Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          IdxsrNo0xzeMZVLk6xQzfGMRixzKWRhPq8RFCIeRAUU=
Subject key identifier:   EB:B6:1F:1C:C8:13:8F:05:B5:A2:31:F0:87:9A:BA:81:71:A3:2E:BE
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       01A0D9F217EBC6BB54D2DCD367B225F35938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 19:01:56 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:56 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:56 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: v482NsdbH1WChztIEgEFCfYwMDsaIBr8p8n9/Dor5VI=)
                          2: p-N3EdizVvRVLmkppfiLBw6qrVA.roa (hash: ONQ5To3WeYsyCD3RqkgWqFExSkcZnR7cjXwSN83Jcb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f2:17:eb:c6:bb:54:d2:dc:d3:67:b2:25:f3:59:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Sep 25 19:01:56 2026 GMT
            Not After : Sep 26 19:01:56 2026 GMT
        Subject: CN=ebb61f1cc8138f05b5a231f0879aba8171a32ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0a:74:ed:e2:27:b7:c3:dc:a4:4d:ce:9d:8b:
                    5d:19:d7:2f:48:cb:ca:a5:86:c7:c9:4b:cc:1b:1a:
                    de:8b:68:36:01:b6:74:12:64:19:cc:4c:43:9c:68:
                    8f:98:ba:49:2a:d6:c9:4d:91:85:07:83:9a:a2:0c:
                    78:ba:55:34:c7:52:13:a6:79:39:e5:f8:c9:f0:e2:
                    67:ea:91:9e:0f:f2:f7:3d:7c:c5:ca:61:48:7d:fd:
                    4d:fc:0b:de:af:bf:4f:9f:3c:b2:97:62:6b:98:31:
                    da:e3:24:63:74:55:7b:d9:b3:8d:e8:69:21:4c:64:
                    f1:77:ce:1f:2e:c9:f9:28:c2:5f:e0:4a:cd:cf:29:
                    1d:e4:7d:84:e0:f6:2a:69:e7:c6:b7:be:41:ff:44:
                    18:70:14:9a:de:8e:31:0a:b1:19:a7:46:72:c3:ed:
                    24:e1:33:59:7b:9a:0b:f6:b2:44:42:5e:7c:a4:03:
                    d0:ee:d4:31:94:f9:25:8d:c9:fb:94:89:19:29:81:
                    db:75:ee:8a:33:08:45:d2:e7:b4:35:b7:b7:a4:98:
                    3a:ef:ce:f4:dd:0a:63:7d:ab:e4:dc:73:f0:4f:77:
                    be:21:ae:c8:1b:bc:8f:38:6b:ff:d9:35:9f:d4:29:
                    2a:f6:f9:26:6e:8c:a5:57:32:01:e3:8e:80:5a:eb:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B6:1F:1C:C8:13:8F:05:B5:A2:31:F0:87:9A:BA:81:71:A3:2E:BE
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:00:c0:3f:8e:d0:a6:c2:5e:16:ca:f2:b1:29:29:1d:9c:b7:
         ab:49:2e:57:1c:02:4c:f2:18:3c:dd:0c:3c:b0:37:ab:73:ef:
         c5:05:a5:ae:e8:0d:a9:9a:68:f7:c6:70:3f:21:66:4b:25:fc:
         74:6c:3a:75:48:27:37:70:6f:26:f4:96:40:3d:d1:a5:fe:62:
         8f:da:70:c6:04:95:87:9c:53:8a:76:ea:9d:5b:70:5f:2f:72:
         61:c4:72:0c:95:b5:c4:1f:80:f4:60:95:a3:56:47:da:6c:bb:
         ad:cc:6c:af:6a:b9:e5:e0:fd:87:3a:44:1d:36:15:a9:c6:9a:
         56:80:fb:dc:29:41:7c:8a:95:d3:1e:03:b1:c1:66:f4:9d:a5:
         8f:1a:3a:a7:50:cf:66:87:9e:8d:75:97:8a:a3:cc:72:f4:ad:
         00:84:07:71:92:f6:38:95:67:6c:40:ad:4f:8c:1e:cb:60:65:
         61:7b:6e:16:d6:7f:9e:c7:5e:62:d2:67:a8:f6:12:db:15:ab:
         ad:f8:8c:ba:fd:c8:1d:6d:ae:39:86:7b:08:84:e9:4b:2a:bd:
         67:cc:5c:a7:ca:ae:64:b8:fc:f3:3e:73:3f:4b:d3:76:69:f8:
         94:2f:ae:2d:47:cb:c9:4d:eb:fc:c4:07:77:7e:00:58:f2:07:
         4e:11:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:09 2026 by rpki-client