Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          /XzlGSKjF+NwIU4SLhqH3/plO78UbhaYF4xUE4XJ+EA=
Subject key identifier:   44:68:E1:A3:45:BA:11:15:E9:C7:03:6C:A5:EB:D4:19:9D:13:7D:A8
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       019CAB6BBE3BB0082C37C4265170604B5EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          0975
Signing time:             Sun 01 Mar 2026 22:01:30 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:30 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:30 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: ChQe/ffsJI7D7Iy+Ef2Qlntn/Ij7Pv2nqE4wfwO3Rnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:be:3b:b0:08:2c:37:c4:26:51:70:60:4b:5e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Mar  1 22:01:30 2026 GMT
            Not After : Mar  2 22:01:30 2026 GMT
        Subject: CN=4468e1a345ba1115e9c7036ca5ebd4199d137da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:b3:4b:00:e1:7b:a3:12:5f:3b:ce:57:85:
                    2a:20:56:c7:fa:86:c0:ea:c5:18:9b:bc:57:b4:d8:
                    5a:31:6e:eb:2b:45:64:77:6f:dd:f7:cc:38:50:8a:
                    8a:08:f3:00:75:a7:6d:ed:d3:10:d8:5f:b9:1c:0a:
                    76:d6:79:8c:b3:88:b1:bd:ea:35:dd:88:10:89:61:
                    9d:b0:ed:59:aa:e5:b2:df:e2:e8:ea:ad:f4:e3:68:
                    7a:6e:24:5b:31:94:6e:f2:be:99:85:5c:ce:7c:e9:
                    04:b5:5f:f5:ca:59:81:52:21:27:4c:fe:1b:9b:de:
                    ef:c0:fb:9d:e2:65:1d:5d:57:53:50:3a:fe:d1:fc:
                    58:f4:da:ae:8d:d4:42:44:80:f4:94:b5:03:53:d8:
                    31:b5:91:8f:93:d7:a6:15:17:f4:6f:cd:4e:33:8a:
                    84:48:a6:75:92:9c:c5:40:1e:bf:d6:1f:b9:6a:8d:
                    9c:8d:fe:c4:70:96:ff:1f:cb:c4:20:da:fd:a0:14:
                    21:6a:d5:68:ce:16:9e:89:7d:2e:96:08:8a:74:c9:
                    8e:8a:b7:71:69:b4:35:0d:f8:5d:5e:ec:88:02:a8:
                    c8:1f:fb:31:13:c9:e0:9c:d5:d5:32:20:32:98:f1:
                    c0:e8:60:62:67:41:1e:29:3a:ac:16:4b:f9:6d:18:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:68:E1:A3:45:BA:11:15:E9:C7:03:6C:A5:EB:D4:19:9D:13:7D:A8
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:df:ec:bd:a4:00:a6:e3:a7:6b:a5:75:07:18:09:92:28:41:
         0c:e1:d5:00:b1:59:f1:42:f6:f4:75:3b:f2:0a:db:3f:e9:99:
         11:e9:04:fa:61:8d:49:fb:14:f8:66:45:42:e2:06:ad:d6:83:
         73:30:72:d5:b8:e2:e1:fc:1d:82:79:e9:d4:b6:ca:75:fe:80:
         70:72:42:d9:ee:47:cc:90:c5:a6:23:c5:52:b9:d1:80:6d:f2:
         8d:a3:49:7f:38:d2:a8:42:83:b9:94:6a:ed:41:f6:17:58:e0:
         ab:fe:50:0e:fd:bb:1c:30:e6:fb:d9:09:10:45:e3:ea:ae:56:
         b1:42:be:c6:43:7b:a7:4d:61:75:75:d5:b0:c5:05:c0:56:24:
         aa:82:96:72:05:0b:15:d6:a5:20:9b:84:78:de:eb:82:a3:e7:
         e7:aa:6b:25:56:3f:35:9a:13:03:7b:27:55:33:96:c6:41:f0:
         85:9b:7c:8d:1f:81:af:42:7f:8f:d4:6d:12:70:a4:14:36:4d:
         0a:45:74:4d:0d:ca:ec:d8:80:44:4e:57:73:a1:fd:7b:f6:f2:
         be:35:3d:99:a0:cf:8b:5d:7c:3c:ff:90:71:c2:a8:15:7e:a7:
         5f:7b:c3:96:30:ae:ad:4e:4c:f6:2a:68:61:13:0e:8d:b2:da:
         e0:94:db:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:18 2026 by rpki-client