Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          UZA+kHo88zIQcNRrreQ49xTYH6cok7kEtijFRlJg3Z8=
Subject key identifier:   2F:33:25:E8:C4:75:14:EE:49:3B:6E:ED:0A:6E:AF:0B:A4:A8:F2:B4
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       01A0CAB4EC276B023BBB8B29CA0B49CA5299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          1A6C
Signing time:             Tue 22 Sep 2026 20:00:49 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:49 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:49 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: 1oRjApRv+Vr5FUaX0maCwyhQjnMJxoJEqTNRDlAw80Y=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:ec:27:6b:02:3b:bb:8b:29:ca:0b:49:ca:52:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Sep 22 20:00:49 2026 GMT
            Not After : Sep 23 20:00:49 2026 GMT
        Subject: CN=2f3325e8c47514ee493b6eed0a6eaf0ba4a8f2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:93:25:78:e1:bb:a7:a8:bf:05:f6:00:2f:
                    1c:35:3a:68:31:8f:4e:01:7b:26:86:5d:ae:c7:59:
                    89:17:db:30:e5:9c:ee:df:be:e9:f1:f6:7b:cf:1d:
                    3c:53:f0:d4:d5:5d:81:f9:d9:00:2d:5f:26:14:d4:
                    e0:f5:a4:71:cf:86:c7:0e:f6:7d:66:24:87:2f:7e:
                    e2:05:e2:a6:06:d2:c2:e3:cb:3e:73:22:99:6a:d3:
                    c5:57:c5:3d:90:83:08:86:57:0c:6f:19:17:92:9c:
                    00:20:8f:96:96:2e:05:e4:0c:59:78:eb:55:75:f2:
                    a4:eb:85:57:07:03:bb:45:08:36:cb:a9:b6:ac:92:
                    d3:fd:9c:f0:38:00:81:92:11:07:66:83:61:b1:a7:
                    cf:53:be:53:15:87:bc:de:99:78:49:83:85:74:38:
                    3e:e5:1f:96:a1:92:b3:ef:81:83:ab:49:d8:ae:99:
                    bf:fd:c3:63:d0:f3:68:ca:46:0b:a3:c7:34:a0:35:
                    47:f9:f8:b5:93:97:79:b7:cd:46:10:fd:90:49:1b:
                    4a:1a:d9:66:4a:15:92:68:71:d9:0d:7c:bf:74:8b:
                    60:46:32:b9:4f:f8:2d:16:af:1b:4a:74:40:f6:7c:
                    c6:24:df:d5:2b:e6:99:8d:cc:cd:da:81:6f:d5:47:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:33:25:E8:C4:75:14:EE:49:3B:6E:ED:0A:6E:AF:0B:A4:A8:F2:B4
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:55:4f:c3:36:a0:b6:13:b8:1b:87:88:2b:d5:fd:33:41:4c:
         60:b6:1d:84:20:f6:2e:29:f9:30:56:f3:04:36:8b:6f:5f:6b:
         cd:c1:0b:aa:26:c5:9c:4b:5f:59:3a:91:87:3f:a7:c0:b8:17:
         ed:66:bf:2a:8b:f4:2a:72:f2:83:9d:00:f5:d4:a8:0d:ec:93:
         2c:04:ad:dd:5f:40:82:6f:19:0a:5b:a9:18:ff:75:a2:3a:44:
         9c:5b:b1:21:a3:53:07:88:72:38:1c:29:77:85:8b:e2:2d:f9:
         22:dc:0e:7f:d9:3c:43:e3:73:db:06:51:12:18:5c:f3:28:6a:
         10:8b:42:49:35:8b:c0:a6:d8:ce:60:f7:c3:0e:3a:d9:5b:26:
         49:c1:fd:49:2f:a4:66:a2:47:62:27:78:9f:3d:28:9d:10:df:
         28:72:fc:5b:38:09:3f:82:39:6f:4a:7e:35:a4:4a:4b:11:5e:
         ad:23:fb:09:83:3e:c9:7a:8b:88:e7:58:98:95:21:8c:0a:e3:
         cd:3f:9c:43:94:22:ef:ca:2c:c5:c7:2b:24:4d:61:92:9c:64:
         5c:a5:b9:1f:3b:c1:57:ea:50:0c:7b:7a:21:f9:59:90:f9:3f:
         39:a0:cd:b4:64:46:71:ce:66:3d:94:4f:39:ad:38:33:05:5d:
         6b:3d:3c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:24:44 2026 by rpki-client