Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File:                     AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier:          rECPu6hDxNPahrdQcKJzLob5XBrj5uigjENNRyf/jzE=
Subject key identifier:   C4:B3:51:70:82:2F:FD:B9:99:23:6F:4F:2A:F9:8C:43:AF:2B:F3:50
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer:       /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial:       019DA60B7E48EE90EA633D7FD0A7002F1AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number:          03C5
Signing time:             Sun 19 Apr 2026 14:01:04 +0000
Manifest this update:     Sun 19 Apr 2026 14:01:04 +0000
Manifest next update:     Mon 20 Apr 2026 14:01:04 +0000
Files and hashes:         1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: hjhOThC/rCdN5y9oJQUK7xGLuJj5wG7ZRlnlNP78AZI=)
                          2: mrgQvPT5f81LqdW8fBMupeJKuJU.roa (hash: xHnIDJmAiiC8Js7rQ2nzM4B4BoLoJOSKWWF32wLisBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 12:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:0b:7e:48:ee:90:ea:63:3d:7f:d0:a7:00:2f:1a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
        Validity
            Not Before: Apr 19 14:01:04 2026 GMT
            Not After : Apr 20 14:01:04 2026 GMT
        Subject: CN=c4b35170822ffdb999236f4f2af98c43af2bf350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:1d:fb:00:3f:87:4b:68:b2:cd:16:05:55:
                    30:d2:af:34:5f:5e:34:b7:37:cf:e6:cb:60:6a:f9:
                    7a:d9:c3:1f:e4:08:4f:e4:cd:3d:37:60:e5:8a:3c:
                    72:d1:52:6a:df:f2:b2:f0:9e:65:f0:6e:82:a5:c5:
                    ed:70:82:9a:76:cf:41:8b:ee:20:6d:2b:cf:4d:d9:
                    12:0e:d7:71:a3:8a:bf:e4:2f:73:9f:10:da:04:97:
                    80:af:5c:6a:c5:16:ab:2f:7d:06:53:c5:27:a1:80:
                    c7:ce:b7:2e:05:d3:aa:e1:77:3e:fe:a0:2a:d0:35:
                    44:e8:c3:f5:ef:fc:b9:13:7e:d2:02:b8:59:f6:09:
                    91:87:80:3f:87:63:28:83:31:78:43:ea:0e:39:5c:
                    99:4f:b1:7a:69:d4:d5:14:d8:d2:8c:2d:88:d7:9c:
                    d3:8c:bf:1b:a5:d9:7e:f4:8c:9a:89:20:42:fe:68:
                    af:c3:b7:5d:47:6c:a7:a6:86:a8:10:e7:d3:0a:3e:
                    b4:e8:ad:9a:b5:33:b0:8c:ba:e2:cd:9d:0d:f1:2d:
                    d1:ba:ed:bf:b9:ca:33:a9:5e:d4:47:f2:a1:a9:f0:
                    ba:ab:83:d4:07:cd:0c:81:70:22:48:7b:5c:11:8c:
                    2e:53:59:cb:3f:da:c6:90:c7:db:77:32:6e:aa:0e:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:51:70:82:2F:FD:B9:99:23:6F:4F:2A:F9:8C:43:AF:2B:F3:50
            X509v3 Authority Key Identifier:
                keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:96:69:1c:8c:97:ff:a2:e7:45:1e:bd:f2:e5:0c:8c:56:ee:
         00:00:01:09:4c:a4:42:1a:f3:09:e2:8d:57:55:d2:af:ac:74:
         21:5f:b3:fa:c2:e5:c7:7b:04:ee:55:0a:9d:3c:ca:d7:49:84:
         3b:2a:4c:21:48:80:e0:9a:98:49:cb:a2:6e:a2:32:f8:0a:87:
         22:35:9c:50:a6:46:34:75:ea:40:13:c7:d5:9b:fa:a9:0d:f5:
         32:d2:41:c3:3b:d8:5a:40:58:4a:27:ed:2c:7a:0b:8d:bc:3a:
         30:56:72:5a:f6:6a:3d:ae:3b:04:b9:26:68:df:53:b3:22:45:
         76:eb:51:ca:8d:b7:3c:14:ad:0a:89:e5:c8:29:68:6d:18:01:
         a2:12:ff:d3:91:c3:44:eb:7c:dc:30:5f:48:be:89:0f:5d:5c:
         48:8a:de:4a:cb:d0:5c:b7:39:80:29:af:58:5e:a2:dd:6d:e1:
         2a:bc:2e:f7:30:aa:c2:a9:a3:24:56:a7:80:34:2a:63:cc:3b:
         05:58:8f:f4:2e:8e:4c:cd:56:a6:87:e2:6f:eb:64:a6:13:40:
         ec:e9:3f:9a:69:90:e3:a8:e2:60:e4:ad:3c:44:bc:12:77:a1:
         3e:fb:e5:20:95:79:2a:26:6a:31:de:24:50:87:af:72:4b:67:
         5a:1c:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:57:48 2026 by rpki-client