Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          vS3yqZnHRzd05jx5wi/zGXUU32sbx5ZTWIaE+DN9IYo=
Subject key identifier:   E0:A0:65:2F:87:54:9F:CD:66:DC:3F:C7:C5:4E:9E:35:3B:24:48:36
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       01988B0FAD5667ADDCAC82E923CBFA20CEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          0752
Signing time:             Fri 08 Aug 2025 19:01:56 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:56 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:56 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: Q3jTMgE+IKtEuIBGaDjTPm2C5Ahmz3SkvAkP3CGs8jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:ad:56:67:ad:dc:ac:82:e9:23:cb:fa:20:ce:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Aug  8 19:01:56 2025 GMT
            Not After : Aug  9 19:01:56 2025 GMT
        Subject: CN=e0a0652f87549fcd66dc3fc7c54e9e353b244836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:29:2e:9a:39:de:b8:64:b0:ae:2d:8d:2b:
                    f5:f1:b5:27:ad:13:59:e1:17:b3:b8:fa:17:77:45:
                    e3:60:fd:d9:16:9d:b4:f4:81:39:22:72:24:81:eb:
                    c1:1a:6b:e2:f5:0a:b8:e6:52:52:62:96:80:41:76:
                    a3:ed:e3:86:72:78:17:31:c1:16:47:dd:e1:33:a4:
                    fc:12:ba:93:b4:e0:ea:a9:84:f6:b2:40:84:75:c7:
                    63:1e:9b:61:6d:ac:53:bb:67:92:1b:35:ff:87:e5:
                    cd:44:b5:09:c0:89:0d:5e:d1:d3:f1:38:ff:be:4d:
                    1e:6b:df:2f:94:9e:46:90:97:5d:24:90:af:88:d6:
                    49:c4:7b:9a:4e:f1:16:23:10:df:20:d7:e7:e7:21:
                    b5:19:fb:89:a0:5c:8f:1b:30:58:23:fa:e7:c4:41:
                    d9:5d:37:24:3b:d8:0d:db:2a:d7:22:97:e5:c8:aa:
                    0e:0c:fa:7d:ca:88:de:18:32:c8:30:fb:32:fc:1e:
                    32:1b:6c:0e:c9:28:ae:cd:31:fd:2c:e9:5b:fa:0f:
                    87:c4:06:c4:46:3a:54:e0:96:b8:e5:60:d5:19:37:
                    f2:bd:6e:e0:30:c2:4c:23:94:0b:e8:b9:f2:1b:1b:
                    b8:42:17:54:b7:cc:ea:22:d7:7a:21:cb:2b:e6:be:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:65:2F:87:54:9F:CD:66:DC:3F:C7:C5:4E:9E:35:3B:24:48:36
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:a2:28:fb:44:98:32:54:ff:3f:99:4c:1f:a4:7e:90:b6:
         0f:ea:cf:24:6f:d9:30:cd:55:71:b8:6d:b0:79:c4:9b:2f:10:
         1b:93:d0:77:38:6d:18:76:a4:ec:96:3c:52:11:a5:cc:f4:c1:
         55:d4:d6:ff:b4:c4:cc:ef:b8:42:ff:9b:26:62:12:99:11:37:
         42:ed:f9:3d:23:ca:c2:d9:73:3f:66:23:8d:60:b1:e1:70:fa:
         93:ab:ae:ef:e3:1f:73:46:c9:46:1c:8e:0b:ab:c2:dd:e0:60:
         e5:b2:ee:c5:90:7b:47:4f:05:61:cf:44:9f:0c:a9:e2:fe:cd:
         0e:f6:bd:66:af:72:c3:64:0d:88:22:9f:07:c8:5a:e4:05:81:
         c3:d3:f6:e3:7e:0e:33:95:2c:64:fd:e5:bb:7a:be:05:53:d5:
         11:c1:84:41:26:8c:91:8f:0b:ab:bb:26:35:e0:6b:09:0e:93:
         d7:d5:ad:94:52:fe:06:d9:47:51:86:82:e3:75:cf:3a:6f:1a:
         1d:3e:2d:d4:3d:8b:ea:2a:14:06:74:30:8c:93:c9:8b:bf:ec:
         a6:a8:7c:f5:d5:e6:2b:62:bb:77:94:4a:da:e1:a7:05:28:c5:
         e7:e6:d7:bc:a3:67:07:e8:04:74:18:4b:44:02:0a:5e:7c:7d:
         66:29:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:30 2025 by rpki-client