Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File:                     AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier:          h95D7yb3wBZ3aBWBBdcJtIqI5TZHT0EV36ZMnx9HROM=
Subject key identifier:   93:2A:F7:68:B2:81:93:91:EA:63:B5:F7:92:6A:57:97:99:FC:29:54
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer:       /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial:       019F8F7F66B3B7D2F78039909EDFBB2E9786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number:          16AF
Signing time:             Thu 23 Jul 2026 15:01:58 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:58 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:58 +0000
Files and hashes:         1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=)
                          2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 0WWEfosd6TEL3pAt6iPDYEOXSn3yV86vK39X6rQh+Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:66:b3:b7:d2:f7:80:39:90:9e:df:bb:2e:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
        Validity
            Not Before: Jul 23 15:01:58 2026 GMT
            Not After : Jul 24 15:01:58 2026 GMT
        Subject: CN=932af768b2819391ea63b5f7926a579799fc2954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:64:87:bd:d6:62:b3:79:67:21:ce:33:50:
                    f8:bc:7c:c9:9b:68:3e:3e:c1:2e:fe:b4:49:ea:93:
                    b7:cd:af:28:99:18:80:23:f3:b0:44:2c:ca:13:15:
                    c5:e9:29:a0:18:6e:71:a5:81:36:02:4e:2a:5a:23:
                    fb:5b:ad:14:b5:ae:be:b7:c0:8b:98:63:0a:b7:fb:
                    7e:90:5c:22:b3:3c:eb:98:b9:4c:aa:d2:00:be:b6:
                    f7:39:71:7c:7b:24:fd:f6:ad:2d:2e:38:d8:dc:ab:
                    e9:3c:a9:51:b5:95:2d:9a:4c:56:82:8c:10:81:dd:
                    71:4e:9a:5e:aa:0f:7e:f7:a3:50:49:19:5b:ba:f7:
                    b4:02:bf:84:66:46:51:b5:84:3e:e5:ed:10:b3:7a:
                    30:a9:68:8f:21:d9:21:68:fc:1b:28:12:a7:40:32:
                    f6:5b:23:8d:68:e3:fd:75:05:f5:50:10:ea:c8:cf:
                    75:33:88:7c:72:f4:1d:90:05:1c:e1:aa:de:0c:ab:
                    be:b3:5e:6e:fc:86:2a:76:db:64:3a:eb:c9:8b:10:
                    7c:5e:91:6f:7c:be:9f:f5:a2:3f:4e:d5:a5:f9:04:
                    a3:b7:5e:15:48:18:08:3a:2d:e6:0e:4e:82:10:b4:
                    fa:47:d5:5b:b7:a6:37:59:2d:47:ff:64:d3:f4:96:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2A:F7:68:B2:81:93:91:EA:63:B5:F7:92:6A:57:97:99:FC:29:54
            X509v3 Authority Key Identifier:
                keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:2b:92:fd:a1:eb:da:ab:8f:c6:ce:58:f7:e1:4e:aa:9f:
         94:d0:68:93:c6:4e:13:09:b2:00:6c:ae:9a:46:45:a0:32:53:
         0e:c0:e7:82:3f:13:4b:63:3a:19:48:5e:a9:85:08:f9:80:d0:
         59:96:74:2a:42:55:82:14:eb:e5:4a:7e:7b:5a:62:8f:c6:ab:
         9f:ab:8b:d7:7b:7b:a4:d1:d4:de:0a:00:fa:b5:58:76:f7:ea:
         be:e6:76:ca:7d:d8:2f:63:75:0b:9d:a9:b3:62:e6:d4:2a:85:
         51:ae:a1:c7:0c:69:04:f9:2c:00:ef:dd:8d:56:5d:b0:be:53:
         2e:3c:98:b9:e1:b0:e0:52:04:2c:53:55:9a:57:0d:7f:a9:a9:
         3e:41:2f:18:cf:b7:ee:31:1e:88:cd:49:0b:df:3f:92:d3:1a:
         36:c7:47:1b:39:db:e7:88:4e:f7:15:14:c2:cf:39:7c:46:11:
         c1:1b:4c:99:a2:88:0b:65:f3:f8:ec:3e:1b:7e:77:c4:70:80:
         c0:4d:f5:5a:33:15:48:8a:0b:a8:d9:2c:66:7c:31:03:79:23:
         b3:c5:2e:97:59:73:86:20:4b:e3:27:2f:b2:59:fb:94:0c:c6:
         ff:d1:72:bf:58:45:31:f2:65:2f:1a:39:60:87:b7:18:de:af:
         90:0c:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:10 2026 by rpki-client