    3c:88:93:5a:41:f2:03:de:b0:fb:0c:38:69:ed:6d:
                    5e:77:fc:f5:04:44:3e:cb:97:60:fa:7e:97:26:e7:
                    c8:19:b2:c7:fe:96:5f:7d:a7:47:95:a5:60:64:67:
                    db:ee:91:7d:4a:8d:9c:ab:ea:a7:f5:d5:b9:cd:16:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:55:35:DA:10:2B:C8:18:C0:EB:CA:64:76:F6:16:11:71:7A:4D:80
            X509v3 Authority Key Identifier:
                keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:c9:67:29:83:14:27:f7:78:b0:3c:9a:ff:bb:68:03:70:
         b3:39:05:65:47:08:e4:fb:0a:6f:8d:0d:0d:e3:14:b9:14:8b:
         17:08:8e:0f:5f:12:59:c2:a7:34:52:ab:6b:e7:3b:3b:69:14:
         77:7d:e5:53:df:29:b3:12:b9:ca:df:4a:91:a7:3c:95:97:e5:
         cd:e7:88:c4:9a:21:18:8d:e5:b8:10:bc:d1:af:b9:5c:1a:66:
         6f:c0:ca:e2:8d:48:b9:45:24:99:7b:62:2b:97:28:eb:7d:88:
         f5:7c:9d:42:41:d7:ee:06:ae:a0:ee:bf:9a:f4:ed:cf:64:29:
         93:81:82:40:f5:40:ec:12:fa:26:09:39:bb:64:2f:d3:5b:fc:
         d3:25:fe:6d:d9:26:59:e4:82:33:d2:48:65:d8:3e:69:b4:be:
         55:1d:ce:7c:6a:11:dd:4b:2a:d0:21:b6:76:be:ae:b4:5d:ef:
         67:cd:84:5b:d4:c4:ca:88:32:6c:82:b5:77:ab:3f:bd:e8:3b:
         9f:e2:e6:96:24:4d:18:df:21:2d:63:31:60:95:c9:e8:c3:31:
         3a:69:88:08:6c:ec:b9:03:68:f4:9b:04:e0:c2:75:f0:f3:b8:
         57:bd:0f:0f:dc:ad:d7:bf:10:16:d7:1b:3d:2e:fc:c0:da:90:
         c5:eb:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:24 2026 by rpki-client