Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File:                     AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier:          L7fK4T+Malv7l7IIz0itV3XwG6ezxzCEHbcdCgnD38M=
Subject key identifier:   35:BD:72:65:25:75:8B:6A:4A:F6:F7:07:CD:B6:2A:4B:08:68:DD:36
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer:       /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial:       019EBE7F2C3E0D130588D3EFD6B8EB2DEB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number:          0A62
Signing time:             Sat 13 Jun 2026 01:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:05 +0000
Files and hashes:         1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: gQxFccefOaBp+Qbp9DMs2KoC2OVdkC4XiZoGvjjDcJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:2c:3e:0d:13:05:88:d3:ef:d6:b8:eb:2d:eb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
        Validity
            Not Before: Jun 13 01:01:05 2026 GMT
            Not After : Jun 14 01:01:05 2026 GMT
        Subject: CN=35bd726525758b6a4af6f707cdb62a4b0868dd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:dc:07:4c:70:c4:5d:13:12:03:b8:ba:12:
                    c1:58:c0:8d:24:41:f8:2b:8d:9a:3b:71:03:5e:ee:
                    27:9a:da:92:51:ee:93:d9:27:5c:7f:39:cb:8f:f7:
                    83:b8:b3:ae:62:96:d4:79:df:55:7a:b9:c8:8c:5a:
                    11:50:7d:c7:cd:37:85:b2:ee:9c:b7:cc:3a:8f:01:
                    3c:92:d1:38:21:9a:9d:8e:b2:31:57:03:34:cb:49:
                    08:cb:2d:78:bb:9e:b1:98:7d:35:46:20:11:ce:48:
                    be:98:81:df:d8:90:d4:7c:c7:e5:06:cd:f2:34:7a:
                    0d:ae:55:be:89:88:bc:12:46:07:be:e9:d5:0a:c1:
                    90:86:b5:ee:f6:7f:a3:83:59:60:83:53:88:8f:69:
                    2d:c0:e5:7f:59:9d:a7:40:b5:34:b9:bb:97:89:5e:
                    7d:4d:8c:08:70:61:af:57:a5:db:8f:9a:75:91:d1:
                    39:b0:91:77:93:99:6d:5c:25:89:31:56:38:c7:eb:
                    14:b1:b6:68:54:73:1b:a5:6d:23:1e:83:a9:8d:ed:
                    7f:75:b8:e3:75:a7:7f:d4:cd:af:a5:bd:a3:b3:f0:
                    4e:2f:e5:67:76:02:91:a7:57:82:d5:ac:11:25:2e:
                    90:27:66:42:ff:79:61:79:ed:cf:fa:a5:d9:84:19:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BD:72:65:25:75:8B:6A:4A:F6:F7:07:CD:B6:2A:4B:08:68:DD:36
            X509v3 Authority Key Identifier:
                keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:10:79:5c:e1:39:33:85:e4:05:1b:c3:40:4a:f1:30:ec:42:
         81:21:9d:39:b9:64:b7:3e:f9:a8:af:d2:23:83:e3:03:f8:c7:
         55:1e:1a:0d:cd:63:d5:b7:a3:f6:0e:09:c4:b2:8d:7a:ab:1e:
         93:07:50:ee:49:43:80:f8:7f:80:4d:38:b0:fb:8a:32:f3:0a:
         5c:dd:67:6a:d8:2a:d4:35:a0:7a:89:75:36:59:fa:0d:83:16:
         c6:6c:cb:e2:44:9c:1e:ab:fb:89:2b:cc:d6:45:0b:08:9e:c7:
         b8:18:73:28:66:07:b6:82:cf:f0:64:3e:23:45:c8:bc:06:bf:
         d5:f8:cd:20:7a:0f:ca:1c:f0:fb:35:c6:98:2a:9a:f7:ef:29:
         4e:f4:86:3e:1b:1c:4f:ff:3c:c3:38:d9:d0:36:13:d5:60:d9:
         65:85:e8:7e:4f:c3:f9:84:b7:2a:7b:3b:d5:35:e0:4e:d6:c0:
         16:b4:b7:90:77:81:48:9a:12:38:1e:df:47:7e:6a:8c:52:b1:
         ee:d3:21:bd:0a:89:12:bd:f7:ae:0f:ee:35:f3:c7:6a:f3:0d:
         48:a8:3a:f9:39:f7:f2:c7:c7:e2:2c:6a:34:00:5b:6d:cb:03:
         e4:a5:a9:b0:56:db:9e:77:06:f3:43:79:56:7f:35:3f:84:17:
         5c:19:d4:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fyw+DRMFiNPv1rjrLet2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTYyYjljZDJlNTU2YjU5NmZjNzI0MzU2NTgwN2I5ZTJk
Yzg2OGEwHhcNMjYwNjEzMDEwMTA1WhcNMjYwNjE0MDEwMTA1WjAzMTEwLwYDVQQD
EygzNWJkNzI2NTI1NzU4YjZhNGFmNmY3MDdjZGI2MmE0YjA4NjhkZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFncB0xwxF0TEgO4uhLBWMCNJEH4
K42aO3EDXu4nmtqSUe6T2SdcfznLj/eDuLOuYpbUed9VernIjFoRUH3HzTeFsu6c
t8w6jwE8ktE4IZqdjrIxVwM0y0kIyy14u56xmH01RiARzki+mIHf2JDUfMflBs3y
NHoNrlW+iYi8EkYHvunVCsGQhrXu9n+jg1lgg1OIj2ktwOV/WZ2nQLU0ubuXiV59
TYwIcGGvV6Xbj5p1kdE5sJF3k5ltXCWJMVY4x+sUsbZoVHMbpW0jHoOpje1/dbjj
dad/1M2vpb2js/BOL+VndgKRp1eC1awRJS6QJ2ZC/3lhee3P+qXZhBmKzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW9cmUldYtqSvb3B822KksIaN02MB8GA1UdIwQY
MBaAFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEt
NzAzNDJhMmU3NTMzLzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEtNzAzNDJhMmU3NTMz
LzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxB5XOE5
M4XkBRvDQErxMOxCgSGdOblktz75qK/SI4PjA/jHVR4aDc1j1bej9g4JxLKNeqse
kwdQ7klDgPh/gE04sPuKMvMKXN1natgq1DWgeol1Nln6DYMWxmzL4kScHqv7iSvM
1kULCJ7HuBhzKGYHtoLP8GQ+I0XIvAa/1fjNIHoPyhzw+zXGmCqa9+8pTvSGPhsc
T/88wzjZ0DYT1WDZZYXofk/D+YS3Kns71TXgTtbAFrS3kHeBSJoSOB7fR35qjFKx
7tMhvQqJEr33rg/uNfPHavMNSKg6+Tn38sfH4ixqNABbbcsD5KWpsFbbnncG80N5
Vn81P4QXXBnUCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:52 2026 by rpki-client