Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          QLUNb8EZ4xEs3qPPI0lhHoBH9C9xO3+2E+/QB/QfP+M=
Subject key identifier:   54:AC:42:CB:07:6D:BD:7E:88:66:74:37:1F:53:A2:DB:2B:A1:DE:63
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       01A0C40DC4337A68ABB9458719DC48E308E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          0B94
Signing time:             Mon 21 Sep 2026 13:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:31 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: TSbHL6d5j68w5DSsjrxdJfO9RL+yLq//cRVEWIOfsu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:c4:33:7a:68:ab:b9:45:87:19:dc:48:e3:08:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Sep 21 13:00:31 2026 GMT
            Not After : Sep 22 13:00:31 2026 GMT
        Subject: CN=54ac42cb076dbd7e886674371f53a2db2ba1de63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:02:95:3a:ee:e5:7b:17:d1:cd:40:34:a4:5a:
                    b6:aa:45:6f:23:82:77:13:07:1f:1f:4a:c2:c1:0a:
                    fb:cd:79:3f:6a:57:df:11:be:41:76:5b:55:c4:e9:
                    2c:ad:d4:7c:d0:87:24:c1:d3:0a:ff:d0:ce:7e:11:
                    7d:1f:78:3b:af:da:e4:b5:05:19:8d:a2:73:ce:87:
                    cf:c1:35:e2:f6:cc:44:1b:74:13:3f:f0:c1:1d:f5:
                    0a:2f:e6:39:2e:99:09:e1:81:7b:3c:e9:f2:b2:51:
                    78:96:f6:06:78:ac:c6:4d:5b:08:7e:df:f0:ec:9b:
                    4a:f2:81:21:04:b6:35:69:92:c8:45:3e:43:26:1a:
                    cd:a9:af:5a:e2:ea:32:77:39:88:99:71:2c:6d:88:
                    c2:d3:66:7b:3a:27:7e:fa:51:03:a6:68:a5:aa:9c:
                    44:66:ad:fa:f4:07:28:e9:c1:a3:c9:81:b5:60:79:
                    cb:16:62:4a:21:40:86:66:8e:72:e8:7d:3b:9b:d7:
                    37:22:8a:61:c4:f3:e7:57:21:33:b3:9e:a2:a2:35:
                    90:55:48:51:e1:b3:04:4c:b1:c7:aa:1e:a1:65:07:
                    ae:a0:4e:34:8e:da:15:f7:d9:45:65:64:ba:8f:8e:
                    3d:f4:80:d3:d4:e4:cb:f4:fb:a1:1d:40:d9:e1:ff:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:42:CB:07:6D:BD:7E:88:66:74:37:1F:53:A2:DB:2B:A1:DE:63
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c1:9e:ec:c8:10:e2:db:b9:3a:bd:65:fb:87:20:87:d2:28:
         6d:41:81:b1:8c:61:49:4b:ee:92:32:ca:26:8d:a0:2c:2f:db:
         77:f0:26:e5:99:99:9e:ec:3d:45:b6:b5:9c:e6:f2:7c:38:49:
         e2:c6:33:e1:c7:13:22:f2:15:5e:ba:3e:9d:4a:1b:d8:67:1a:
         2a:43:d0:3a:4a:e3:93:27:96:07:3c:d7:18:6b:2f:14:46:06:
         10:84:2d:49:67:ef:29:23:36:98:e8:ce:ad:be:98:02:de:27:
         9f:66:e4:61:e8:12:0f:1a:24:2a:a3:23:b0:6c:47:59:6c:fd:
         40:76:dc:7c:c1:9f:6d:f1:51:71:10:69:66:15:b6:1d:da:08:
         48:a8:d5:21:8f:67:09:9c:d7:dc:61:e8:65:42:fa:99:29:eb:
         a5:dd:c7:2a:68:d9:5e:89:b8:23:80:24:c2:5e:6f:1d:18:3a:
         0d:ca:dd:55:1b:84:8d:20:50:0a:46:4e:fd:08:3d:bb:ff:8b:
         61:1b:2e:55:c4:46:8f:47:af:45:c5:f3:76:f5:c6:ed:05:8e:
         f2:4d:64:66:d2:05:e1:c0:45:9b:12:21:b8:6e:5b:ed:18:a1:
         97:0b:ef:7e:30:9d:83:b1:2b:ab:5e:63:b4:00:5a:6c:22:25:
         17:e3:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:23:24 2026 by rpki-client