Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
File:                     ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft (raw, json)
Hash identifier:          Uh/HojRTCtZYPk2t6FjYdJRuoXPUMkAE4++ATJcUAV4=
Subject key identifier:   8A:C0:4D:49:8F:1F:54:6E:4F:AC:A0:91:52:C3:8E:37:3C:47:61:C8
Authority key identifier: 01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22
Certificate issuer:       /CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
Certificate serial:       019E2F967CA398C0FB03D93297A8DA0DF44E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
Manifest number:          0A3E
Signing time:             Sat 16 May 2026 07:00:51 +0000
Manifest this update:     Sat 16 May 2026 07:00:51 +0000
Manifest next update:     Sun 17 May 2026 07:00:51 +0000
Files and hashes:         1: ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl (hash: /u7K9yV4ZvZJdwk8/Ol6eiKyp+Jy9QEm1xQL9QDm1iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:7c:a3:98:c0:fb:03:d9:32:97:a8:da:0d:f4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012311f80a7a76e9ae03b8c13d82d83e9c0f8322
        Validity
            Not Before: May 16 07:00:51 2026 GMT
            Not After : May 17 07:00:51 2026 GMT
        Subject: CN=8ac04d498f1f546e4faca09152c38e373c4761c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:01:1d:92:14:cf:f8:47:17:66:b8:ed:52:d3:
                    ad:dd:60:a9:02:d0:fe:be:30:ba:65:ee:36:9e:3c:
                    a5:dc:66:f3:fe:bf:9c:b0:80:b6:e4:e7:d6:27:5d:
                    b0:12:84:82:23:28:68:cf:43:ed:d7:0b:4e:d3:8b:
                    54:86:c6:92:fe:f6:af:92:a1:a1:24:47:36:e3:e8:
                    07:f3:5b:02:37:0b:64:ac:7e:62:fb:c1:15:4f:70:
                    34:30:b8:63:96:c5:1f:55:45:10:4c:aa:67:1b:22:
                    4e:bb:e6:67:c9:33:58:19:ca:d6:8b:57:51:39:61:
                    20:cf:4c:8f:84:6d:57:f7:3d:af:80:c3:21:bd:23:
                    f8:bc:76:16:09:c8:69:f1:36:ac:10:c9:37:74:63:
                    e7:dd:aa:63:67:5f:33:76:20:cd:43:96:29:e6:ae:
                    d1:b3:c8:cc:4d:b5:63:72:6d:69:40:63:d4:aa:e5:
                    a8:d5:b1:d6:39:60:a0:25:63:c3:3b:92:cb:03:1b:
                    7b:79:35:b7:3a:2d:fe:19:0b:0c:fc:af:a3:0f:7e:
                    ee:9d:1c:f5:29:5d:40:42:59:7b:34:19:1c:86:06:
                    59:0f:a5:0b:50:e7:13:65:1d:06:da:d3:c1:b0:01:
                    a0:9c:d5:8e:23:38:ef:85:da:b1:81:0c:7e:dd:a7:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:4D:49:8F:1F:54:6E:4F:AC:A0:91:52:C3:8E:37:3C:47:61:C8
            X509v3 Authority Key Identifier:
                keyid:01:23:11:F8:0A:7A:76:E9:AE:03:B8:C1:3D:82:D8:3E:9C:0F:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASMR-Ap6dumuA7jBPYLYPpwPgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0396ee-0aea-47f3-b9fe-5b9ba91de33d/1/ASMR-Ap6dumuA7jBPYLYPpwPgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1a:bd:7b:55:a1:6d:1c:bf:dc:79:db:f6:52:28:00:e6:72:
         b9:47:b2:60:19:6f:05:22:5d:12:ba:3e:ca:84:b3:18:31:c3:
         ea:59:fc:f7:8e:81:28:f4:99:62:f9:26:9a:e2:c0:69:95:a4:
         56:05:f9:af:06:fb:25:f3:93:8f:01:e3:bf:49:9a:4d:c2:c2:
         4b:1c:81:63:0d:73:77:81:a3:10:19:c0:aa:01:37:d8:51:4c:
         a5:a0:de:43:65:ea:72:eb:a2:8c:10:0e:73:5f:2c:7e:8c:e8:
         55:ee:fe:c3:91:c2:77:cf:3d:10:2d:61:ef:33:0b:f4:fc:db:
         ef:6d:18:73:95:61:07:5f:93:89:da:c8:7c:0f:d9:c8:a4:9c:
         ef:5f:3b:e2:72:a1:44:25:5b:96:7a:46:b2:ea:df:3f:a6:be:
         19:c6:f2:8b:31:f7:75:32:f4:a4:b3:34:89:04:77:fe:a7:ec:
         34:0c:05:81:62:f6:a5:8d:45:51:72:ee:8b:80:1c:09:01:cb:
         a5:b9:e8:07:90:34:85:7a:96:10:07:fd:8e:e6:c1:75:8a:49:
         b7:1e:1a:c1:b6:a6:e1:54:d9:ab:a9:47:5d:8a:75:14:55:4c:
         fa:cc:ff:3f:df:8b:b6:af:35:fc:52:dd:2f:2d:32:85:64:55:
         c5:1b:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:03 2026 by rpki-client