Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          DTvcOfAr6iiU1h49hnz60HIxA/ymQSHeV19ElzTXRvY=
Subject key identifier:   B2:82:FA:84:04:AF:9F:78:88:50:32:CF:02:95:7C:F5:C5:D5:FE:A8
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       019D992B58AA707A9FCD5552D1BD7DA6DD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 02:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:47 +0000
Files and hashes:         1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: Brh1+nwjE23PVOXGaI7fDXLJVp7npjT9hI252DUJtAs=)
                          2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:58:aa:70:7a:9f:cd:55:52:d1:bd:7d:a6:dd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Apr 17 02:00:47 2026 GMT
            Not After : Apr 18 02:00:47 2026 GMT
        Subject: CN=b282fa8404af9f78885032cf02957cf5c5d5fea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:47:cb:e4:84:47:94:a5:79:4f:b1:e2:23:
                    80:19:18:7e:67:88:83:2b:c9:14:e9:4e:92:88:35:
                    b2:72:52:f4:b6:67:b2:d1:b7:b0:a8:03:e0:5e:5e:
                    7a:c3:25:1a:5d:7f:c0:06:7b:8b:d0:b4:cb:82:b7:
                    fe:72:89:ce:2f:d9:c4:8f:21:90:7e:85:ca:a6:2a:
                    31:95:85:b0:7a:87:4c:fb:67:c0:be:01:fb:b6:c7:
                    90:42:af:ba:c3:36:74:d8:06:a7:f8:0a:a3:c5:8f:
                    a7:d9:d7:92:1f:df:9e:24:5f:05:19:49:45:c9:fc:
                    17:28:8a:b3:d4:7a:e4:3e:d9:49:4a:a9:11:7e:85:
                    7c:00:e3:9c:ba:6f:0d:5e:f2:f3:a5:5b:b7:08:ed:
                    73:7d:35:c1:4d:dd:5f:73:21:ae:53:27:1f:26:6f:
                    49:91:99:62:07:14:73:14:62:95:d1:b0:2f:ca:1a:
                    28:80:c5:4c:0c:b2:fa:27:61:26:15:ba:61:0f:29:
                    16:e3:63:f4:2f:33:21:89:e7:03:5b:b6:c1:61:95:
                    a0:88:3c:04:18:22:00:54:51:31:1e:e2:ea:3d:97:
                    f7:3f:2d:a4:0c:b6:9d:f0:61:3e:1d:b0:3d:59:31:
                    8b:95:6c:97:ea:2c:7e:56:c0:29:05:8c:db:70:e5:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:FA:84:04:AF:9F:78:88:50:32:CF:02:95:7C:F5:C5:D5:FE:A8
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:a5:57:59:4e:56:fa:59:7b:70:a7:54:57:ad:1a:bb:6f:ef:
         e3:c5:06:86:fc:1f:41:79:a8:9e:29:24:9c:8e:24:1a:a5:7c:
         b4:0f:3a:2c:df:9d:54:60:ae:58:56:3c:99:84:c5:27:41:2e:
         37:12:dc:14:a0:ce:73:be:31:f1:05:84:35:c8:66:02:20:16:
         44:df:56:80:dc:46:00:d9:5c:88:96:f8:f8:ee:36:4f:a7:40:
         4f:4f:32:20:70:51:92:a0:1e:b2:48:c9:44:d8:d1:8c:35:1b:
         e1:c5:8b:e5:96:b9:f3:18:49:f6:44:f3:37:b4:c0:2f:18:dc:
         b2:8e:0b:5a:3f:f6:2d:25:bd:e6:97:31:2a:ed:c9:a3:15:22:
         15:f6:01:66:8c:30:3f:97:59:95:cb:6b:bc:71:be:c5:fe:48:
         20:01:e6:8d:75:58:ce:17:a0:86:6f:55:98:8c:90:87:0c:08:
         d7:c1:68:e1:52:90:79:c2:af:17:36:eb:e7:e8:7f:1a:87:a3:
         d6:5d:3e:8a:b3:76:8a:5e:a0:6c:1c:d8:41:97:00:a8:5f:6d:
         bf:d3:49:54:3a:05:4e:c5:ea:1b:44:70:1d:cd:2c:c7:75:1f:
         6c:9e:91:d8:58:f4:db:e4:78:84:f5:a6:d5:61:1a:4b:63:cd:
         b7:a5:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:37 2026 by rpki-client