Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          4NAt0sxTCwr8eGW1qo9BXJ84wpw2xE/6DrvjAD80mCA=
Subject key identifier:   45:58:F5:A2:A7:E5:C0:2E:57:25:EC:E3:76:02:51:84:77:BB:A3:B2
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       019D9A74E8F1FF0C24F56D85C873474B1E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          155A
Signing time:             Fri 17 Apr 2026 08:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:46 +0000
Files and hashes:         1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
                          2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: zLzlQJRS4b5cZPJgHK3wkJl3qcnmVVrQrrJKR4/JWlQ=)
                          3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
                          4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:e8:f1:ff:0c:24:f5:6d:85:c8:73:47:4b:1e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Apr 17 08:00:46 2026 GMT
            Not After : Apr 18 08:00:46 2026 GMT
        Subject: CN=4558f5a2a7e5c02e5725ece37602518477bba3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:17:57:d6:7c:56:8c:ef:4c:ba:9c:0a:86:
                    b6:43:9c:00:fd:50:88:2f:4e:bf:83:b2:3a:07:7b:
                    4e:84:92:c9:b9:ad:e5:4e:7f:84:90:02:0d:c7:b1:
                    f3:9d:c7:14:00:9f:52:16:ad:d2:8a:e4:c1:27:e3:
                    c5:94:3e:03:61:4c:c1:13:8d:8c:39:c0:2a:a0:c6:
                    d1:7d:3b:ba:4e:26:93:17:e5:f8:cd:dc:f8:2a:55:
                    17:53:0e:9f:59:ed:cb:73:59:81:9e:be:49:f0:49:
                    ac:7d:9b:99:91:e5:e7:d7:92:ab:41:7d:09:6e:fd:
                    5c:3e:0f:a7:4d:c6:2d:10:9e:3b:6d:c0:fd:ce:d1:
                    8c:88:83:10:5d:6a:e5:29:83:25:ec:5e:85:9d:d2:
                    54:ac:9b:9a:64:32:d6:2e:3a:aa:c0:70:ff:d1:a7:
                    a0:8f:ec:5c:c8:78:2d:d8:40:af:1d:bf:ba:ad:d8:
                    c0:3e:75:19:4e:c5:f2:46:8f:bb:19:76:90:d2:da:
                    24:49:02:ac:92:ac:3d:59:89:dd:8a:b0:4d:a1:35:
                    13:bd:b8:08:d7:d2:ed:bf:2e:8d:d1:36:11:37:4e:
                    91:dc:de:8f:8b:48:a2:61:ba:05:db:fb:bb:4f:1a:
                    08:ff:bb:e6:74:f2:b8:de:1e:ea:f1:7f:9e:b5:53:
                    90:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:F5:A2:A7:E5:C0:2E:57:25:EC:E3:76:02:51:84:77:BB:A3:B2
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:9a:d1:25:f3:b2:f0:cf:31:1d:b1:5b:f6:5e:bd:f7:cd:
         8f:66:18:e4:a5:4e:25:05:48:16:53:4f:16:7b:ef:19:58:4a:
         81:f7:b8:bb:7a:ec:49:9b:c7:ff:33:fc:00:94:99:e9:93:eb:
         c9:fd:5c:16:f3:bd:16:4c:1e:44:91:97:b8:6b:26:66:29:a9:
         81:53:fe:5b:27:ab:62:37:8d:00:2d:04:ac:54:9c:22:7e:7c:
         b2:ef:3b:99:82:20:a6:bc:dc:05:4d:8d:73:06:ec:13:b9:ad:
         f3:92:1c:fc:0f:a9:79:ad:95:36:18:5a:60:1a:2f:12:bf:2c:
         d6:7c:61:74:53:02:56:1d:83:29:47:8a:a0:4a:98:09:14:12:
         70:b9:dd:a0:62:78:79:cb:7c:11:cd:77:fa:f5:7c:bd:23:b0:
         5a:b8:37:fd:46:b9:2a:b3:e6:77:fc:3e:28:38:85:5a:81:1a:
         0e:5e:96:27:3f:06:91:04:be:bc:d4:52:f3:2b:2d:5b:7a:b5:
         c6:b6:77:fa:7a:df:89:db:41:d2:b5:a9:5d:63:cf:22:8c:dd:
         82:9a:b2:3c:5c:61:7b:b6:d5:c8:ac:17:4e:78:12:d0:58:cb:
         da:6c:0c:ec:79:eb:01:a6:6d:e9:95:72:75:21:e0:8e:33:66:
         17:df:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:54 2026 by rpki-client