Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          FVgJqGOwvfsxpBwgyIdWvGsSEF1+2DQVdWp/bjp2Yt8=
Subject key identifier:   A8:75:18:FE:39:D3:A3:59:3C:56:6B:58:25:7C:A3:3E:B9:6E:B0:62
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       019EBFFF25B81D5ABE7274FEEB98D5CCE434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          0202
Signing time:             Sat 13 Jun 2026 08:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:30 +0000
Files and hashes:         1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: 7s8vsB+DJdwmIbuORBcCc24HiEqaMvAeCUkwz9KyN9g=)
                          2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:25:b8:1d:5a:be:72:74:fe:eb:98:d5:cc:e4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: Jun 13 08:00:30 2026 GMT
            Not After : Jun 14 08:00:30 2026 GMT
        Subject: CN=a87518fe39d3a3593c566b58257ca33eb96eb062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:13:d1:a5:1e:70:d4:76:5c:86:e1:e9:47:
                    9b:27:cb:8b:23:14:cc:44:dc:fb:bd:de:d8:64:95:
                    f4:aa:fb:7f:5f:86:28:2f:9b:83:58:5f:17:ca:ef:
                    c2:af:6b:63:30:f0:f0:4e:b5:2f:d8:df:fd:09:df:
                    18:55:19:2e:ba:40:a7:cc:7b:53:42:71:a3:a5:87:
                    5a:f1:79:be:6f:72:d4:b9:eb:a2:a5:5d:ec:7c:d2:
                    51:96:d8:ee:e6:a9:fa:bb:3f:51:e2:ff:2e:c7:70:
                    45:ab:7b:28:d5:b2:a9:ab:27:d1:a7:1c:cc:7d:1c:
                    59:a6:5a:a6:97:97:a5:7e:e9:cd:2e:6d:5b:98:a3:
                    e0:da:f3:2e:e0:e2:e8:77:2c:8f:24:ad:f0:7e:a9:
                    89:dc:05:83:65:93:9b:14:0c:46:d0:d2:e2:ab:f7:
                    8a:e9:b3:00:c5:98:00:92:ac:09:e5:cc:be:69:01:
                    84:48:ac:02:af:7b:d7:ce:2f:3c:18:05:52:48:a0:
                    27:e9:70:73:5d:c9:ab:64:b4:f1:82:69:0a:cf:6a:
                    83:8e:16:dc:39:55:63:27:c8:74:53:13:56:95:ac:
                    44:64:99:f5:4f:ce:8a:81:53:c9:45:bb:d2:1e:77:
                    ab:e9:31:bf:29:17:e2:4d:56:69:72:c2:d1:d4:b0:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:75:18:FE:39:D3:A3:59:3C:56:6B:58:25:7C:A3:3E:B9:6E:B0:62
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:61:ac:28:be:a4:d4:0b:3d:e9:25:5f:cc:20:d8:6c:24:
         a0:66:75:5a:42:6e:db:46:73:6f:ea:e5:de:e2:bf:51:43:8c:
         56:1b:ad:4e:a5:2f:46:70:a3:28:d7:0e:78:7b:22:9c:6c:fe:
         74:7d:ff:48:85:da:c8:97:80:1c:d3:47:fa:5e:94:f4:36:bf:
         d1:d8:e7:ed:2b:07:d9:53:51:96:6d:92:78:21:35:11:f4:89:
         c4:78:28:12:21:01:13:17:75:0b:ec:ba:83:77:c8:34:87:6b:
         a1:60:30:16:d2:f7:22:0d:dc:e8:c9:35:ad:d0:4f:e2:15:10:
         f7:f6:ba:ff:fb:6c:39:50:34:7d:86:a4:8b:07:00:f7:50:f0:
         7c:7b:db:6b:a8:4d:e7:74:6a:01:62:89:3f:27:05:0c:79:b3:
         45:0d:18:df:a8:e1:44:71:5d:7d:88:76:09:2b:41:0a:3a:09:
         ef:56:32:fd:db:e6:ab:38:47:df:0d:66:32:74:c6:55:db:44:
         da:b5:ff:34:c2:98:88:15:8b:dc:f8:70:d3:b5:07:e5:42:b1:
         8e:68:bc:69:0c:28:31:12:61:43:09:47:92:f8:c4:0e:f5:53:
         84:a4:5d:f6:12:85:5a:f0:ad:de:47:e9:b7:3c:70:b7:30:b9:
         78:0e:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:56 2026 by rpki-client