Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File:                     AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier:          +yw9y8LVQDBIInmqzVXNKthG30f1DGMH1y9hq92KRvY=
Subject key identifier:   59:5C:5F:9A:7F:92:3F:64:58:15:23:96:00:F6:3D:B1:DA:E6:3A:8D
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer:       /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial:       019F91DA1756CF6B5AE7F9298E52A3E39910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number:          16CD
Signing time:             Fri 24 Jul 2026 02:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:16 +0000
Files and hashes:         1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: FI8BIhuvHb7qSJfBe7+uUmJqUPq1w67vUWeq8nVuboU=)
                          2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:17:56:cf:6b:5a:e7:f9:29:8e:52:a3:e3:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
        Validity
            Not Before: Jul 24 02:00:16 2026 GMT
            Not After : Jul 25 02:00:16 2026 GMT
        Subject: CN=595c5f9a7f923f645815239600f63db1dae63a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:68:17:f4:b4:3a:9b:66:73:35:90:59:19:
                    fa:5f:b0:a0:99:32:8a:0d:79:8b:fc:b8:a2:ce:09:
                    7e:5d:da:bf:e4:d3:4d:c9:37:0b:0d:58:9f:58:5f:
                    b4:94:19:b2:32:f5:11:f9:a8:2c:cc:77:d8:96:4f:
                    56:9e:ce:b7:72:4f:e3:e3:b9:19:31:d7:cb:fa:df:
                    19:cb:fd:65:b6:d0:d6:a7:ef:93:aa:82:bf:75:a3:
                    93:c0:f4:8b:3b:5c:98:97:07:1f:a0:88:8f:4f:21:
                    cf:67:b1:39:8a:70:4e:2a:4c:4c:45:fc:8c:7d:4e:
                    5c:85:8d:b5:66:d2:65:0a:71:93:86:5b:17:ec:e6:
                    54:0d:b6:fa:82:0b:0f:4f:2a:80:53:94:17:9e:4a:
                    57:10:f9:f3:e3:6f:ef:2c:c0:5a:79:40:e0:fa:8a:
                    31:4c:cc:fe:25:30:88:03:de:97:9f:19:32:a5:94:
                    a2:43:b4:ae:5f:97:fd:3e:e0:f5:7f:d8:4d:52:d9:
                    a1:09:1f:cc:e8:da:ec:89:49:f5:6a:74:4c:3e:8b:
                    30:03:27:86:0f:38:a6:be:0c:96:3a:a1:52:3d:16:
                    77:40:75:df:b2:fa:c3:cb:61:52:28:4e:cc:71:7a:
                    d8:af:aa:c8:60:e7:41:fe:a6:06:43:1c:b6:f8:70:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5C:5F:9A:7F:92:3F:64:58:15:23:96:00:F6:3D:B1:DA:E6:3A:8D
            X509v3 Authority Key Identifier:
                keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:78:05:c8:39:61:d2:e0:41:a1:6e:f7:1d:e8:31:14:b3:77:
         84:8f:df:56:6e:51:0b:ba:74:08:60:ea:5b:b6:6b:38:24:de:
         b7:54:02:72:e9:6a:94:a9:12:57:6e:82:19:c5:70:60:e2:b8:
         aa:05:5f:d4:1f:4c:bd:01:78:e6:5d:4c:de:50:fe:3a:4e:76:
         1c:c9:a8:4f:20:74:4b:99:ac:28:20:aa:cd:66:11:49:2e:06:
         6e:ce:5f:e6:a7:5f:7f:b5:cf:43:d2:a8:97:09:8f:29:9b:5d:
         b4:f0:eb:0b:9f:58:c9:9f:45:a1:24:90:86:20:83:bc:d4:cb:
         b3:f9:00:b2:af:86:d1:e4:5a:40:8c:fa:4f:f7:e4:70:90:eb:
         ff:86:0a:61:ad:80:86:95:26:74:b9:d7:57:3d:bf:8b:b1:1b:
         ee:1c:97:13:c3:3b:c5:60:e5:64:cc:36:27:29:4f:03:3d:63:
         44:68:6b:2d:37:f9:b9:54:97:7d:c4:0b:3a:60:ea:0b:44:b0:
         96:30:1e:9e:b6:e9:c1:08:a7:27:e0:59:63:ae:0d:00:ec:29:
         55:c9:e9:ee:9e:63:a5:c6:8c:64:a2:3c:ba:a7:20:26:be:54:
         aa:11:ec:81:72:ed:db:0c:c7:32:78:c9:bc:3e:b2:80:f4:da:
         bd:25:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:23 2026 by rpki-client