Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
File:                     t_AzNOrsueClE-t-Ih98zUkoFIc.mft (raw, json)
Hash identifier:          Piq96EkGRnHP7yJMkzXOnJlZKOZ069Xe7ynukm0wkjI=
Subject key identifier:   24:D5:35:1E:EA:22:C5:D5:AB:C7:11:C0:C3:B8:C2:28:76:7A:0E:64
Authority key identifier: B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87
Certificate issuer:       /CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487
Certificate serial:       019CA8D815ED5DDDE03E41FEE3CF08D85E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
Manifest number:          42
Signing time:             Sun 01 Mar 2026 10:00:59 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:59 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:59 +0000
Files and hashes:         1: kgULxRnCqup5WVtuSBDz8GCsYPo.asa (hash: cA1letagZrqW8+LI+von+DlhHfa6mF77tjboU6p7mB8=)
                          2: t_AzNOrsueClE-t-Ih98zUkoFIc.crl (hash: yzPtvmvjj1uNTOWKWV1yALGjiAbnJP4eRn5HKZekwMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d8:15:ed:5d:dd:e0:3e:41:fe:e3:cf:08:d8:5e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487
        Validity
            Not Before: Mar  1 10:00:59 2026 GMT
            Not After : Mar  2 10:00:59 2026 GMT
        Subject: CN=24d5351eea22c5d5abc711c0c3b8c228767a0e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:7a:0f:ff:83:26:4c:91:e2:23:f8:88:51:
                    89:5a:b2:e8:82:fc:d9:58:44:35:4e:0b:7c:9a:ee:
                    c2:38:89:65:c5:36:1c:91:9b:ed:2d:3e:d1:d1:64:
                    84:bb:e4:6c:af:b5:e1:a4:e8:a1:8c:b1:01:2c:c1:
                    e9:b3:af:b9:cb:b8:80:5a:89:e1:1a:ae:9f:0e:a7:
                    ea:99:fb:06:52:6f:c5:9b:35:2c:48:02:db:62:21:
                    ff:13:55:41:e4:55:04:24:2d:3d:1e:2a:c5:0e:48:
                    9f:f1:e3:13:a0:9d:16:12:f2:69:63:8a:bc:4b:d7:
                    c7:f5:a2:21:c7:fd:3c:22:2d:ce:a0:5b:db:c5:44:
                    bb:e3:14:b6:1e:5b:12:f7:60:54:20:d8:4a:6e:1c:
                    05:bd:a8:65:b7:e9:a8:39:4c:89:99:59:fb:86:8f:
                    e0:52:26:c4:51:ca:2e:35:d3:18:b0:77:31:9b:14:
                    1c:58:b4:c9:f0:cd:0d:a6:6d:b5:54:3d:ec:2c:2b:
                    39:3e:d9:33:8f:61:a8:14:72:23:7a:36:b7:1e:54:
                    2d:58:78:cf:d8:cb:4c:5e:04:4a:cc:00:40:e1:a1:
                    a1:4c:97:6e:4d:2f:2b:5d:89:78:d1:f1:37:ce:7f:
                    9f:82:69:b6:a8:2d:29:1a:d1:7d:54:8f:55:9f:00:
                    c6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:35:1E:EA:22:C5:D5:AB:C7:11:C0:C3:B8:C2:28:76:7A:0E:64
            X509v3 Authority Key Identifier:
                keyid:B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:a6:a5:1d:30:c8:68:51:bf:aa:64:f2:86:74:2c:71:72:
         7c:ac:b8:cf:b8:fa:4e:01:f7:ae:7f:67:8b:03:4a:7f:89:a1:
         67:ef:00:34:fa:e3:95:e4:b2:dc:6d:1f:16:44:78:41:5f:a5:
         7a:db:be:1c:87:8e:96:ee:44:75:24:2c:f4:c1:10:b5:c3:ec:
         1e:f7:60:2d:a6:36:9d:a2:a2:52:8f:4c:30:bc:8f:93:f1:e9:
         11:4b:29:62:1b:98:f1:f9:5a:10:92:24:9d:48:8f:62:a3:c5:
         63:77:ea:07:aa:37:e7:23:42:e7:9e:ba:36:ea:72:f5:cb:4e:
         e2:1d:72:e3:9f:6b:77:7b:05:3c:19:fa:51:69:99:71:a6:09:
         97:a0:2f:60:7c:90:e6:db:70:1e:95:3a:85:27:69:3f:d8:17:
         cf:82:09:8b:d1:fd:76:d3:a4:52:6f:5e:13:de:4c:ff:d6:a9:
         65:79:f2:75:a9:79:1f:f2:88:37:08:63:5c:b4:0f:99:55:1f:
         bc:36:66:7b:8f:3b:65:11:4d:90:dc:41:80:b5:42:f7:85:16:
         93:7b:8d:b3:21:4b:37:0b:08:d5:72:6e:0a:26:c7:0d:dd:1d:
         51:7e:3d:bf:1f:2f:7d:9f:bb:38:98:1f:a2:3e:ff:f2:a7:19:
         c4:1c:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:46 2026 by rpki-client