Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          mNBPOZDCh173OGFcfa/OWjbKRJhGYAnyL0LEUCrnU/o=
Subject key identifier:   AF:6C:71:99:61:BE:2D:90:CE:8B:FC:02:A2:34:AA:B8:BD:32:FB:54
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       019FA86235EAE4B506D5D818BF89D748237E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 11:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:36 +0000
Files and hashes:         1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: dtTsiXexkSzLh9EBVt/d1x+9bjzxk7xNF1TX1uT+org=)
                          2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:35:ea:e4:b5:06:d5:d8:18:bf:89:d7:48:23:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Jul 28 11:00:36 2026 GMT
            Not After : Jul 29 11:00:36 2026 GMT
        Subject: CN=af6c719961be2d90ce8bfc02a234aab8bd32fb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a7:f3:fc:ed:9a:f9:92:a5:8d:ab:8e:cc:e4:
                    6c:6e:2f:e0:20:95:75:d8:73:0e:de:6d:97:fc:50:
                    92:16:72:b4:5d:9d:f3:1b:23:ab:3f:0d:ba:30:5a:
                    84:73:0b:ea:1e:cb:04:a8:fe:e4:f0:c5:a0:75:e8:
                    a1:66:4a:a6:30:36:89:2e:29:32:d7:22:a4:21:c2:
                    7f:80:52:5e:d4:f7:ee:81:6b:21:73:94:1a:74:68:
                    26:1b:c3:0b:58:12:80:1c:bd:5d:18:24:85:ac:5b:
                    88:1a:8c:e9:38:37:04:6f:4e:21:69:8a:6b:c4:ad:
                    75:5e:81:5b:34:b0:87:7d:ae:1b:39:9d:3f:38:d4:
                    ad:92:98:d0:da:1b:71:74:e8:18:b7:b6:5f:d0:9d:
                    a4:e4:ba:4e:7c:8a:87:70:c5:8e:d9:22:99:2f:cb:
                    d1:11:9d:7a:f9:8e:1c:25:6b:05:56:04:7d:a8:ca:
                    fc:68:a7:96:77:a5:5d:d2:eb:56:4a:39:df:92:ee:
                    5f:9b:08:4b:c8:fd:7a:44:fa:87:44:d5:fc:b1:2a:
                    15:7d:d5:5d:58:4b:12:79:7d:74:35:38:49:3b:9f:
                    8f:97:a3:79:a8:1a:c8:bb:a4:24:e6:d0:05:8f:52:
                    8e:ea:1c:49:f0:ab:5b:d6:8c:1a:a3:8d:e5:00:7d:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6C:71:99:61:BE:2D:90:CE:8B:FC:02:A2:34:AA:B8:BD:32:FB:54
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:f2:87:16:81:fb:d6:50:7e:7a:01:3e:b9:50:8f:2d:31:a5:
         1d:e5:2f:90:ad:8e:8b:e8:b4:cc:5f:1b:0e:9f:a5:78:ed:aa:
         51:f5:cf:f0:15:1e:26:02:eb:a4:7f:42:ff:cc:58:58:68:1b:
         0c:01:78:4a:d1:1c:f2:e7:ee:58:bc:7c:83:54:89:5d:18:cb:
         0a:4e:41:e7:80:7b:9d:39:74:f1:2f:52:06:02:fd:56:2d:f3:
         4d:d8:3b:06:74:de:22:25:01:bf:4b:8b:d0:62:89:45:c7:51:
         4e:dd:a4:7f:2d:ac:34:53:27:d6:81:66:b1:d4:b2:39:6e:7b:
         a3:eb:3a:07:f1:4b:0f:07:fb:c0:af:99:7b:a0:48:17:4e:49:
         70:31:ee:d2:7a:70:5b:c3:93:05:13:9b:fe:c0:1e:f0:c2:d4:
         a6:e3:44:03:68:5b:65:dd:ad:4a:d0:ae:4a:39:6d:cb:b0:db:
         34:1d:22:b0:bb:5f:40:98:a1:aa:28:17:cb:7e:a7:f6:e4:8a:
         ba:d4:2d:c1:c4:4f:06:18:e8:20:8c:84:e4:d9:0f:9c:7e:b3:
         ae:30:80:ed:dd:47:c2:d1:a9:7b:fc:4a:56:ac:30:71:e0:64:
         32:4f:63:94:c1:7a:41:b6:8e:aa:8d:70:84:33:7e:71:02:67:
         7b:6b:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:59 2026 by rpki-client