Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft
File:                     azMp2nWywMTz2dnOossQFoZ0UzY.mft (raw, json)
Hash identifier:          H0pkQ4UKZNBqBQCeDzHC5L/pi79dwITUku1L7a3XETs=
Subject key identifier:   95:1E:38:98:51:C3:FD:C3:DD:CC:D6:91:B9:D6:67:46:D0:C6:BE:FA
Authority key identifier: 6B:33:29:DA:75:B2:C0:C4:F3:D9:D9:CE:A2:CB:10:16:86:74:53:36
Certificate issuer:       /CN=6b3329da75b2c0c4f3d9d9cea2cb101686745336
Certificate serial:       019EE443A97A1E078A7B82210B268E43D37E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azMp2nWywMTz2dnOossQFoZ0UzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft
Manifest number:          27
Signing time:             Sat 20 Jun 2026 09:01:39 +0000
Manifest this update:     Sat 20 Jun 2026 09:01:39 +0000
Manifest next update:     Sun 21 Jun 2026 09:01:39 +0000
Files and hashes:         1: 7NWNrFh8i_yUOh1S1hCMP7auLcw.roa (hash: gIvNWFICdPsChUMkKceiQEvtY8HIt5JegNK3D/PczuA=)
                          2: azMp2nWywMTz2dnOossQFoZ0UzY.crl (hash: sNUS6O/5uBV7r1auGZrYCjkm+7HMVlhuuRIjzmiFb84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azMp2nWywMTz2dnOossQFoZ0UzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e4:43:a9:7a:1e:07:8a:7b:82:21:0b:26:8e:43:d3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3329da75b2c0c4f3d9d9cea2cb101686745336
        Validity
            Not Before: Jun 20 09:01:39 2026 GMT
            Not After : Jun 21 09:01:39 2026 GMT
        Subject: CN=951e389851c3fdc3ddccd691b9d66746d0c6befa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:1c:85:2d:6f:fc:77:8b:6c:83:30:25:86:
                    4e:cf:60:2f:78:c3:32:77:ce:db:0b:53:c5:cf:10:
                    90:b5:34:71:ce:c8:ae:80:ce:97:ee:6e:d9:09:fb:
                    d3:c9:73:cf:06:96:9a:d1:f2:24:04:dc:bc:ee:39:
                    11:c4:86:d8:53:54:2a:af:be:80:56:61:17:6a:c9:
                    94:8b:32:f2:eb:0a:cb:c2:4c:b5:0d:41:7b:9e:2a:
                    d7:cb:41:a3:5b:dd:73:75:2f:5f:80:8c:66:62:cf:
                    83:14:42:c4:ab:fa:e0:78:97:c7:42:fd:4a:13:2c:
                    3f:8d:b8:0c:5c:ab:61:14:9d:42:89:35:f0:43:61:
                    bf:32:84:27:29:6a:21:aa:2f:20:d6:2d:52:7f:8a:
                    09:fb:58:8d:4c:a5:ea:04:e6:d6:84:fc:80:a2:47:
                    a3:27:b4:9f:f4:b6:5e:af:61:93:a6:62:1a:e8:37:
                    ab:d2:6f:98:3c:8d:4c:93:40:b9:77:aa:14:9d:17:
                    f9:79:b1:22:a0:67:2b:a1:59:2b:5f:9e:e5:0d:18:
                    19:a5:84:64:79:86:af:ca:8c:d4:38:00:b6:88:23:
                    ef:f8:03:48:e7:4c:d3:5b:04:00:89:86:90:f5:ed:
                    3a:b5:10:6f:7d:b3:a1:c9:e6:1a:09:eb:fe:05:de:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:38:98:51:C3:FD:C3:DD:CC:D6:91:B9:D6:67:46:D0:C6:BE:FA
            X509v3 Authority Key Identifier:
                keyid:6B:33:29:DA:75:B2:C0:C4:F3:D9:D9:CE:A2:CB:10:16:86:74:53:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azMp2nWywMTz2dnOossQFoZ0UzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b9d2bf-2888-4b42-984d-f2f50b190ad0/1/azMp2nWywMTz2dnOossQFoZ0UzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:81:20:02:b9:90:77:e4:9d:0c:5d:35:40:ab:c9:28:98:94:
         ab:7e:50:20:59:67:57:66:df:3b:99:8b:e0:2f:31:87:1f:9d:
         92:ee:08:d5:3f:23:71:1b:88:34:7d:b5:c1:31:6f:6b:0f:25:
         12:07:40:0d:95:a6:18:1a:26:7a:16:78:08:7e:33:ec:da:a1:
         b1:6a:f9:27:86:52:d6:95:58:a6:63:cc:ed:1f:16:5c:e9:7b:
         65:c9:cd:c5:51:1d:7b:a8:62:6e:e6:40:b0:d3:ee:50:27:0a:
         5b:8c:30:1f:b8:d5:23:79:7a:86:65:e4:af:30:77:f3:ae:13:
         46:b8:04:53:db:92:a6:3f:e1:c4:ca:a8:3d:a4:65:67:28:23:
         73:5f:2d:e8:a5:8e:4c:56:0a:74:79:b0:29:1a:84:c1:2a:46:
         46:74:4d:e2:7f:f6:cd:85:e3:0c:33:7b:52:dd:b6:08:9c:8b:
         5b:46:34:b9:58:16:ef:60:3f:3e:b7:34:c8:96:51:09:99:e1:
         79:bc:5e:3b:a9:e0:a0:c3:9f:0e:b0:d2:77:d6:a2:ed:92:9e:
         b7:30:e0:0a:f5:7e:d2:17:58:f0:cc:ab:dd:1d:fd:a0:06:c9:
         09:4c:dd:85:04:c4:52:6e:68:91:ca:dd:84:b3:57:25:e0:42:
         df:ae:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:51:09 2026 by rpki-client