Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File:                     AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier:          T54/3VkqxvpwuAQuCIADE9FZevsFoeXFd4tjNWh4ALk=
Subject key identifier:   78:34:CF:DB:98:25:79:46:B8:F6:58:79:94:25:93:3F:A0:01:0F:B0
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer:       /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial:       019D27049F21A911B4600B5974E49277C17B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number:          098F
Signing time:             Wed 25 Mar 2026 22:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:47 +0000
Files and hashes:         1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: qrAux8tCIepQJ49LINeVZC7puK3ROEYPX3VqNsy3H1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:9f:21:a9:11:b4:60:0b:59:74:e4:92:77:c1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
        Validity
            Not Before: Mar 25 22:01:47 2026 GMT
            Not After : Mar 26 22:01:47 2026 GMT
        Subject: CN=7834cfdb98257946b8f658799425933fa0010fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:af:86:69:64:9a:96:7b:21:71:84:d0:e2:
                    21:9c:d0:60:95:29:95:8e:b4:81:b2:e0:a0:42:ca:
                    c4:a7:6d:03:5e:c9:a7:c8:54:c1:75:f7:e3:e4:79:
                    71:62:ed:9c:bc:d9:92:f1:41:65:91:a2:10:32:d8:
                    75:ff:50:b6:be:f9:cc:e8:46:d3:be:50:9f:0f:43:
                    7b:8d:56:10:54:20:52:61:0c:71:41:c2:78:91:2f:
                    28:91:7e:39:4c:20:48:72:9c:8b:13:50:44:12:9a:
                    aa:6b:e9:65:84:51:20:af:8c:c3:0d:59:9c:0e:0d:
                    c7:67:6d:e8:7c:82:18:8e:f4:fb:43:35:c5:41:7a:
                    2e:ee:7f:af:7d:19:ae:ec:af:f2:20:e6:bf:55:db:
                    c0:32:22:60:58:48:94:69:d5:43:ba:f4:01:05:41:
                    1f:6a:eb:b1:fb:f6:d3:e6:84:c2:2e:f8:92:0a:73:
                    20:46:f0:7e:a8:94:96:57:7e:c7:09:1e:84:9c:0d:
                    3e:73:ac:ac:4e:95:43:d2:c4:10:ff:0c:07:2e:b4:
                    a7:e6:e0:a2:a1:2d:d3:7e:fa:ae:07:3c:f0:1e:58:
                    c4:4c:19:2e:62:87:c3:8b:f2:d7:b7:d7:27:7f:e6:
                    15:62:2b:6f:6d:01:ed:55:7c:cb:40:dd:b0:23:db:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:CF:DB:98:25:79:46:B8:F6:58:79:94:25:93:3F:A0:01:0F:B0
            X509v3 Authority Key Identifier:
                keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:41:09:b5:2a:a2:58:ff:9a:4c:3d:b9:a2:fb:0c:31:6a:23:
         28:a3:1e:b8:39:19:30:49:7a:0e:8c:38:a0:be:17:23:b1:bd:
         3c:c8:c9:22:7f:af:1c:fa:34:87:cf:99:31:43:27:0f:4a:a9:
         0c:a4:43:73:49:9a:78:10:3a:89:1a:62:32:38:8c:d3:85:b7:
         0d:b9:10:2f:75:25:e3:c0:3f:8b:97:22:1f:08:dd:a3:78:20:
         eb:55:35:e6:0b:4c:d8:11:bc:6b:db:bc:84:e5:f8:b1:8c:e3:
         a6:d9:f4:4c:dd:f3:93:e6:42:a5:d6:0b:a8:7e:1e:b3:99:96:
         fd:ed:d6:5f:9d:30:d7:82:1d:c8:ce:61:cf:a7:5f:71:41:ce:
         d0:17:da:c7:7c:dc:1b:e4:e2:b0:b9:b7:42:4a:2f:af:df:49:
         c7:ee:25:41:8b:9b:60:b4:1b:85:e0:dc:83:a8:51:bd:34:fe:
         43:7d:b0:0d:59:30:c7:f2:d3:3c:83:fe:44:44:0c:14:7f:ed:
         8b:76:79:dc:4b:29:66:20:48:e0:3f:48:42:a5:bf:77:9b:96:
         c5:4d:ed:25:6f:6c:e2:1e:a7:43:49:1c:11:51:fa:9e:43:81:
         c4:82:56:5c:20:02:f3:1a:44:30:99:0c:b8:c3:87:2e:59:ee:
         b3:0b:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:36 2026 by rpki-client