Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
File:                     azZigAPagkZT2aWJdfaf0rwQa3E.mft (raw, json)
Hash identifier:          M1uXMnpkBmxLxJ7yltoklnfK0DYXokCfMvmEa/F4BHo=
Subject key identifier:   AF:81:17:50:66:2B:A1:61:06:25:67:5F:4D:2D:03:BC:42:02:27:00
Authority key identifier: 6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71
Certificate issuer:       /CN=6b36628003da824653d9a58975f69fd2bc106b71
Certificate serial:       019FCB5C9B5B7D5064E857BC87C3D42A06CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
Manifest number:          5E
Signing time:             Tue 04 Aug 2026 06:01:11 +0000
Manifest this update:     Tue 04 Aug 2026 06:01:11 +0000
Manifest next update:     Wed 05 Aug 2026 06:01:11 +0000
Files and hashes:         1: azZigAPagkZT2aWJdfaf0rwQa3E.crl (hash: 2bPwcAPPKUL5fIMs+i9mx8eo5vlla6mQ0O006s9NNJ0=)
                          2: xv_mfH_vDLg1Q5L8BpAH47O17uo.roa (hash: DoTOjlCGKN2DqHejuNWU2055DZZTGt7Dy1dJF/wtwJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:5c:9b:5b:7d:50:64:e8:57:bc:87:c3:d4:2a:06:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b36628003da824653d9a58975f69fd2bc106b71
        Validity
            Not Before: Aug  4 06:01:11 2026 GMT
            Not After : Aug  5 06:01:11 2026 GMT
        Subject: CN=af811750662ba1610625675f4d2d03bc42022700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:14:8e:88:4a:c6:19:b1:b3:45:5c:45:d9:
                    34:44:d8:a8:06:5e:9d:4c:8f:21:7e:68:2c:2f:f7:
                    8b:63:cf:03:f3:b0:e7:08:e4:0c:70:50:32:33:d8:
                    5f:e2:3d:58:fc:a3:2f:af:40:9d:39:58:a6:bc:63:
                    c0:20:db:19:ba:2b:aa:e0:37:4e:8e:3c:de:22:84:
                    bc:00:ea:74:7d:79:2b:94:15:bd:41:65:c4:a5:6c:
                    df:e7:e4:53:29:d4:21:ed:80:0d:ad:df:d6:0e:94:
                    f4:47:7e:46:d5:11:5c:82:4b:b2:bb:5b:2a:ba:3c:
                    d9:71:8d:c1:6d:c8:ea:27:36:11:04:a5:5a:c8:87:
                    60:f6:9d:ce:6c:a4:dd:1f:55:49:09:3b:0f:11:91:
                    c7:34:49:36:c6:2a:fe:c7:41:07:cf:13:62:28:0d:
                    18:73:dc:0a:43:1c:e2:23:7a:bf:b3:ba:8a:7a:ea:
                    0d:bb:63:31:88:fd:ce:7f:fa:83:f0:70:0f:8c:f8:
                    8a:8f:bb:b0:b7:12:6b:31:5b:29:f1:65:cf:97:35:
                    59:ed:7a:5e:2e:b7:28:9a:13:52:4c:ac:55:a5:9c:
                    3b:20:90:f9:99:41:89:c4:59:7c:94:65:2e:b8:57:
                    12:b3:80:6c:8a:79:57:08:12:cf:34:58:f4:06:16:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:81:17:50:66:2B:A1:61:06:25:67:5F:4D:2D:03:BC:42:02:27:00
            X509v3 Authority Key Identifier:
                keyid:6B:36:62:80:03:DA:82:46:53:D9:A5:89:75:F6:9F:D2:BC:10:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azZigAPagkZT2aWJdfaf0rwQa3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/azZigAPagkZT2aWJdfaf0rwQa3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:18:e0:ad:85:52:0f:bc:5a:7c:73:90:ce:aa:c9:07:b1:34:
         cb:49:39:15:04:59:02:28:6b:17:6b:67:4e:b3:83:97:40:9c:
         b1:53:9b:99:ef:ff:6b:48:c2:11:a3:b2:bc:f2:0c:a3:dc:ff:
         0e:69:15:5d:30:4b:70:a7:bd:e9:d8:90:ef:09:f7:2f:ee:3e:
         89:fe:7d:6c:b3:43:c7:61:b1:02:99:85:ca:6b:b6:a9:91:7a:
         df:ab:7e:a8:ac:85:a6:fd:ac:b9:69:30:68:de:d7:c8:56:d6:
         cc:e6:40:9f:aa:3e:02:4d:f1:ac:f1:98:38:cc:59:de:32:a1:
         4d:19:cb:cb:62:4a:cf:ad:d0:9f:6f:41:cf:de:80:8c:78:c2:
         0a:af:28:f7:70:91:56:b6:25:15:ad:a1:47:92:23:1b:fa:a4:
         a3:45:2a:c6:68:a4:65:f9:07:f7:35:5d:d2:45:ee:25:c1:18:
         f9:ae:41:ac:d8:c7:42:7b:cb:43:ab:a6:d8:f0:fb:b9:1c:00:
         3f:68:3a:01:5b:8c:4f:24:7c:53:c5:6f:36:d9:7b:1f:1b:f8:
         8c:d5:59:53:37:c4:63:17:1a:03:fe:99:b6:fc:44:2d:12:88:
         03:80:10:8c:b2:39:2f:8f:dd:d6:06:5e:ea:20:be:2d:f5:5e:
         05:8e:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:53:12 2026 by rpki-client