Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File:                     aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier:          KC3HJUmcF8wK80N8/XG5puJm0fU8aM2DR60ignDhWWw=
Subject key identifier:   23:35:CA:5E:E7:71:84:E4:10:86:6C:D3:12:DA:1B:B1:65:97:F3:60
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer:       /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial:       019E2324A24E968F7815E0BBE829F94E5760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number:          119E
Signing time:             Wed 13 May 2026 21:01:03 +0000
Manifest this update:     Wed 13 May 2026 21:01:03 +0000
Manifest next update:     Thu 14 May 2026 21:01:03 +0000
Files and hashes:         1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: qrh1x+3helriVrgJlcHrM6fvtlB9yrXtVJe5JuVrBQs=)
                          2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:24:a2:4e:96:8f:78:15:e0:bb:e8:29:f9:4e:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
        Validity
            Not Before: May 13 21:01:03 2026 GMT
            Not After : May 14 21:01:03 2026 GMT
        Subject: CN=2335ca5ee77184e410866cd312da1bb16597f360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:3b:58:50:27:f9:35:da:d6:ec:40:e6:0a:
                    98:c9:7c:5e:38:cb:f2:cc:87:d2:e0:15:4d:28:b6:
                    43:58:15:92:dc:5a:f2:6c:80:27:6c:9c:76:d1:25:
                    87:37:ee:b8:77:25:7e:e1:4d:5a:53:3d:9d:a4:84:
                    29:52:b6:96:fb:58:bb:98:4f:34:a8:8f:0d:5c:ea:
                    ca:cf:d8:6a:24:4b:86:bc:7e:a3:f9:2f:4e:8f:0c:
                    9f:5d:2e:f5:c9:2e:5c:86:0b:05:29:6f:12:54:d1:
                    2a:71:33:55:49:53:de:b3:2e:78:10:de:12:74:d1:
                    2b:22:19:49:c1:7c:2d:6f:f8:24:53:e3:44:7f:8a:
                    85:8d:de:5d:1c:17:38:39:27:62:ef:f6:df:3d:18:
                    5a:a8:d0:98:e9:88:91:ea:5a:d2:04:e4:81:11:0b:
                    23:ac:a5:50:f2:41:97:9a:b8:f6:3a:16:fe:9e:55:
                    15:6f:a2:ea:34:c0:f0:90:5a:37:a6:fc:6d:08:86:
                    13:02:64:d1:a4:92:71:4b:56:6b:8b:ad:bc:68:16:
                    37:3a:7f:c3:49:8d:e8:40:1d:7c:d5:63:b4:93:4c:
                    fb:18:08:f7:72:96:85:c1:02:9f:6a:85:8a:ee:82:
                    f7:1f:00:2c:8a:a8:d7:e4:1a:d4:cd:17:1a:1a:f3:
                    e4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:CA:5E:E7:71:84:E4:10:86:6C:D3:12:DA:1B:B1:65:97:F3:60
            X509v3 Authority Key Identifier:
                keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:14:bb:9a:96:fb:b7:de:55:7c:1d:ba:c2:68:45:3e:98:
         de:dc:15:8b:e2:f0:2f:7b:18:23:24:c1:eb:0b:de:95:00:19:
         65:1c:eb:7e:70:5e:ae:02:5d:b7:34:b5:d3:eb:42:82:55:62:
         54:34:8f:9b:e1:9a:cc:f6:f0:ad:9e:8e:93:e2:3d:c2:32:26:
         12:1d:10:84:16:92:b4:55:2d:9b:a3:bd:b3:b4:6b:31:81:42:
         82:f3:e9:0d:f4:4c:45:f5:93:9d:dd:77:94:0c:b3:97:66:22:
         e5:91:35:2a:18:d9:c1:6d:26:1a:43:71:18:0e:d2:b5:e0:cc:
         d1:6f:01:55:cd:38:c2:fe:a2:63:91:fa:7a:69:45:d4:c2:17:
         22:17:cf:7a:fe:cf:f0:f6:1a:ba:6b:56:1a:a1:96:94:98:f1:
         f7:94:87:ec:ce:cb:89:39:2c:54:d1:4b:dc:d3:a5:dd:ad:20:
         49:3e:96:af:71:94:1d:9b:2f:67:12:8a:23:5f:86:5d:0d:a6:
         5c:7f:90:f2:9f:b3:f7:90:a4:77:ee:60:76:40:94:d4:c7:64:
         7a:42:72:4f:a7:a5:46:ab:d0:a1:68:a0:90:d7:b3:6f:f5:b8:
         4a:e5:38:55:45:8b:19:03:9f:05:d2:ef:db:59:4d:f7:8f:92:
         3f:a4:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 02:56:48 2026 by rpki-client