Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File:                     AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier:          w1uXp5jM7AHWDuYOGgDGqR/z3VQbg9pp/knmZZu4boM=
Subject key identifier:   61:E4:AD:90:71:FC:0E:AB:36:9F:98:48:B8:62:B5:D5:D9:F6:5D:CB
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer:       /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial:       019EC1B666D221F90EAA83634902CF1346A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number:          0A54
Signing time:             Sat 13 Jun 2026 16:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:16 +0000
Files and hashes:         1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=)
                          2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: 5Iqus8bOUa6rMFSku0wS9+bSfjuEJ3qgs7e2/COKSmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:66:d2:21:f9:0e:aa:83:63:49:02:cf:13:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
        Validity
            Not Before: Jun 13 16:00:16 2026 GMT
            Not After : Jun 14 16:00:16 2026 GMT
        Subject: CN=61e4ad9071fc0eab369f9848b862b5d5d9f65dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:d0:26:03:1f:ed:a4:fb:97:ff:95:86:e1:
                    22:ca:0a:80:33:3a:13:ae:ca:a2:69:93:d5:31:41:
                    5d:67:ed:57:a9:8f:c4:ee:0a:f4:7e:bd:38:1f:8a:
                    46:1b:08:86:f6:cd:84:cf:4b:5a:6d:f0:58:58:0e:
                    8c:53:d1:3a:c1:96:32:d7:95:ac:6f:7b:cc:dd:61:
                    08:55:1b:21:61:93:b4:b0:eb:b3:b7:88:e0:98:15:
                    b6:fe:d6:1f:83:2e:ac:f2:5c:4a:99:31:56:96:64:
                    40:72:d4:4f:62:72:ea:d6:bf:3a:88:c2:78:ac:64:
                    9f:ff:10:2e:20:32:5d:50:de:84:5d:49:3e:4f:ee:
                    37:ba:84:a3:a9:e0:3b:3b:eb:fb:4a:80:82:1e:55:
                    71:22:15:56:1a:4d:62:b1:04:8c:42:aa:3c:15:64:
                    cc:28:96:76:e9:95:09:6a:16:4a:b4:84:70:64:51:
                    ba:f7:2b:f0:05:53:16:c5:35:7e:0b:c4:41:6d:a5:
                    1a:02:65:57:71:68:1a:7e:f4:40:a7:cc:31:64:31:
                    e4:b0:ee:2b:14:36:71:4c:a5:62:29:eb:d7:40:14:
                    c9:13:1a:c7:ce:f5:fd:10:a7:05:2d:5d:f0:41:58:
                    e4:df:fc:20:3e:e0:15:09:44:11:d3:77:c5:0e:37:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:AD:90:71:FC:0E:AB:36:9F:98:48:B8:62:B5:D5:D9:F6:5D:CB
            X509v3 Authority Key Identifier:
                keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:cf:bb:8e:94:36:82:12:be:76:4c:7c:5b:5a:67:85:16:
         ae:c1:13:d9:a8:1d:9d:f2:a8:a3:24:6c:b7:75:ff:13:0a:1f:
         97:45:b1:cd:ea:96:14:d4:66:f8:4f:1a:c6:cb:6f:f2:53:7f:
         03:49:3e:10:e6:e5:45:32:59:b7:9f:d7:d2:66:ff:05:f3:20:
         75:53:db:97:85:c4:72:0d:e9:53:f6:55:55:2e:d9:e2:7a:4c:
         ec:28:ac:0e:4f:a7:e9:e6:89:c8:8f:8d:72:44:10:95:43:96:
         06:11:b5:79:55:00:3b:e1:72:d6:99:71:05:96:7f:d1:5b:96:
         b1:68:1b:f2:59:a3:c3:43:e2:dd:95:ae:b6:c4:66:87:16:ff:
         7a:2c:6a:b9:a7:23:6f:57:f4:a2:18:88:b7:80:3a:1f:36:a3:
         dd:0d:d9:d7:5c:3c:db:26:c2:e7:79:a8:07:69:26:9b:ee:36:
         0f:f6:03:b2:5f:a1:73:6c:ca:b4:47:ec:5f:2c:25:ec:a5:f5:
         6a:e0:2d:96:20:1b:90:6e:11:ad:4c:2f:8f:3b:31:dc:63:7a:
         c7:88:d7:48:74:cc:25:1e:73:46:ee:d3:f1:8b:dd:d5:40:3a:
         6c:16:8d:65:e2:b0:1d:e9:fa:72:7d:77:c9:9e:1e:67:19:68:
         08:85:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:27:34 2026 by rpki-client