Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
File:                     AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json)
Hash identifier:          R6nuzS+3xiSVxHrDysUwSWDGQeiq2fDdeBJdXhFw9J4=
Subject key identifier:   E4:9E:AD:03:4C:E2:E5:6B:47:54:13:64:F6:C1:79:9D:32:AD:5F:89
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Certificate issuer:       /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial:       019E1D229CF3B156BD4C556205566219AB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 17:01:07 +0000
Manifest this update:     Tue 12 May 2026 17:01:07 +0000
Manifest next update:     Wed 13 May 2026 17:01:07 +0000
Files and hashes:         1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: 7kvwDYws9FPOiezhIOsQLF4hshxhXaiXr+PGKco3kLk=)
                          2: anrHbhOJ_sDeOGsZqi6XBsId81s.roa (hash: xMq6I1dSb7bxT2SD4A/tmxqXSuNiBJbAzYXnHtz1Ido=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:9c:f3:b1:56:bd:4c:55:62:05:56:62:19:ab:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
        Validity
            Not Before: May 12 17:01:07 2026 GMT
            Not After : May 13 17:01:07 2026 GMT
        Subject: CN=e49ead034ce2e56b47541364f6c1799d32ad5f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:45:5e:87:8c:0e:50:d6:b6:eb:36:ff:ff:
                    f9:be:d8:70:fa:33:96:5a:27:63:b6:f1:e0:3e:df:
                    24:7d:d1:5d:d7:51:ec:2c:53:46:59:e4:a5:1f:3b:
                    8c:1d:69:cb:be:b8:61:94:2b:01:c6:5f:dd:84:f0:
                    24:23:3c:81:e8:c4:8a:ce:47:7f:04:bf:41:cd:0f:
                    07:b1:bd:05:8d:77:e7:6a:f3:7e:5f:33:e1:02:37:
                    0d:38:b3:6c:6d:76:4e:4b:91:79:9d:98:a4:b7:c7:
                    87:b2:11:47:82:9c:15:ae:fe:f1:66:b2:10:d6:f6:
                    fe:aa:7b:d0:dd:32:59:50:ad:9e:4b:8c:ba:af:10:
                    59:d8:d6:c1:ec:61:7a:17:cf:6e:9e:7b:b7:3b:ca:
                    8a:0f:02:89:ca:e5:47:11:03:dc:34:db:ea:12:17:
                    91:f4:71:6a:9a:f9:8b:bf:34:3b:f2:b7:da:5a:72:
                    98:2f:bf:18:c1:9a:0a:b6:d3:6f:bd:3e:0b:77:62:
                    41:5a:59:cb:84:f8:4a:06:c0:38:74:c4:7a:cc:dd:
                    f2:ef:6e:ad:d7:55:39:1c:71:6a:70:d5:b8:75:d8:
                    e3:8a:24:d0:af:84:25:2b:91:7c:ae:fb:42:85:53:
                    57:ce:72:11:a9:e5:ff:58:bd:37:b0:6c:1c:e4:e3:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:AD:03:4C:E2:E5:6B:47:54:13:64:F6:C1:79:9D:32:AD:5F:89
            X509v3 Authority Key Identifier:
                keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:d7:d7:0e:c7:8a:fa:e5:40:09:2a:f8:82:29:67:bd:32:
         7e:00:f9:af:20:2a:7b:45:59:c4:af:8c:fb:4d:98:31:41:43:
         a5:e1:3f:28:61:89:33:14:74:51:32:8c:ec:96:c5:04:a5:84:
         0e:07:b8:9d:93:6e:8e:cc:b6:6d:54:29:a0:78:c2:a6:39:4e:
         ed:7e:70:04:c4:6c:3e:a8:ea:4e:74:4a:42:37:ce:c4:72:63:
         64:52:8c:95:ef:d9:0d:a2:5d:80:7c:ed:98:bb:0e:0d:b4:28:
         1e:88:8f:ed:16:d5:bb:ae:f5:50:43:ae:06:12:62:f0:35:52:
         5b:25:79:e0:a9:65:93:95:5f:33:e8:f3:c1:08:e0:1c:32:43:
         fa:f5:48:4e:4c:88:e8:e4:55:09:da:db:68:4d:7e:9c:77:8c:
         f2:64:24:ba:9a:71:bd:88:6b:29:77:a3:ab:55:23:4f:3f:c5:
         22:27:60:fb:4c:c8:3f:58:8d:41:a3:66:b6:cb:37:39:ad:b6:
         cc:38:1b:cf:bb:be:76:6d:be:55:3d:6e:cf:7d:4a:3b:8f:a4:
         d2:08:ff:ba:b0:17:36:8e:bf:cb:ce:8e:41:e5:16:89:75:16:
         c4:1a:4c:47:13:3d:29:07:d3:05:78:2e:7b:43:b1:12:e3:43:
         64:9e:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:48 2026 by rpki-client