Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          4/WuOGg/IXDa8W9noIzP6yp1SUUzHVziA1tWa+S7fgM=
Subject key identifier:   4C:62:5E:E9:DF:15:AA:BE:6F:7E:5C:FF:C5:D5:7F:51:05:B3:DA:28
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       01A001DD73128EF11A1534E226DC59E1C501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          1A04
Signing time:             Fri 14 Aug 2026 20:01:24 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:24 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:24 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: l41j9kAdUTQfhUpVt0uBk6BptajTPaElzCEN2cUliBI=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:73:12:8e:f1:1a:15:34:e2:26:dc:59:e1:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Aug 14 20:01:24 2026 GMT
            Not After : Aug 15 20:01:24 2026 GMT
        Subject: CN=4c625ee9df15aabe6f7e5cffc5d57f5105b3da28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5f:b2:7f:57:d5:95:7c:86:07:28:61:64:47:
                    d2:f3:9e:2c:0f:fc:4f:9d:7b:59:2a:b4:c1:6d:0b:
                    20:34:1f:17:d0:ab:96:5a:3a:fe:3c:3a:f3:68:05:
                    ab:d5:bb:ba:60:44:ce:2b:ec:fa:43:ed:83:87:c4:
                    c7:58:5f:22:c6:33:1e:8c:eb:bc:f7:57:51:9c:39:
                    b6:11:e2:fb:18:ca:c6:9e:43:5e:d0:e9:0f:c3:b2:
                    9a:09:23:06:44:80:06:f7:25:c3:28:a3:fa:61:97:
                    34:8a:7e:94:a6:55:21:f5:e7:9f:7f:88:80:f3:bf:
                    37:e1:3d:6a:d7:03:bc:82:35:0f:0e:80:e5:69:c1:
                    84:8a:11:76:47:cc:9f:d5:0c:d3:78:49:7d:eb:75:
                    b9:60:66:f7:50:8e:1f:b1:a0:93:73:6a:ea:2a:c8:
                    e9:b8:8d:fc:eb:79:b3:b3:b3:1a:59:36:4d:1f:93:
                    3f:fb:bb:d3:b5:be:29:90:8f:8c:b4:e7:88:36:d0:
                    7d:b9:06:36:ef:a3:fe:b0:cc:ae:1c:82:05:73:59:
                    d5:5a:ce:3d:d4:ae:f4:62:be:da:62:4c:52:bf:b2:
                    dd:36:30:4e:3f:88:ba:2a:a3:07:99:71:92:4d:9b:
                    af:ab:9c:cf:b5:86:54:32:ab:e3:74:24:d2:d7:6a:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:5E:E9:DF:15:AA:BE:6F:7E:5C:FF:C5:D5:7F:51:05:B3:DA:28
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a5:70:6b:53:d7:90:93:1e:31:39:2f:77:51:fb:d8:f0:fe:
         83:ae:a7:b8:64:8a:27:eb:34:ef:74:ae:ac:7a:97:d5:cf:91:
         98:2a:3e:d4:4e:3c:ec:73:0b:73:ff:a9:0c:f1:92:c2:e9:9f:
         d7:48:cd:0a:94:26:f8:01:cc:11:f6:d8:62:ce:e9:fa:0e:be:
         7d:c3:68:2c:9c:c6:0a:ec:5d:bc:ed:74:dc:5f:48:9b:0d:09:
         d9:7f:8f:75:e2:be:3c:dd:5e:89:7f:be:c5:c7:7e:70:58:df:
         2d:15:14:27:be:27:f5:51:86:92:8a:5b:bf:95:50:ee:f0:64:
         fa:15:ef:fd:14:19:48:01:80:d0:c8:a4:73:5a:5f:57:ee:d4:
         9e:a4:32:9e:7a:86:45:29:2d:de:cb:a9:08:c9:ec:f1:9d:0a:
         b6:75:25:72:b6:e1:73:3c:de:6e:bc:5c:43:4f:54:25:6b:17:
         89:1a:d6:85:39:13:ba:a4:f1:3b:75:4f:5e:da:34:5c:91:d7:
         0f:49:69:49:57:56:3a:5d:9b:06:1a:74:ab:d7:ba:f3:d1:d2:
         b0:f8:67:13:f5:86:c1:00:3f:62:6d:f8:2e:b0:8a:88:49:29:
         e0:74:04:6f:7a:74:79:b4:8e:70:4f:4e:dc:07:de:0c:43:39:
         86:b4:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:43 2026 by rpki-client