Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File:                     AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier:          5BzAgbijQAgCNk5+ZIS8NSUuf4XnnlKTXy6Ak0Sk/II=
Subject key identifier:   4A:25:A7:E0:68:72:8C:7C:DB:AB:5B:FA:75:1C:3F:B3:FB:5F:C7:FD
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer:       /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial:       019EBF5AAAA936748DD36552916692720FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 05:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:50 +0000
Files and hashes:         1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: BWEtmIEV2BMysAr8Kjjv47ng4yfVgKiq7/AnmJzqCo8=)
                          2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:aa:a9:36:74:8d:d3:65:52:91:66:92:72:0f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
        Validity
            Not Before: Jun 13 05:00:50 2026 GMT
            Not After : Jun 14 05:00:50 2026 GMT
        Subject: CN=4a25a7e068728c7cdbab5bfa751c3fb3fb5fc7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:c8:32:59:81:cd:70:d7:bc:fb:22:bf:a8:
                    dc:d1:24:32:20:82:b2:a9:a3:25:60:70:50:e7:5b:
                    68:f1:b0:65:8d:33:d7:47:2c:59:13:f9:62:40:79:
                    4d:75:c6:3e:a3:87:a5:23:2d:95:05:1b:88:cf:78:
                    2d:75:4b:d7:1a:80:c0:c7:e1:a9:db:45:5a:c5:e7:
                    e1:af:fd:e1:3e:55:34:a8:a5:23:bd:a7:54:fe:8f:
                    cb:c9:30:3a:1b:c5:49:a8:df:2a:00:9a:d9:3f:69:
                    42:4f:9a:35:54:c1:dd:bb:c4:c5:22:d1:cd:07:36:
                    1a:f7:db:79:12:a6:bc:a0:9b:56:f6:81:ec:2c:68:
                    5b:8b:17:30:f7:1e:8c:df:5f:4c:4e:43:75:50:3a:
                    55:dc:7e:46:c1:43:50:d6:ea:18:f6:06:e7:bf:2d:
                    43:58:8f:33:09:1d:a6:26:38:b3:1e:dc:5f:3d:c5:
                    9a:31:13:62:6f:1e:0d:c2:de:53:70:57:a7:36:85:
                    77:f3:61:05:3b:61:24:2b:4c:73:7d:34:36:51:43:
                    35:32:38:62:51:80:71:25:fa:f7:9c:73:50:fc:d3:
                    c7:5a:b6:aa:d0:42:13:d5:03:a7:c0:d0:f2:c3:82:
                    e1:e3:93:fc:db:82:d2:45:8c:01:9f:e8:34:3c:e9:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:A7:E0:68:72:8C:7C:DB:AB:5B:FA:75:1C:3F:B3:FB:5F:C7:FD
            X509v3 Authority Key Identifier:
                keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:68:fa:d8:1b:92:c9:47:14:a0:8f:64:d4:7d:a8:9f:d6:a0:
         f6:8d:62:3d:f7:47:cb:23:b3:73:bc:93:96:98:d1:52:df:35:
         37:8e:97:97:1e:19:37:40:3d:89:97:7a:53:98:13:02:9a:fa:
         35:3e:b8:b0:ec:c2:1c:ec:08:ef:df:bf:b7:b3:ac:e7:de:47:
         b0:ae:a0:e1:a8:5e:1b:34:8f:cd:35:a8:ce:0b:88:f6:f2:bb:
         87:0e:1b:54:a8:7c:03:c0:96:b8:15:de:ea:77:24:50:0e:de:
         81:08:d8:6b:0e:64:22:d7:7b:ea:d4:46:2c:6a:eb:82:ae:4e:
         7f:60:2e:89:cf:4e:d8:5c:73:68:22:92:35:ce:be:d2:c8:24:
         46:de:94:c6:4a:0c:63:66:e0:ab:f9:fd:8a:49:2a:60:3f:d6:
         f3:bf:a7:70:17:e0:fd:e6:35:88:c4:2e:5d:c8:db:15:53:5c:
         14:af:d4:0d:9e:fa:3b:6a:18:a8:46:ba:90:b6:03:f2:43:ff:
         1e:1e:97:0c:cf:68:86:cc:1a:b1:43:65:9f:6c:07:e6:01:d7:
         96:86:23:8a:b2:ad:a9:2e:b1:82:b5:a1:50:3c:c8:c9:55:0c:
         ec:3b:73:37:4a:bf:ed:8d:f1:04:6a:9f:72:0b:a2:02:ca:1a:
         f8:10:09:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WqqpNnSN02VSkWaScg//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy
ZjE1NzIwHhcNMjYwNjEzMDUwMDUwWhcNMjYwNjE0MDUwMDUwWjAzMTEwLwYDVQQD
Eyg0YTI1YTdlMDY4NzI4YzdjZGJhYjViZmE3NTFjM2ZiM2ZiNWZjN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/3IMlmBzXDXvPsiv6jc0SQyIIKy
qaMlYHBQ51to8bBljTPXRyxZE/liQHlNdcY+o4elIy2VBRuIz3gtdUvXGoDAx+Gp
20Vaxefhr/3hPlU0qKUjvadU/o/LyTA6G8VJqN8qAJrZP2lCT5o1VMHdu8TFItHN
BzYa99t5Eqa8oJtW9oHsLGhbixcw9x6M319MTkN1UDpV3H5GwUNQ1uoY9gbnvy1D
WI8zCR2mJjizHtxfPcWaMRNibx4Nwt5TcFenNoV382EFO2EkK0xzfTQ2UUM1Mjhi
UYBxJfr3nHNQ/NPHWraq0EIT1QOnwNDyw4Lh45P824LSRYwBn+g0POnyAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEolp+Bocox826tb+nUcP7P7X8f9MB8GA1UdIwQY
MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt
Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli
LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmj62BuS
yUcUoI9k1H2on9ag9o1iPfdHyyOzc7yTlpjRUt81N46Xlx4ZN0A9iZd6U5gTApr6
NT64sOzCHOwI79+/t7Os595HsK6g4aheGzSPzTWozguI9vK7hw4bVKh8A8CWuBXe
6nckUA7egQjYaw5kItd76tRGLGrrgq5Of2Auic9O2FxzaCKSNc6+0sgkRt6UxkoM
Y2bgq/n9ikkqYD/W87+ncBfg/eY1iMQuXcjbFVNcFK/UDZ76O2oYqEa6kLYD8kP/
Hh6XDM9ohswasUNln2wH5gHXloYjirKtqS6xgrWhUDzIyVUM7DtzN0q/7Y3xBGqf
cguiAsoa+BAJCw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:55 2026 by rpki-client