Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
File:                     t_AzNOrsueClE-t-Ih98zUkoFIc.mft (raw, json)
Hash identifier:          06lhFR5JGrYpKizwioG2kHXUJog/+4L+GVy5Wdx4C3k=
Subject key identifier:   99:14:01:98:A9:B9:9F:F2:14:BD:E1:0D:87:19:39:21:A7:9D:02:97
Authority key identifier: B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87
Certificate issuer:       /CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487
Certificate serial:       019D24718A3A4EDAFF60BD9B37CD947C03BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
Manifest number:          82
Signing time:             Wed 25 Mar 2026 10:01:53 +0000
Manifest this update:     Wed 25 Mar 2026 10:01:53 +0000
Manifest next update:     Thu 26 Mar 2026 10:01:53 +0000
Files and hashes:         1: kgULxRnCqup5WVtuSBDz8GCsYPo.asa (hash: cA1letagZrqW8+LI+von+DlhHfa6mF77tjboU6p7mB8=)
                          2: t_AzNOrsueClE-t-Ih98zUkoFIc.crl (hash: wsGwHzBAhNPi/WucMxhtvVneSsgAmStxJteJuwfc34Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:71:8a:3a:4e:da:ff:60:bd:9b:37:cd:94:7c:03:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487
        Validity
            Not Before: Mar 25 10:01:53 2026 GMT
            Not After : Mar 26 10:01:53 2026 GMT
        Subject: CN=99140198a9b99ff214bde10d87193921a79d0297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:db:2b:7b:74:1a:a9:76:ae:59:69:5a:f6:
                    ff:c1:27:b7:f4:f3:06:6f:cc:e6:a8:15:1a:c8:1e:
                    56:c1:92:5a:1a:70:7a:50:0d:7b:51:30:b9:09:31:
                    5e:b4:89:f9:e5:8b:14:9a:5d:62:3c:de:0e:0f:54:
                    1f:d8:3f:10:7d:a0:a7:74:db:56:52:69:ca:0e:8d:
                    54:0d:27:7e:7b:f4:c6:67:28:db:23:c5:3c:d2:2b:
                    bb:cb:87:c5:48:2b:85:5c:c9:d7:77:07:80:28:e8:
                    7b:79:39:19:a1:d2:0c:d2:ad:fe:60:0f:84:dd:8c:
                    59:1a:5c:1c:81:61:17:62:2b:2c:fb:11:f8:05:52:
                    88:a7:c7:27:96:cf:90:c9:e5:32:dc:d7:38:d8:bb:
                    22:06:00:9e:09:94:42:67:24:07:0d:f3:4d:ca:82:
                    b4:60:3c:13:e5:7c:36:1e:89:29:2b:de:ef:b7:32:
                    33:2b:61:c3:ec:de:2f:21:51:48:b9:20:77:4c:b9:
                    b7:97:d7:04:55:6e:96:b6:33:2f:34:5f:be:b0:61:
                    f7:dc:7a:e3:8c:3c:ac:23:f9:98:6d:4c:10:71:25:
                    91:99:8d:37:b4:c4:ea:d2:20:8b:04:d9:1e:55:4c:
                    51:ef:51:fe:53:97:f5:cd:f5:23:f1:e2:d4:7f:f4:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:14:01:98:A9:B9:9F:F2:14:BD:E1:0D:87:19:39:21:A7:9D:02:97
            X509v3 Authority Key Identifier:
                keyid:B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:c2:5f:a8:73:a9:8f:06:96:58:6b:99:5d:11:fa:36:6c:
         f5:52:46:22:67:92:36:64:65:39:cc:48:12:e9:f7:24:9f:75:
         61:f2:98:d9:ec:87:d0:4e:91:0c:23:55:5c:91:02:fe:58:c9:
         e2:c9:71:1d:34:42:f7:9f:7d:54:49:f1:f0:15:11:a4:1f:5f:
         22:93:6c:f8:10:2f:e9:42:65:2f:b4:7c:9c:df:ec:75:78:f7:
         f3:05:51:bc:ad:b3:c4:53:57:c7:98:50:f0:f6:a2:7d:9b:67:
         5c:6b:7f:3c:08:8d:11:c2:40:20:93:e0:a9:25:c4:5b:db:65:
         3c:13:ec:17:1c:b0:41:87:62:37:f5:b4:31:36:91:b6:37:8d:
         6c:21:02:d3:67:7e:70:de:66:2d:00:9e:37:08:c2:20:e7:99:
         74:3c:c9:9e:21:61:96:2b:52:f4:3b:9b:67:e9:4c:18:f7:82:
         e7:4b:e7:79:6c:01:57:be:3a:e0:d3:42:35:dd:b0:13:f4:78:
         93:bb:68:27:8b:89:6b:cd:31:3b:24:69:ac:c3:47:0d:40:c8:
         74:b7:6a:ae:b0:67:1f:80:d0:c0:c1:58:f8:76:2c:8f:45:1e:
         d4:94:90:04:71:fb:76:1f:bf:92:ca:ce:43:a5:3f:44:9e:94:
         ee:58:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:51 2026 by rpki-client