Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          X2Xv2dT1iX8U8MsAZ83MDcLlFfoYsxAvKTHoGbTAX3s=
Subject key identifier:   8D:78:6B:A3:BF:46:9F:4F:47:61:B2:F1:F9:A4:18:64:EF:34:F8:E6
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       019F8EA2E4058AABB6ED517C61A65EF252F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          026E
Signing time:             Thu 23 Jul 2026 11:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:07 +0000
Files and hashes:         1: 4WIEmWvMFKIeFC4RDJ68apDVAe0.asa (hash: VSjOOETa3AtWZP35ehAJCwwZ8VzUb3MAyq+7YzEjsU0=)
                          2: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: USz5N9saOdWsh3+aKG8ox5uLxaf7drmA9WApCJHhyWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:e4:05:8a:ab:b6:ed:51:7c:61:a6:5e:f2:52:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: Jul 23 11:01:07 2026 GMT
            Not After : Jul 24 11:01:07 2026 GMT
        Subject: CN=8d786ba3bf469f4f4761b2f1f9a41864ef34f8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:33:13:1d:27:5d:5a:59:88:9c:dd:87:03:
                    02:09:51:1f:63:a3:be:b5:2f:cf:3a:a7:82:14:96:
                    8f:67:68:35:e9:24:51:f0:40:47:bc:17:40:ea:5b:
                    04:26:27:bd:64:cd:2e:39:b3:32:32:22:d5:34:0e:
                    ab:30:ad:5c:f8:05:34:85:67:b9:fb:90:7a:ce:7a:
                    13:fa:86:05:56:03:35:be:f8:4d:fb:b3:9c:b9:ec:
                    25:77:6d:f1:4d:a6:33:e7:f1:b5:73:97:9d:47:dd:
                    ab:ef:e4:4c:55:b5:44:6c:dc:8a:be:dc:70:95:46:
                    4d:fa:a2:07:17:28:48:5e:98:b8:66:61:df:f2:2f:
                    16:b4:8f:2a:0e:3c:87:5a:e9:59:f8:1f:a6:66:30:
                    33:dd:60:92:1b:c2:40:22:99:1b:5d:a8:f2:a9:b0:
                    6c:79:07:9e:9b:84:f9:db:b9:a9:00:1b:12:05:07:
                    b6:cb:23:1e:3a:e2:c4:b3:02:cc:91:77:d4:df:c9:
                    ae:fc:46:d7:79:59:21:b1:65:33:2e:94:64:dc:e9:
                    65:5f:37:2f:7c:b2:5c:1b:cf:bb:8a:46:e2:60:53:
                    ac:af:25:66:de:84:16:05:36:94:ee:e6:58:82:78:
                    96:a8:97:00:26:b4:c9:b5:8e:15:b4:47:9b:79:2c:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:78:6B:A3:BF:46:9F:4F:47:61:B2:F1:F9:A4:18:64:EF:34:F8:E6
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:2d:7c:48:96:59:81:07:de:2d:58:f6:47:ec:97:97:03:
         43:aa:09:67:74:57:f5:88:5e:33:3d:d3:86:2a:63:37:33:7b:
         bf:ba:23:3c:fe:dc:f6:52:01:1a:e4:d8:e7:85:46:ef:6e:a2:
         8e:b8:21:98:a3:6f:5e:07:3d:e8:5b:36:0f:ea:05:44:fe:94:
         ab:8d:ce:2d:58:8f:ed:a1:66:f0:f9:e5:b3:ce:31:89:af:62:
         1b:24:47:13:2b:7b:d1:f1:55:fe:7b:86:d4:59:ec:c5:a3:16:
         b8:6a:79:66:69:69:45:9a:50:36:3d:19:ac:82:a7:6d:71:68:
         82:02:58:45:63:11:5c:2f:34:38:7d:9f:ac:d7:d7:88:49:3f:
         29:8b:5c:da:fe:4f:24:27:9d:10:e0:84:d6:fe:cd:d4:c5:fb:
         df:01:af:2d:51:f2:b5:cf:bd:e6:06:de:61:1e:a7:d6:29:1e:
         55:4d:b4:a3:56:35:95:8d:45:9d:6e:2b:3e:5d:35:69:4f:13:
         92:ac:eb:cd:80:4d:ae:5a:37:2a:b9:89:d7:02:d1:7b:fb:cf:
         f3:01:76:3f:aa:c2:71:94:eb:c0:15:03:60:83:26:99:35:ff:
         09:8a:46:74:f7:60:37:ee:65:79:a3:b2:ce:fa:23:85:7f:24:
         1d:e1:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:13 2026 by rpki-client