Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          uZkZuWK4B1s1kxDp01Z6kpeP8O9jfyevrzr3/ioWFyc=
Subject key identifier:   03:19:E3:A9:D9:AB:E3:84:F1:8C:B0:A9:D1:FF:50:60:7F:0E:41:85
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       01A0D5028B06E3B9C3C6636D6B0199E4FC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          0317
Signing time:             Thu 24 Sep 2026 20:01:48 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:48 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:48 +0000
Files and hashes:         1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
                          2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: L6KaZHWw8eQvS408slEPQfgvkfOGtvjN6cT0MFCjwgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:8b:06:e3:b9:c3:c6:63:6d:6b:01:99:e4:fc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: Sep 24 20:01:48 2026 GMT
            Not After : Sep 25 20:01:48 2026 GMT
        Subject: CN=0319e3a9d9abe384f18cb0a9d1ff50607f0e4185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0e:44:0b:66:14:24:04:e9:91:6f:3e:72:96:
                    3e:e6:77:60:2c:b1:1c:b7:13:7d:50:1d:ab:41:4b:
                    7f:39:4c:0f:dd:32:c5:c0:7f:fe:15:a7:f3:d6:c6:
                    11:d1:d8:24:9d:fc:14:30:f3:53:7a:71:0b:b6:a1:
                    00:06:29:a8:31:79:c1:2b:ea:70:d4:a8:e3:a1:90:
                    0c:57:03:66:25:0f:34:fb:9b:14:11:6f:c2:e3:3e:
                    0a:6e:b3:aa:a5:31:1c:bb:8e:cf:fd:15:0e:04:dd:
                    0b:c1:da:66:6b:d8:43:86:e6:e6:85:34:95:97:e9:
                    e8:db:91:7e:15:b2:89:bd:e2:f7:fe:f9:48:d2:c3:
                    44:a7:62:60:34:90:07:fa:ad:3a:47:d2:da:56:f3:
                    1f:7b:fd:68:eb:f1:cf:8f:94:e6:21:49:5e:c6:53:
                    99:e9:ab:32:41:84:eb:c1:52:f3:c2:2b:8d:62:f2:
                    fd:d6:d2:b4:31:5a:21:3b:93:16:d8:3c:9f:74:ed:
                    db:9f:5a:97:02:1f:3a:9d:4b:c0:67:07:3b:6a:68:
                    88:d2:cb:31:9f:69:61:9e:a6:d6:24:b8:86:19:c3:
                    22:00:7e:a0:fe:af:c4:64:fb:8b:11:87:7a:4e:31:
                    4f:03:08:2f:4c:89:e1:78:9c:f9:47:ae:3a:20:f3:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:19:E3:A9:D9:AB:E3:84:F1:8C:B0:A9:D1:FF:50:60:7F:0E:41:85
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:04:ed:a2:56:25:62:8a:7b:26:a8:a1:79:97:f2:7e:07:
         39:0b:ef:fd:f5:14:0f:6e:8f:68:8a:b8:12:10:a0:85:7e:93:
         7c:79:23:45:6a:84:a4:74:95:d5:c7:68:e3:ac:1a:e3:98:81:
         ca:dc:6d:ce:10:74:84:15:e0:cb:39:62:30:06:de:9f:c3:6d:
         4d:46:0e:72:50:4e:10:ba:cc:3e:4e:c6:25:5a:86:82:0f:9a:
         be:ba:1f:d1:1f:a5:b7:66:04:a6:89:31:17:a9:ae:c0:45:92:
         4a:bd:b1:e5:46:fe:d4:40:88:98:6f:a7:1b:39:72:2d:fe:16:
         70:fd:4d:92:c0:5a:84:21:8c:c9:6a:9e:e8:5a:00:a7:b2:e6:
         54:5b:ba:68:c7:6c:ed:f9:75:e5:a0:b5:df:20:13:ce:be:85:
         32:23:13:b2:b1:cf:f7:df:eb:04:15:73:45:a2:cf:17:d2:df:
         11:42:10:18:ee:7f:c1:08:f3:51:34:ec:3f:54:a3:cb:17:3a:
         90:a0:90:d0:5f:cf:a4:86:3e:19:90:5f:f4:f1:ad:2e:f5:d2:
         b3:32:b0:49:04:7a:3d:26:5c:36:4b:e0:e1:56:7a:54:fb:79:
         ce:f0:31:c1:4f:3f:89:40:7e:fa:bd:f9:88:05:c9:3f:88:74:
         5b:a5:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:44 2026 by rpki-client