Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File:                     AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier:          E2iehW/aTOnI8VXmSZSw0VKXbWxAYAlueuqmeM83te8=
Subject key identifier:   6C:C9:7D:82:4B:B4:83:C6:03:3A:9A:61:33:35:6E:44:BE:95:60:81
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer:       /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial:       01A0C4E9F0166FF2CFD6928D8B9D5174125B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 17:01:00 +0000
Manifest this update:     Mon 21 Sep 2026 17:01:00 +0000
Manifest next update:     Tue 22 Sep 2026 17:01:00 +0000
Files and hashes:         1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: dimTdL6gZz2pymR9DG+1MMGj4/Mpaw4tw6RXA+1J0Co=)
                          2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:f0:16:6f:f2:cf:d6:92:8d:8b:9d:51:74:12:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
        Validity
            Not Before: Sep 21 17:01:00 2026 GMT
            Not After : Sep 22 17:01:00 2026 GMT
        Subject: CN=6cc97d824bb483c6033a9a6133356e44be956081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:d1:65:4c:6f:fa:eb:37:4e:1d:78:3c:fc:
                    fa:92:c2:43:ff:31:cb:55:b8:f5:81:ca:d6:c4:05:
                    fd:9b:87:74:97:6c:98:d5:c8:f3:2e:cf:36:59:b3:
                    19:de:c8:e8:f3:ec:e6:b7:16:83:24:29:f8:62:30:
                    ec:30:15:17:49:ee:40:32:2a:d2:be:72:37:7d:6e:
                    2b:9a:64:1d:16:96:08:e6:de:67:9a:85:cd:c0:e9:
                    e0:6e:0e:a4:7b:b6:b9:c0:86:27:dc:85:8f:70:ac:
                    5c:0e:f5:bb:a4:f3:f5:bc:cc:59:b9:74:ab:e1:08:
                    e4:42:64:67:d6:c2:3d:47:23:41:eb:00:20:b7:75:
                    b8:41:92:75:f7:96:d8:6c:25:53:cc:35:74:09:09:
                    5a:11:57:54:1c:12:07:a9:e3:cc:fe:d0:14:9f:01:
                    d3:18:0c:b8:dc:db:23:f1:05:fb:f2:29:78:11:cf:
                    59:69:13:4d:52:b3:0d:50:f1:e6:c1:d2:c2:da:19:
                    f0:75:9c:22:80:13:ef:3b:eb:cf:7b:3b:95:6e:8f:
                    27:23:ea:da:30:0e:f9:b4:2e:14:f2:77:e5:a4:ce:
                    6f:1e:2b:0f:b5:fe:d2:a0:58:b6:8c:76:51:52:28:
                    dd:e3:ee:ab:0a:85:e9:bb:33:1c:eb:10:a4:8e:f0:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C9:7D:82:4B:B4:83:C6:03:3A:9A:61:33:35:6E:44:BE:95:60:81
            X509v3 Authority Key Identifier:
                keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:2a:34:ba:89:0a:5b:aa:96:3b:f8:ed:e6:2b:bd:6b:9e:9d:
         bb:3c:15:b6:ef:9d:e2:3c:8f:5a:5d:f6:83:23:f1:78:7b:30:
         d0:ab:20:83:28:6e:89:d0:fc:19:8f:33:63:f3:dc:23:b4:26:
         f2:85:00:36:e0:ec:1e:be:54:bf:d3:32:49:db:ac:4c:8f:06:
         6d:3f:86:ce:6f:62:bb:28:7b:91:bf:9d:d3:a6:47:52:ef:dc:
         27:08:86:b1:1a:d3:25:85:48:9f:b9:98:52:7c:6e:ce:b4:3d:
         27:17:45:d4:ca:64:ca:1f:0e:28:fa:0e:d0:a4:cb:41:b3:3a:
         d7:6b:6e:a1:8b:6a:ec:a3:71:74:c7:6b:9b:e8:8f:83:e8:58:
         1e:fd:b0:81:a4:93:bd:89:4a:ac:53:c7:b8:dc:7f:ac:a3:24:
         90:3a:66:9b:30:e6:80:75:16:7f:79:70:0d:4a:11:4d:65:d8:
         53:12:4a:7d:3f:5c:e7:0c:12:c2:62:6a:3c:f2:52:06:bf:8c:
         fe:8d:54:9b:39:6c:df:ce:24:ad:d5:be:f4:52:ca:d9:1c:67:
         a4:97:34:d5:95:04:5a:14:f7:1d:5f:36:88:5c:c4:eb:90:0b:
         7a:c0:e0:47:03:d9:94:b5:99:02:6c:16:a4:c2:01:f9:b4:4b:
         5d:fb:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:43 2026 by rpki-client