Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          5p269OjKfEEA36TFfWYRrOjJ14N4DZB8Tti4GDFGKxw=
Subject key identifier:   7E:16:0A:B2:20:59:26:86:3D:D4:38:FA:B3:85:AE:BE:37:68:49:9D
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       019D3865CEE9D3C149BB2351B984EF641A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          09BE
Signing time:             Sun 29 Mar 2026 07:01:29 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:29 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:29 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: eu8Elsku/oBYeuK0VFCURZawM3lodB1ZG8FeIWOwxGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:ce:e9:d3:c1:49:bb:23:51:b9:84:ef:64:1a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: Mar 29 07:01:29 2026 GMT
            Not After : Mar 30 07:01:29 2026 GMT
        Subject: CN=7e160ab2205926863dd438fab385aebe3768499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:ad:78:ab:e7:94:3a:6f:28:6d:b2:68:b2:
                    67:0e:f4:74:9a:4f:72:0e:ed:a0:86:e2:8f:78:ed:
                    cc:f8:1f:e2:6e:84:6c:c4:28:88:4d:a8:3c:cb:d9:
                    71:71:6e:61:46:1b:ad:fc:0d:d8:1c:11:2e:74:fe:
                    2e:05:4f:94:84:75:ab:e7:65:21:cd:9b:ab:62:91:
                    05:e6:22:8a:e5:58:17:7f:95:72:5d:87:32:8b:c4:
                    74:e4:fd:f8:e9:43:52:0b:e8:12:87:b0:e8:92:ca:
                    bb:f5:04:d7:63:18:c1:73:55:23:e5:21:00:81:15:
                    2c:4a:bc:de:53:8d:e8:e1:b8:2e:46:81:47:cf:20:
                    cf:cc:29:a1:2f:56:95:e6:9a:cd:16:56:57:0b:a6:
                    14:d1:d5:c5:42:63:aa:68:76:cb:94:32:b9:be:bc:
                    ac:df:5d:c1:d4:a1:22:f0:02:68:5b:36:67:dc:31:
                    cf:65:e3:40:cc:ec:52:dc:28:02:7e:43:79:2d:27:
                    d0:33:ce:4c:a4:ae:b5:98:bc:c6:b8:f5:06:91:65:
                    5a:fa:2a:87:da:71:d9:47:63:73:15:ab:c9:6e:b0:
                    3f:0f:e6:87:07:c3:51:99:b8:0d:9c:1d:9f:21:8c:
                    74:63:8a:33:f6:d6:0a:df:d5:87:a7:35:be:89:c2:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:0A:B2:20:59:26:86:3D:D4:38:FA:B3:85:AE:BE:37:68:49:9D
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ad:94:18:c1:93:69:fa:4b:c3:dc:e1:b1:1c:4a:ed:43:86:
         1a:a5:8b:0d:d2:b2:92:06:0b:99:e0:f6:11:9c:39:db:b5:81:
         32:86:5d:6a:7e:4b:d7:b7:da:7e:be:d3:2b:05:27:61:69:ec:
         6a:25:11:ec:b7:e0:64:af:f9:33:6e:e5:70:5e:62:46:44:76:
         55:f1:f9:a2:a7:39:54:87:dc:ae:92:14:3c:26:98:92:da:06:
         ec:0b:ee:6e:35:ac:7a:f4:d5:4b:f2:37:06:45:8c:fa:9c:6f:
         5a:04:44:5d:f2:6a:f6:0a:4e:44:1b:ff:8a:db:d2:ac:5d:22:
         2b:e5:93:01:95:77:3e:25:29:1b:e0:b6:2a:ae:af:b5:31:1b:
         76:f1:b9:8f:e7:94:02:34:21:6c:22:d9:c1:f3:f0:ab:61:5d:
         5a:be:b1:8b:d0:cd:43:81:c9:23:d6:95:9f:a0:87:0f:46:c7:
         e5:c0:64:f3:f2:97:19:14:e2:5c:d4:aa:21:e6:84:d0:52:97:
         2f:94:40:36:ec:1b:7f:d8:ae:1e:de:a4:b9:b3:85:d5:1e:a1:
         6b:7f:6f:80:bf:60:fd:f2:23:23:b0:f8:1c:81:a8:fd:aa:dc:
         27:66:d9:c6:59:c8:cc:c5:ec:aa:d8:3b:60:2f:ec:57:97:49:
         61:e4:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:29 2026 by rpki-client