Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File:                     AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier:          LniouPO/gza47Laz5j2xNZ163RIKPutY50JALnWBJrA=
Subject key identifier:   27:6F:CA:85:E0:03:0A:2E:CD:6D:52:40:37:7F:77:DB:5A:5B:DB:02
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer:       /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial:       019F18306E4390645523B0F104CEF8E713B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 11:00:54 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:54 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:54 +0000
Files and hashes:         1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: G9yf4JtkKSaA7T/o5Kb4cRreZfYDGSjgkWbh186Nr/E=)
                          2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:6e:43:90:64:55:23:b0:f1:04:ce:f8:e7:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
        Validity
            Not Before: Jun 30 11:00:54 2026 GMT
            Not After : Jul  1 11:00:54 2026 GMT
        Subject: CN=276fca85e0030a2ecd6d5240377f77db5a5bdb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:52:22:6d:46:2c:e6:1d:92:11:3b:f0:98:
                    76:e6:f8:76:79:93:b3:19:30:0f:95:ab:68:29:1f:
                    00:b5:67:da:cc:a3:ea:58:e8:40:32:e6:2d:b3:d4:
                    32:a7:c5:21:f8:d4:f8:84:a4:d7:2d:e1:57:85:b3:
                    2b:7d:16:f9:d2:e2:be:2f:82:4b:45:a9:a5:e9:88:
                    a1:2d:39:ed:0b:5e:26:9d:4a:e5:99:56:28:df:f4:
                    63:dc:41:77:0c:83:6c:35:eb:67:f1:5f:88:61:73:
                    71:c6:0c:87:14:9c:2b:7b:0d:ad:36:c6:08:6f:9f:
                    d2:c2:a3:5f:3f:55:37:51:a1:5c:cc:85:af:3f:51:
                    b0:8d:6e:3a:1d:be:50:81:a3:c1:2f:4d:21:8a:f8:
                    e2:09:46:94:f0:a8:aa:a2:0b:32:4b:89:62:33:ec:
                    25:31:04:bc:e4:64:35:13:76:68:43:3e:b3:6f:a4:
                    93:c1:c0:18:32:6f:da:d5:b2:39:31:1d:c4:b6:a3:
                    26:b7:b2:8b:a9:61:f7:1f:39:a3:20:39:74:77:21:
                    79:20:e6:f7:28:a2:b0:23:ab:b2:5b:7f:65:a4:25:
                    f9:ef:db:ec:c7:bd:ab:8d:89:c4:65:32:1e:60:ea:
                    ce:ef:07:bf:21:9f:a2:ab:31:02:13:27:a3:a3:22:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6F:CA:85:E0:03:0A:2E:CD:6D:52:40:37:7F:77:DB:5A:5B:DB:02
            X509v3 Authority Key Identifier:
                keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:49:de:1d:ed:f1:3a:d9:8f:53:12:eb:36:df:ac:09:00:
         64:03:36:cc:f8:af:01:52:e2:25:c7:80:40:f3:3e:d2:9f:34:
         5b:d4:39:43:e2:8f:df:77:68:aa:f7:ca:e9:3d:09:7e:cf:4d:
         04:43:5e:b1:11:08:2f:05:70:92:fd:fc:d4:04:52:af:c7:49:
         4d:e6:21:3f:ce:8e:92:fc:fd:55:cf:eb:34:c1:49:f9:68:d4:
         f6:38:1e:3f:21:3f:b1:fb:6b:1d:9b:7d:b7:b1:37:7e:46:b0:
         32:8c:41:b7:7a:70:aa:10:0c:74:a7:a6:80:ab:fe:41:5e:e4:
         51:7e:c6:14:dd:91:3d:30:d0:d8:1b:07:97:9b:d4:12:bd:f7:
         80:db:25:97:89:70:27:78:87:04:62:b2:e2:da:14:78:13:21:
         7d:92:d4:8b:86:06:ee:3f:d4:be:57:37:ad:e3:11:38:8c:96:
         04:88:72:00:3a:3a:2a:a9:92:9b:04:e5:33:00:20:c4:b8:11:
         93:9b:71:2d:a6:58:46:c6:da:2c:7d:bb:35:2c:aa:e8:61:0e:
         73:86:3c:cf:f5:e1:78:76:ca:b2:12:75:6e:ba:f3:82:1e:64:
         a2:38:8f:3a:19:9b:cf:67:37:ef:9e:20:80:1c:49:2c:05:90:
         00:91:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:19 2026 by rpki-client