Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          rTwnbqROqVoH7mNMCEwwpXd7Ocx/+fmDszPMsCv1s58=
Subject key identifier:   BA:29:C3:28:5E:94:4B:9E:D1:0C:C8:FB:4F:64:BA:57:84:8C:35:41
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       019D9E519DEC0AFCE07B665C6D14DB13F1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          016C
Signing time:             Sat 18 Apr 2026 02:00:42 +0000
Manifest this update:     Sat 18 Apr 2026 02:00:42 +0000
Manifest next update:     Sun 19 Apr 2026 02:00:42 +0000
Files and hashes:         1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: Cb4wW4+1gOG+knR3AfrI1azx9UifNdw/ZTyIozujgvs=)
                          2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:51:9d:ec:0a:fc:e0:7b:66:5c:6d:14:db:13:f1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: Apr 18 02:00:42 2026 GMT
            Not After : Apr 19 02:00:42 2026 GMT
        Subject: CN=ba29c3285e944b9ed10cc8fb4f64ba57848c3541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:fe:a4:51:10:ec:54:1b:46:d2:fb:f9:26:
                    9d:d1:81:ef:c4:e8:a4:88:92:bc:fe:c7:5f:4e:8f:
                    6c:ea:b9:3e:02:85:62:5a:58:fb:bb:70:b2:59:c9:
                    4f:d0:75:12:eb:78:d4:83:0d:72:8c:86:ee:0f:9b:
                    ed:fd:57:e1:9f:1c:c7:14:94:40:ac:40:a1:df:f5:
                    7b:27:c0:b3:78:4b:0a:be:f2:21:19:78:14:8b:39:
                    98:e5:af:36:9c:00:1a:88:34:5a:65:bc:0f:03:e3:
                    04:cc:09:55:69:77:88:8e:7a:6a:28:7c:2a:12:fa:
                    d0:10:8d:c4:b6:64:a4:04:f4:d7:bc:38:35:b8:06:
                    68:ef:3a:45:66:29:f4:d8:b5:f8:b8:d5:59:ec:50:
                    0c:f2:f1:6b:98:08:b2:f2:99:09:9d:96:6e:7e:b4:
                    f6:50:8d:d1:a7:52:a2:c4:f1:14:38:2f:a8:7c:a7:
                    aa:e5:de:81:cd:4a:00:1a:07:fe:87:6a:42:d2:b6:
                    be:24:a1:c3:75:63:ee:02:06:b1:52:6a:f9:62:a3:
                    74:81:35:2b:e6:6a:06:ae:f1:b6:89:9c:71:22:c1:
                    5e:d9:c1:24:26:03:2b:11:7c:35:5e:20:55:10:c4:
                    dd:e3:0a:4d:20:bd:8e:b9:a7:96:93:4b:e1:7e:0e:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:C3:28:5E:94:4B:9E:D1:0C:C8:FB:4F:64:BA:57:84:8C:35:41
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:6a:69:d5:10:a0:dc:ec:5c:cc:cc:56:dd:31:98:93:91:
         27:5e:86:21:e1:ff:e9:b3:96:56:19:89:ea:29:56:6a:a1:5e:
         52:8e:9b:4d:65:2e:74:92:50:63:df:95:0b:ce:4d:45:7a:dd:
         a7:2d:a5:5a:8a:2a:e7:1f:f9:b9:86:e0:a8:e5:12:96:c9:82:
         c0:cc:c8:8b:d1:45:95:06:24:55:74:77:ba:62:cf:9f:21:41:
         8d:d8:6e:f7:e0:39:d7:cc:04:5d:3e:66:d7:02:2f:df:70:3b:
         23:89:53:ec:f2:8d:9d:0a:01:51:e2:18:a8:43:18:e9:f1:98:
         61:6f:f6:10:55:5f:18:08:b7:40:b0:0f:9e:a6:d2:83:f4:d7:
         11:44:1d:af:d3:b5:92:9c:7b:58:c2:59:b7:a8:ba:e4:cc:09:
         03:8b:81:ae:2d:56:a6:e9:34:61:f2:9f:9b:e2:5b:3d:72:e9:
         33:17:b7:69:73:c5:9d:e6:4a:93:47:43:76:35:6e:33:c0:1c:
         b8:cf:30:72:c1:c8:9c:18:18:ed:af:ba:e4:c1:9f:0f:e5:1b:
         49:16:a3:54:ac:4d:c7:c7:48:ab:ca:a4:25:ec:82:da:2a:ec:
         fc:32:cd:5b:70:01:bb:86:1c:a0:53:fc:f1:33:7e:51:77:f9:
         86:66:27:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eUZ3sCvzge2ZcbRTbE/GhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz
YjAzZDMwHhcNMjYwNDE4MDIwMDQyWhcNMjYwNDE5MDIwMDQyWjAzMTEwLwYDVQQD
EyhiYTI5YzMyODVlOTQ0YjllZDEwY2M4ZmI0ZjY0YmE1Nzg0OGMzNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtP+pFEQ7FQbRtL7+Sad0YHvxOik
iJK8/sdfTo9s6rk+AoViWlj7u3CyWclP0HUS63jUgw1yjIbuD5vt/VfhnxzHFJRA
rECh3/V7J8CzeEsKvvIhGXgUizmY5a82nAAaiDRaZbwPA+MEzAlVaXeIjnpqKHwq
EvrQEI3EtmSkBPTXvDg1uAZo7zpFZin02LX4uNVZ7FAM8vFrmAiy8pkJnZZufrT2
UI3Rp1KixPEUOC+ofKeq5d6BzUoAGgf+h2pC0ra+JKHDdWPuAgaxUmr5YqN0gTUr
5moGrvG2iZxxIsFe2cEkJgMrEXw1XiBVEMTd4wpNIL2OuaeWk0vhfg6z2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLopwyhelEue0QzI+09kuleEjDVBMB8GA1UdIwQY
MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt
Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy
LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYFqadUQ
oNzsXMzMVt0xmJORJ16GIeH/6bOWVhmJ6ilWaqFeUo6bTWUudJJQY9+VC85NRXrd
py2lWooq5x/5uYbgqOUSlsmCwMzIi9FFlQYkVXR3umLPnyFBjdhu9+A518wEXT5m
1wIv33A7I4lT7PKNnQoBUeIYqEMY6fGYYW/2EFVfGAi3QLAPnqbSg/TXEUQdr9O1
kpx7WMJZt6i65MwJA4uBri1Wpuk0YfKfm+JbPXLpMxe3aXPFneZKk0dDdjVuM8Ac
uM8wcsHInBgY7a+65MGfD+UbSRajVKxNx8dIq8qkJeyC2irs/DLNW3ABu4YcoFP8
8TN+UXf5hmYn3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:49:54 2026 by rpki-client