Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          AIeKKbFdpk97bTA4nN3sS1M3phqoJ3L+ena6pPwBI2M=
Subject key identifier:   8C:8B:6F:97:DC:EC:CD:CB:7C:52:2B:B7:FE:33:9C:85:8E:D3:B0:F0
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       019CAC47189E89D040DA9A67282053F8904D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 02:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:06 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: JCO/dNyyfXKkmgoHIV0J9tgLEikrZRZK/gSEgdXwZPY=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:18:9e:89:d0:40:da:9a:67:28:20:53:f8:90:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Mar  2 02:01:06 2026 GMT
            Not After : Mar  3 02:01:06 2026 GMT
        Subject: CN=8c8b6f97dceccdcb7c522bb7fe339c858ed3b0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bf:f4:3f:ee:6f:d9:be:21:9a:99:32:01:0f:
                    da:56:37:cd:f3:38:56:b9:8a:7b:80:69:c3:76:40:
                    47:1c:cb:a0:12:da:c3:fe:e7:6b:17:26:6c:2c:fc:
                    7f:9e:c0:6c:38:58:96:dc:cf:73:60:20:4c:b6:75:
                    f9:4c:49:cf:de:ab:5d:c6:dd:29:36:77:cf:aa:64:
                    7e:03:da:8c:75:8d:99:c0:d6:2a:08:f8:c1:50:23:
                    05:d9:dc:f3:de:f2:ab:6a:35:41:1f:cb:09:6f:ad:
                    89:0b:d8:f4:dc:3b:93:55:06:5b:d1:9e:6e:b7:29:
                    66:7f:d0:69:b3:1b:e1:c7:33:cc:5c:96:54:84:a3:
                    41:dc:05:fb:ef:29:19:3d:42:b6:46:54:1b:74:54:
                    02:01:00:6f:2b:0c:b6:2f:ef:3d:c1:26:8a:c3:de:
                    da:74:03:32:5a:fb:b6:19:b2:68:84:a9:4e:56:ea:
                    2c:ad:f4:6b:fb:ae:0d:05:6b:72:c6:48:5e:9e:48:
                    e8:e4:53:8b:13:48:b1:cf:6c:ae:3d:18:fe:a0:8f:
                    d5:4c:f8:4f:09:35:77:cf:2f:04:28:80:a6:38:2e:
                    28:03:2e:ca:78:f9:54:f4:d6:4b:b3:72:03:e9:33:
                    68:fd:77:e8:fa:03:6f:ee:87:ac:1c:58:1a:27:a4:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:6F:97:DC:EC:CD:CB:7C:52:2B:B7:FE:33:9C:85:8E:D3:B0:F0
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:e8:8e:d6:8b:e3:79:ed:64:df:b7:55:94:f4:ea:2f:06:
         ce:70:9a:b5:03:ea:0d:0a:01:8a:f1:0f:0a:b9:55:1e:61:36:
         28:e9:ae:02:9a:6b:5c:05:67:c5:08:23:14:d3:f3:ce:31:26:
         59:4c:2a:63:ef:66:48:c1:cc:63:9c:ec:1a:5f:3c:bf:ee:ab:
         18:e3:55:cd:74:7d:8f:c2:36:d3:68:23:e8:30:44:a1:c8:8f:
         1a:6d:62:11:34:ee:3c:e1:30:d4:1c:3e:5f:70:e2:87:1d:ad:
         af:17:64:d6:28:4f:db:95:c6:5b:60:f9:90:8d:02:03:ca:b8:
         d3:f4:4d:5d:78:5b:ac:f3:b2:af:f3:8c:94:67:c3:af:3e:8b:
         6c:a5:ca:f9:58:d3:d7:f6:6c:8d:96:89:34:84:94:e1:61:2c:
         15:dd:93:89:02:73:60:e5:eb:f2:4f:ab:05:b7:d7:cf:4d:60:
         fa:ed:5b:66:37:8b:23:66:d3:5c:e4:59:85:db:69:59:fb:3a:
         05:c0:c7:27:f8:8c:f8:ba:5e:78:42:cb:53:4f:ba:c4:57:9c:
         02:57:04:e5:c9:44:c4:6c:17:6b:e8:0a:14:ed:f8:f3:62:f7:
         5d:ef:7a:9c:89:9e:5d:63:45:d1:1d:8b:9d:9c:7d:a3:74:30:
         73:75:7a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxieidBA2ppnKCBT+JBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOWFkMTgyNGJlNTQ2MTYzYjQ4MWZjNDk2NDdhMDUwOGIy
MjZiZjQwHhcNMjYwMzAyMDIwMTA2WhcNMjYwMzAzMDIwMTA2WjAzMTEwLwYDVQQD
Eyg4YzhiNmY5N2RjZWNjZGNiN2M1MjJiYjdmZTMzOWM4NThlZDNiMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87/0P+5v2b4hmpkyAQ/aVjfN8zhW
uYp7gGnDdkBHHMugEtrD/udrFyZsLPx/nsBsOFiW3M9zYCBMtnX5TEnP3qtdxt0p
NnfPqmR+A9qMdY2ZwNYqCPjBUCMF2dzz3vKrajVBH8sJb62JC9j03DuTVQZb0Z5u
tylmf9BpsxvhxzPMXJZUhKNB3AX77ykZPUK2RlQbdFQCAQBvKwy2L+89wSaKw97a
dAMyWvu2GbJohKlOVuosrfRr+64NBWtyxkhenkjo5FOLE0ixz2yuPRj+oI/VTPhP
CTV3zy8EKICmOC4oAy7KePlU9NZLs3ID6TNo/Xfo+gNv7oesHFgaJ6R64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyLb5fc7M3LfFIrt/4znIWO07DwMB8GA1UdIwQY
MBaAFAGa0YJL5UYWO0gfxJZHoFCLImv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMt
ZThlMTNiYjBlMDg0LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMtZThlMTNiYjBlMDg0
LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB57ojtaL
43ntZN+3VZT06i8GznCatQPqDQoBivEPCrlVHmE2KOmuApprXAVnxQgjFNPzzjEm
WUwqY+9mSMHMY5zsGl88v+6rGONVzXR9j8I202gj6DBEociPGm1iETTuPOEw1Bw+
X3Dihx2trxdk1ihP25XGW2D5kI0CA8q40/RNXXhbrPOyr/OMlGfDrz6LbKXK+VjT
1/ZsjZaJNISU4WEsFd2TiQJzYOXr8k+rBbfXz01g+u1bZjeLI2bTXORZhdtpWfs6
BcDHJ/iM+LpeeELLU0+6xFecAlcE5clExGwXa+gKFO3482L3Xe96nImeXWNF0R2L
nZx9o3Qwc3V6xQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:39 2026 by rpki-client