Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
File:                     AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json)
Hash identifier:          z0v9y+1L5LS1jrEXgL1PaPaS3CpLfGzHbv0n085r9BQ=
Subject key identifier:   3E:3C:55:83:C3:2E:78:A1:B4:C4:29:C6:A7:17:F4:47:34:A0:15:E9
Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3
Certificate issuer:       /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
Certificate serial:       019D03D2FBE1BDB596C7CC09E4E2164E8830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
Manifest number:          011C
Signing time:             Thu 19 Mar 2026 02:00:51 +0000
Manifest this update:     Thu 19 Mar 2026 02:00:51 +0000
Manifest next update:     Fri 20 Mar 2026 02:00:51 +0000
Files and hashes:         1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: YAK+nl/fw1UxBKlCWBbXdFBNuwoCtT08wAAWp82Qs7M=)
                          2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 02:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:03:d2:fb:e1:bd:b5:96:c7:cc:09:e4:e2:16:4e:88:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3
        Validity
            Not Before: Mar 19 02:00:51 2026 GMT
            Not After : Mar 20 02:00:51 2026 GMT
        Subject: CN=3e3c5583c32e78a1b4c429c6a717f44734a015e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:18:c7:c9:57:98:bc:5e:96:85:e6:00:c2:
                    58:b2:95:4b:c7:1d:ab:be:cc:25:b4:6c:31:5c:91:
                    36:f1:96:b7:af:9c:b3:02:2c:0b:49:c6:40:0e:cb:
                    4b:36:69:c9:64:af:96:05:bc:fe:ee:19:cd:da:8e:
                    60:69:55:55:58:43:36:72:fa:4d:5b:70:5e:66:1e:
                    19:8f:46:e4:cc:2b:f3:7e:81:0b:4a:2c:88:d4:2f:
                    38:e4:95:71:67:bc:ea:7e:2e:0e:82:5c:33:e3:87:
                    2e:dc:e3:ff:32:77:c1:aa:fb:70:58:cd:c9:3a:af:
                    ae:03:3f:db:29:f6:80:e4:d2:fe:b5:bc:53:56:66:
                    73:98:3a:6f:a8:1e:45:2b:ce:69:1b:c7:34:7d:a9:
                    28:e0:b3:ad:4f:8e:b3:21:5c:0f:3d:c0:91:80:95:
                    54:59:d4:61:8d:53:79:a0:89:05:a6:1d:a8:d4:16:
                    f5:f4:57:78:4b:e4:8a:c5:f7:51:f6:3f:f7:c7:6a:
                    5c:25:9c:b2:ba:c8:a5:e2:8d:08:3b:d5:19:7e:d4:
                    93:b6:af:d5:59:74:36:25:32:dc:fb:fc:66:57:e3:
                    50:45:f2:4a:19:9a:06:25:a9:bb:d3:2d:1b:51:dd:
                    57:76:b7:b4:9d:5c:03:9e:42:98:93:7d:20:c9:e4:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3C:55:83:C3:2E:78:A1:B4:C4:29:C6:A7:17:F4:47:34:A0:15:E9
            X509v3 Authority Key Identifier:
                keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:84:9e:c7:42:eb:70:29:2c:50:89:59:60:e3:f9:34:75:80:
         99:6c:4a:fa:4f:d2:1e:79:82:ef:25:43:5e:1a:a1:f3:27:42:
         c5:f2:c9:c7:27:9a:ae:d8:9d:21:4e:93:cb:f5:98:8b:61:03:
         db:0c:bd:95:92:bb:f6:83:3b:4d:3e:39:b2:c0:c9:d8:0e:3d:
         e2:60:90:98:61:ab:74:55:cc:a0:69:ac:fc:48:bc:b0:88:7d:
         45:a3:67:cb:63:c2:8f:04:5e:4b:b3:b5:d2:13:b9:9a:03:2c:
         e0:8d:b9:ef:7b:46:ed:97:11:98:81:6e:8c:f6:d5:92:5c:43:
         da:f5:04:b5:2f:e8:01:b7:07:37:16:95:91:77:7c:e5:38:06:
         01:12:b1:3b:4b:b6:5d:04:5d:5f:16:2a:f4:62:97:06:e7:25:
         66:f0:b4:f0:42:84:8c:ca:fe:3b:ed:ca:02:3e:65:b1:ff:8e:
         20:a8:6e:a5:1a:e0:7e:5a:3a:53:97:ff:4c:46:fe:06:97:25:
         e3:56:a6:cf:c4:05:ce:55:7b:68:94:8a:8d:fd:82:7f:ff:d8:
         c9:52:20:7a:ad:c7:3c:47:ee:16:ec:95:43:dc:fd:55:3b:d6:
         49:40:df:a5:21:b1:f6:3a:e8:56:80:26:b7:29:64:5f:5f:af:
         ab:f6:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:08:42 2026 by rpki-client