Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File:                     AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier:          xIDKKGU1n/t8j1bW/peww+Hmim6Weo3Wx/s9TalbJOQ=
Subject key identifier:   EB:3A:2B:7A:25:4F:EB:D4:62:72:9F:64:C5:60:8C:29:28:E4:10:F5
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer:       /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial:       01A0C7EB338D32A437A828A81DA8DFA56C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number:          0B70
Signing time:             Tue 22 Sep 2026 07:01:15 +0000
Manifest this update:     Tue 22 Sep 2026 07:01:15 +0000
Manifest next update:     Wed 23 Sep 2026 07:01:15 +0000
Files and hashes:         1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: LEOcmW+fYU0kQlQ5Acl3sHplMz4tims5P7lqkeM3U4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:eb:33:8d:32:a4:37:a8:28:a8:1d:a8:df:a5:6c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
        Validity
            Not Before: Sep 22 07:01:15 2026 GMT
            Not After : Sep 23 07:01:15 2026 GMT
        Subject: CN=eb3a2b7a254febd462729f64c5608c2928e410f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:b7:3f:d6:fc:d2:b4:15:b2:88:72:fd:31:
                    42:aa:bd:0b:53:cd:27:4c:7c:87:98:2b:7a:ee:64:
                    5c:9e:6a:38:20:f6:db:e6:36:ac:41:47:1b:cd:b1:
                    d3:57:3e:9c:c7:97:36:ff:a9:96:51:7e:f7:76:3a:
                    55:22:fc:09:f8:ad:93:ab:0a:d9:69:fe:d6:f2:ef:
                    c0:0d:e3:13:6c:76:06:d1:40:96:83:12:f9:4d:e3:
                    d4:aa:ce:6c:bb:42:0f:80:2a:c4:78:27:7b:d5:b4:
                    96:e2:d8:a4:88:8f:48:65:7e:cc:21:c0:d7:72:b1:
                    72:cb:7a:42:7b:9d:27:5e:fa:af:84:fc:79:70:b7:
                    b6:d7:e9:57:f6:94:42:bb:1a:44:93:2d:9b:94:f8:
                    75:28:27:d6:f0:ec:7a:6a:74:c8:8e:bf:9c:06:57:
                    79:25:35:5c:87:f4:1a:b0:1e:6f:f4:4c:29:81:97:
                    e7:82:fb:18:1f:cb:31:f9:21:02:93:04:7b:7e:42:
                    58:47:57:37:a0:59:4e:19:79:ef:81:47:8b:28:6c:
                    54:2f:0c:78:d9:22:e7:9b:86:b2:90:ae:e9:58:bd:
                    eb:cc:e1:7f:a3:d3:5b:6b:d0:87:48:4b:f1:52:e8:
                    68:97:86:6f:20:3d:fc:5b:78:08:40:20:e1:8c:5a:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:2B:7A:25:4F:EB:D4:62:72:9F:64:C5:60:8C:29:28:E4:10:F5
            X509v3 Authority Key Identifier:
                keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:e9:df:80:1f:c8:8a:51:e7:33:ad:67:77:38:e0:37:e2:
         47:f3:55:dc:0a:78:a3:15:2a:3c:e9:88:1d:96:5c:c7:51:df:
         c7:98:b6:db:68:3c:ca:4e:c8:83:26:02:ce:10:e0:04:84:a4:
         e3:33:24:ca:73:88:25:f0:f1:0f:3e:b3:8a:af:c8:47:84:08:
         de:3c:4a:b2:73:9c:cf:6f:7b:2e:b6:d3:68:b0:3e:5a:82:c3:
         36:58:6e:88:7f:0d:63:64:96:ae:76:fc:59:6c:1b:2e:6e:13:
         08:77:d9:68:47:e4:34:ff:29:6b:d5:cc:38:5c:9e:d7:71:8d:
         ed:ba:f3:9d:18:07:30:ed:3d:29:74:be:a4:e5:dc:f3:08:ac:
         d8:fe:1e:30:2a:62:ab:24:ca:9c:82:1a:dc:8a:25:2a:2b:59:
         92:d5:c6:eb:c2:f3:e9:fb:9b:a0:94:ab:d5:7e:3f:af:c4:c2:
         60:d7:fc:13:20:14:cf:d5:c1:2c:bb:2b:56:b1:e7:0a:9e:18:
         69:3d:2b:ac:b7:1f:d8:e9:93:18:ae:64:ae:9c:82:02:88:72:
         d9:f2:14:1f:82:17:b1:23:df:7b:df:b3:67:45:c9:01:52:77:
         4e:ac:b1:eb:9d:c9:1b:c5:8b:4e:50:dc:b9:71:55:41:c3:d8:
         67:e3:e2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6zONMqQ3qCioHajfpWydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTYyYjljZDJlNTU2YjU5NmZjNzI0MzU2NTgwN2I5ZTJk
Yzg2OGEwHhcNMjYwOTIyMDcwMTE1WhcNMjYwOTIzMDcwMTE1WjAzMTEwLwYDVQQD
EyhlYjNhMmI3YTI1NGZlYmQ0NjI3MjlmNjRjNTYwOGMyOTI4ZTQxMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWK3P9b80rQVsohy/TFCqr0LU80n
THyHmCt67mRcnmo4IPbb5jasQUcbzbHTVz6cx5c2/6mWUX73djpVIvwJ+K2TqwrZ
af7W8u/ADeMTbHYG0UCWgxL5TePUqs5su0IPgCrEeCd71bSW4tikiI9IZX7MIcDX
crFyy3pCe50nXvqvhPx5cLe21+lX9pRCuxpEky2blPh1KCfW8Ox6anTIjr+cBld5
JTVch/QasB5v9EwpgZfngvsYH8sx+SECkwR7fkJYR1c3oFlOGXnvgUeLKGxULwx4
2SLnm4aykK7pWL3rzOF/o9Nba9CHSEvxUuhol4ZvID38W3gIQCDhjFrEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs6K3olT+vUYnKfZMVgjCko5BD1MB8GA1UdIwQY
MBaAFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEt
NzAzNDJhMmU3NTMzLzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEtNzAzNDJhMmU3NTMz
LzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Xp34Af
yIpR5zOtZ3c44DfiR/NV3Ap4oxUqPOmIHZZcx1Hfx5i222g8yk7IgyYCzhDgBISk
4zMkynOIJfDxDz6ziq/IR4QI3jxKsnOcz297LrbTaLA+WoLDNlhuiH8NY2SWrnb8
WWwbLm4TCHfZaEfkNP8pa9XMOFye13GN7brznRgHMO09KXS+pOXc8wis2P4eMCpi
qyTKnIIa3IolKitZktXG68Lz6fuboJSr1X4/r8TCYNf8EyAUz9XBLLsrVrHnCp4Y
aT0rrLcf2OmTGK5krpyCAohy2fIUH4IXsSPfe9+zZ0XJAVJ3Tqyx653JG8WLTlDc
uXFVQcPYZ+PiiQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:12 2026 by rpki-client