Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          41gF++duS8HmIJ+FsxUpKH9mH1ByMPAhSK+GXY43Ca8=
Subject key identifier:   E7:9F:82:85:E8:B1:F6:62:3D:A7:B7:03:4E:49:1B:7D:33:76:D9:00
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       019FA90795AC0EEAE24B108A509C93A9BC49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 14:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:14 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: gzODNXwvJDuqDCx6JTKz/JAZ0F82cCmN2ImgOYZf/U4=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:95:ac:0e:ea:e2:4b:10:8a:50:9c:93:a9:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Jul 28 14:01:14 2026 GMT
            Not After : Jul 29 14:01:14 2026 GMT
        Subject: CN=e79f8285e8b1f6623da7b7034e491b7d3376d900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:7b:07:2a:12:5d:f7:86:83:47:cf:8c:6d:
                    55:dd:5a:c4:b5:47:e2:6a:7f:31:36:5f:33:d6:fd:
                    5b:26:3e:11:04:de:98:ef:6b:00:eb:09:16:77:34:
                    ff:54:8b:73:80:fb:ad:d0:53:e1:71:bb:22:13:cd:
                    77:37:3e:25:4c:ab:81:4f:b7:4f:16:56:51:d4:6c:
                    77:3c:11:ff:17:34:0b:b9:cf:98:f3:06:4f:da:26:
                    d3:66:7d:a4:a7:01:aa:d9:a0:2c:b3:75:b2:ff:8b:
                    32:9d:8c:bc:37:20:7e:76:07:71:18:f9:74:99:ba:
                    fc:b1:d1:7f:3e:65:62:c6:67:69:15:83:fb:43:45:
                    1b:93:5e:ce:cb:6e:13:e2:9d:6e:97:e4:57:63:0d:
                    47:82:19:9e:71:38:21:2b:91:33:2a:46:0d:11:a6:
                    e2:1b:f2:be:e5:1f:6a:75:47:81:ee:7c:29:85:6a:
                    16:d6:62:f1:cf:05:69:db:de:d6:3a:21:a0:81:fc:
                    b6:f9:df:f5:40:f5:de:16:aa:8e:88:eb:67:72:1d:
                    48:8c:d4:da:02:0f:79:1f:60:18:74:cd:c3:d6:46:
                    45:1e:6b:19:65:44:77:26:7c:84:87:3a:4c:bc:43:
                    59:78:13:ce:0c:75:a8:b7:ce:dc:44:ad:c8:13:5b:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:82:85:E8:B1:F6:62:3D:A7:B7:03:4E:49:1B:7D:33:76:D9:00
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:65:a5:20:98:87:35:77:d4:bc:63:3e:01:7c:6e:ca:c1:
         7b:81:88:f0:85:7a:3f:7c:78:31:1f:71:ff:df:ca:17:37:da:
         ad:34:e8:29:65:62:aa:0c:35:c7:a9:e3:26:a7:8a:3f:08:61:
         fc:7a:39:0a:0b:fe:23:54:15:7c:53:1e:c0:cc:1c:fc:80:8d:
         30:c6:2c:87:39:f3:47:84:e6:a8:88:42:51:0d:bc:40:fc:9e:
         92:89:6b:6e:94:a3:1e:12:56:4b:f9:ba:82:08:b4:36:a1:07:
         5e:23:c7:8d:87:db:7b:fb:53:97:ef:68:3e:21:66:2e:5e:07:
         05:ef:5d:47:e0:80:0c:14:6a:ad:6f:e8:c4:3a:f3:9f:cd:92:
         39:ba:97:64:8e:e5:d4:dc:62:67:d9:f8:2f:d8:82:1d:3a:30:
         91:23:57:0e:5a:18:c0:35:34:e8:21:ac:ab:5b:87:14:2b:32:
         30:7a:73:60:f6:0e:e7:9c:d9:13:11:ad:6a:e0:3a:8b:c4:9c:
         39:c1:6a:d8:9d:50:c5:d5:79:f4:8b:d7:a9:ee:89:ea:75:16:
         6a:a0:7d:e6:31:f8:34:dc:00:58:43:cd:8f:dc:72:39:35:80:
         fd:ae:c9:da:45:4d:d4:0f:f6:ae:57:da:e7:9c:22:cd:95:4a:
         d3:12:2b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:38 2026 by rpki-client