Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          c7tTRYxGKuCK2ulr6If/aOVIUdk6hWxEHU+cxh4ab8I=
Subject key identifier:   88:75:1E:EB:5B:6F:66:D7:76:78:5C:3F:83:35:95:AE:E8:DF:6C:78
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       019F8FECB5A5BCEA2B8785D20556A33C5049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 17:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:22 +0000
Files and hashes:         1: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: l/grOfDahcNaUfZ2HLfXULHNvPVhmAi3RtKVSAbdH+s=)
                          2: MQ92_0fGHOoIjRuTyTUpaxcjewQ.roa (hash: pQoBQIuWr/SR02V/o9Vd/iTYZAno9pmjmE5yt40diZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:b5:a5:bc:ea:2b:87:85:d2:05:56:a3:3c:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Jul 23 17:01:22 2026 GMT
            Not After : Jul 24 17:01:22 2026 GMT
        Subject: CN=88751eeb5b6f66d776785c3f833595aee8df6c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:4d:0e:d3:97:3e:63:09:cd:dc:68:6f:9c:
                    94:42:e9:89:46:bb:2d:6f:a3:28:0b:77:8d:7c:0e:
                    b2:54:1e:ea:d2:d2:31:42:fb:23:e4:aa:fc:f2:72:
                    70:55:eb:4e:4e:ae:b5:ce:62:55:d6:ea:30:89:3c:
                    e2:b3:3d:8e:69:40:f5:22:61:fc:a8:80:b7:72:40:
                    3d:f9:91:43:55:f0:ce:98:e0:8b:c1:05:ee:06:a4:
                    d7:e9:6c:59:5b:54:6b:72:31:b8:fb:97:9c:43:6d:
                    35:de:83:b9:8c:65:6b:c0:7f:5c:55:62:32:4b:17:
                    8c:e1:02:a2:78:92:d0:17:42:98:7c:d0:5e:7d:d1:
                    3c:18:f0:86:13:01:2a:e2:7a:d9:ae:8b:3e:01:9e:
                    cc:df:a9:3a:d8:b7:66:04:34:eb:ed:86:44:6d:61:
                    be:44:60:48:45:e6:58:29:ab:27:6e:54:37:2e:f9:
                    97:b1:89:2c:d9:e8:a5:59:d6:d3:1e:01:82:9d:bf:
                    81:70:9d:4b:e2:e2:a8:4d:30:e0:3e:89:b0:db:e4:
                    6a:a1:7d:ae:89:31:dd:9e:6d:ea:fc:3b:9b:45:54:
                    19:e6:5d:1d:3c:a3:fd:4d:2b:e1:41:24:35:33:26:
                    30:a1:31:82:55:5b:dc:b7:ac:30:92:49:4c:bb:30:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:75:1E:EB:5B:6F:66:D7:76:78:5C:3F:83:35:95:AE:E8:DF:6C:78
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:66:8d:18:25:d3:62:e8:1d:06:2e:14:a5:84:39:7a:c1:06:
         19:47:ce:a1:6a:14:e3:19:f7:20:45:7f:0a:1c:d5:90:5f:c8:
         a4:b9:1d:b2:f4:f6:cb:28:72:96:f2:79:73:9d:07:96:32:39:
         5f:db:ad:02:cc:96:16:9c:1b:04:94:a3:f3:55:d3:2f:b8:01:
         37:1e:2f:b6:51:5c:d4:fb:84:5c:30:5c:a9:29:da:d2:3d:d9:
         fd:dc:8d:5a:75:56:46:dc:de:e3:a7:8a:4c:88:96:64:76:2a:
         27:b0:10:43:7c:6e:d8:95:ea:01:a6:c0:cb:6e:dd:43:4b:ee:
         8e:a7:ea:ec:b5:49:37:3e:48:48:26:c4:58:d3:d3:23:b1:1a:
         be:89:4d:5e:9f:06:72:e1:ef:7d:4e:c1:44:be:5d:d3:a5:2d:
         9d:24:65:97:78:6c:42:2c:da:f5:87:b3:4c:93:10:a1:53:1c:
         e0:ee:0a:d2:74:62:d9:25:31:9a:4c:eb:47:3c:0c:ff:09:24:
         04:f8:e4:3b:3b:e1:d1:bd:af:6b:82:48:83:8e:c9:64:8b:3d:
         18:0f:74:73:13:c2:37:e2:d7:98:5e:4a:5e:a6:97:83:74:82:
         08:ef:b3:b9:58:5c:9b:f6:bd:ff:92:10:64:44:6a:43:55:ce:
         bc:bc:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:29 2026 by rpki-client