Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          qbgPDooxtwwmkEvtIOgjnsDfNp5v4jR5HH4vl4bbdNY=
Subject key identifier:   A5:AF:AF:19:41:DC:98:41:7C:FF:5C:AD:0F:C8:8D:5F:31:C3:FC:88
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       019F0E88940472AAAB5266D6D6908E668303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          1986
Signing time:             Sun 28 Jun 2026 14:00:59 +0000
Manifest this update:     Sun 28 Jun 2026 14:00:59 +0000
Manifest next update:     Mon 29 Jun 2026 14:00:59 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: mHsWYo4YWTX19jenhiDVOckHEutuLogvlHI2amhIsgI=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:88:94:04:72:aa:ab:52:66:d6:d6:90:8e:66:83:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Jun 28 14:00:59 2026 GMT
            Not After : Jun 29 14:00:59 2026 GMT
        Subject: CN=a5afaf1941dc98417cff5cad0fc88d5f31c3fc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:06:0e:b1:d7:6d:cc:f1:39:bd:90:b0:19:
                    c0:f4:e3:f2:9b:a1:8d:bb:6e:e6:69:0b:c7:80:f0:
                    c8:c8:86:cd:28:61:9c:c3:3b:a0:b5:b0:e1:f2:08:
                    d5:a3:2b:9e:f9:95:db:4b:85:4a:8d:6f:3e:c2:ed:
                    60:07:2f:68:1b:d9:94:eb:fb:0b:70:68:dd:0f:19:
                    2f:e8:51:c5:ad:1d:07:47:21:2f:ee:f8:ec:59:7d:
                    49:2e:cb:eb:58:2e:03:db:fd:5d:1b:6b:0d:db:f4:
                    b8:c3:b8:0a:1a:04:14:98:84:1c:e1:50:8e:8d:36:
                    ab:3a:a4:59:2f:c9:e4:69:e4:33:9e:ad:ca:e2:28:
                    de:f7:41:59:ca:f5:3e:54:4d:59:44:6f:8d:9e:51:
                    fb:6b:e7:20:48:db:bb:3a:43:0e:84:5a:b3:af:14:
                    0b:fb:53:c3:dc:4e:79:66:18:bc:aa:81:bf:65:02:
                    34:d6:d1:04:82:50:4e:16:51:57:7f:32:3b:9a:ec:
                    bf:8b:83:92:01:90:14:e3:41:27:17:e4:6b:1c:4e:
                    05:21:1d:8f:34:d9:9a:e4:d1:7f:94:a0:5e:53:dc:
                    be:38:b2:44:05:59:a9:fa:7f:23:a9:0c:6e:74:49:
                    0e:80:3e:af:e0:18:00:be:42:6a:1c:20:40:ae:d6:
                    23:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:AF:19:41:DC:98:41:7C:FF:5C:AD:0F:C8:8D:5F:31:C3:FC:88
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:03:4d:76:13:db:d9:db:0b:aa:6c:d0:a6:ea:da:ad:a0:69:
         33:0d:44:2d:e2:b7:5c:e7:42:32:50:c4:eb:54:d5:8f:11:f6:
         69:88:9c:83:b0:1b:a9:6c:a6:d4:6d:96:2e:8c:52:ea:58:9d:
         44:a6:ae:fd:4a:7e:cd:0f:9a:91:94:95:06:b7:0a:e5:b8:55:
         b6:25:9f:4d:00:c5:6f:cf:80:df:2f:7f:1e:25:41:e6:a5:1c:
         c7:0b:9c:6a:6a:ec:8c:a2:c0:2d:55:78:16:a2:26:1c:69:5d:
         f5:00:2b:9b:c8:97:e1:11:27:50:2a:74:fc:76:8b:9f:3a:3f:
         d5:c4:75:45:9d:d2:6f:8e:d2:48:36:fa:52:bf:a7:d5:f9:fc:
         e8:97:3c:71:11:57:aa:74:d6:cd:a7:f3:53:f4:4c:ab:53:77:
         ae:42:55:f4:e6:c5:99:8f:21:12:9e:59:25:ff:e1:7a:89:30:
         1f:13:73:3d:7f:67:ce:65:06:be:35:b3:10:04:5d:56:51:fa:
         03:f7:ee:ea:8b:8b:ff:18:a4:a0:21:8f:c5:78:2f:54:8a:7c:
         65:43:fd:08:2e:66:1f:5a:3d:e8:b7:e4:68:25:a0:2e:11:4f:
         37:7e:09:31:76:ce:bf:13:18:0d:3d:95:a0:c4:17:43:02:47:
         77:48:61:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:50:03 2026 by rpki-client