Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          kMCKTunpyZKjvq6oclZ/HHVwNeyBQTGAqTmIhvKlW60=
Subject key identifier:   29:82:A8:80:56:BF:EA:41:5A:17:BC:85:56:92:CE:3F:32:08:2A:3F
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       019E1DC7378FB54E19704CC62704AAA19E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          01AE
Signing time:             Tue 12 May 2026 20:00:55 +0000
Manifest this update:     Tue 12 May 2026 20:00:55 +0000
Manifest next update:     Wed 13 May 2026 20:00:55 +0000
Files and hashes:         1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: DQuQMyzIuugv2YzbTxaexGV69RXCRts8y256dQKKfUY=)
                          2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:37:8f:b5:4e:19:70:4c:c6:27:04:aa:a1:9e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: May 12 20:00:55 2026 GMT
            Not After : May 13 20:00:55 2026 GMT
        Subject: CN=2982a88056bfea415a17bc855692ce3f32082a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:ce:97:1e:ba:c1:1f:48:0e:03:cf:db:34:
                    4e:3a:8f:02:da:09:e0:bf:75:de:f1:9d:db:b9:d4:
                    13:65:2b:a2:91:1e:6a:1c:50:53:2d:ec:d0:16:fc:
                    75:d4:11:42:c9:fa:90:77:e7:13:29:31:0b:59:39:
                    2a:a4:3c:89:c0:54:47:a3:c1:5a:a3:48:71:96:b4:
                    42:3d:7e:bc:2f:48:2c:b6:5c:ec:70:6f:43:d3:92:
                    de:74:f0:2e:3a:9f:e1:43:83:87:e0:ca:e8:1d:7a:
                    bb:f9:06:34:a1:b7:65:c4:7b:be:ac:f5:63:09:39:
                    36:c2:b2:c2:84:a7:ef:df:a1:79:cb:65:10:82:70:
                    05:47:cf:53:48:16:4b:f0:1e:fe:65:f4:5d:46:d2:
                    25:22:21:b4:df:27:79:ce:5c:0a:53:9e:d5:48:55:
                    97:c7:ec:26:fd:47:e7:4d:8f:4a:da:1a:f7:f4:d2:
                    06:3c:d6:f7:d1:e1:dd:0a:30:92:f5:fe:e9:df:d6:
                    fa:24:c5:74:85:13:6b:3a:e9:ba:71:d1:b9:2d:5b:
                    9b:2d:65:5b:02:e7:c5:41:c3:bc:06:69:a1:c9:54:
                    a4:c5:b2:b0:4c:30:02:48:88:4b:99:69:81:c2:f4:
                    e4:cd:d7:8d:fd:4d:01:ff:10:cd:e6:4d:5f:7c:89:
                    ad:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:A8:80:56:BF:EA:41:5A:17:BC:85:56:92:CE:3F:32:08:2A:3F
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:05:a9:25:50:86:c2:1a:5f:3f:49:6b:aa:df:fd:fb:99:1a:
         8f:db:5a:cb:f3:8d:a9:d0:f7:5c:f9:f4:c9:f6:df:9c:ff:41:
         65:08:52:08:c1:0b:e0:e5:7a:e5:a6:44:ea:83:37:a1:90:0a:
         a1:be:fe:59:b5:3b:ae:a8:f0:61:ca:e7:71:3f:af:7b:d2:e6:
         4e:d6:85:d6:d8:9b:6a:3a:95:0f:ae:d7:a0:75:eb:78:9e:e5:
         73:d6:eb:1f:af:2b:85:8e:bc:8f:7d:72:e3:2f:22:58:9d:e3:
         dd:f1:ee:21:df:c6:ee:18:9c:9f:96:23:b7:2d:97:5b:94:31:
         3c:9c:9c:c4:47:33:22:2d:57:35:32:d7:b6:83:a9:53:97:d1:
         47:d8:95:5a:71:a6:48:44:b0:aa:05:28:64:de:3f:1a:e7:3b:
         f3:09:ff:3b:48:ae:c0:05:7a:04:2b:5c:a9:7a:f4:4e:c7:41:
         3d:dd:32:b7:d6:09:bf:86:19:69:cd:ad:91:3d:03:2a:e9:75:
         77:c8:30:5d:70:c7:85:aa:db:28:36:2d:20:ed:20:e6:08:4d:
         59:88:79:03:94:be:96:af:d6:fe:85:5c:b5:56:8c:66:74:09:
         d3:f9:00:f6:3b:48:3a:28:28:83:3a:07:4b:9e:60:db:e7:46:
         82:f3:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:17 2026 by rpki-client