Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File:                     AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier:          ofkJr3IWMd/MJV4ZwSLmSJmG19TWKe/Oo2C6CzsK6QM=
Subject key identifier:   75:67:8D:3F:F9:69:7A:1C:4C:45:17:A3:9D:B6:25:D2:A8:6F:C2:87
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer:       /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial:       019F93FFA6BBD42D95B229C261AC8D85797F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 12:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:32 +0000
Files and hashes:         1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: tgxER5BXAs35VBHxBIZWjq2oDknsk6nPM3AdK+f7Wts=)
                          2: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (hash: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw=)
                          3: oQoGly6H1aU6gPqZyv63fmxfuls.roa (hash: HFBXjpuNtU3gtEXtIbxcM+R57+FtVsV/NiORC3XZhIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:a6:bb:d4:2d:95:b2:29:c2:61:ac:8d:85:79:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
        Validity
            Not Before: Jul 24 12:00:32 2026 GMT
            Not After : Jul 25 12:00:32 2026 GMT
        Subject: CN=75678d3ff9697a1c4c4517a39db625d2a86fc287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:14:2e:40:77:0c:ae:fe:4a:43:d6:76:4f:
                    50:e8:69:71:82:c2:db:64:e9:ad:55:b4:84:81:4d:
                    fd:83:04:20:19:a2:c0:2e:36:0d:28:93:3d:b7:22:
                    69:c2:8f:f8:bf:9c:f0:3d:11:f4:56:25:7a:38:fe:
                    2a:06:95:63:78:ad:e5:65:53:5b:f7:13:e3:2d:a3:
                    24:eb:0d:d7:87:ff:a3:0a:4f:39:d3:bc:1d:68:a0:
                    b2:5a:9a:f0:20:0c:63:8b:01:0a:45:47:58:e8:62:
                    df:bb:79:e0:b3:06:f4:7f:99:cd:b0:98:06:a0:86:
                    cc:79:81:65:1c:dc:cc:c7:8b:9c:d3:e1:2a:8d:3a:
                    4d:45:54:81:1b:d4:63:32:24:d5:bc:f4:cf:f5:42:
                    df:22:a1:fb:47:03:5c:90:0c:f9:a8:aa:f8:4e:53:
                    c5:e0:f0:be:a4:5c:59:db:f4:5d:c3:0a:e0:ea:4b:
                    3e:9c:11:c3:82:15:18:bf:af:4d:b8:e7:b8:33:b7:
                    b7:a4:98:a1:24:f7:da:c4:44:5f:81:6a:65:60:d1:
                    83:d7:63:8b:25:e4:a5:07:e5:3c:25:3d:c4:86:71:
                    d0:b7:98:8a:70:9f:6e:9a:d8:67:90:69:9b:c2:2e:
                    d3:17:1f:bd:8a:d5:94:98:49:5b:32:6e:64:82:59:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:8D:3F:F9:69:7A:1C:4C:45:17:A3:9D:B6:25:D2:A8:6F:C2:87
            X509v3 Authority Key Identifier:
                keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ec:8e:4b:54:9f:81:c3:cb:cf:1e:f4:9c:a2:e9:8e:ca:b7:
         75:a8:42:0c:f6:39:a0:cc:5f:a5:65:65:e2:4a:07:90:2a:8e:
         19:52:e8:50:7b:60:c6:1b:33:ff:d9:35:bc:56:f4:68:77:c4:
         7f:49:cb:d6:7f:97:a9:83:1c:d5:ba:93:c3:9f:4f:52:20:f1:
         0c:ce:83:be:8d:0f:10:65:e9:ea:61:ca:25:4f:d7:64:1f:38:
         8f:5f:45:21:13:d6:c6:92:51:96:da:cc:b7:b7:7a:ab:9f:dd:
         b3:cc:91:0c:1b:0f:90:a1:7b:7b:82:1d:00:2f:f9:40:52:c9:
         f1:2c:7a:2d:fb:30:3d:a1:23:3b:f9:ab:4e:6f:57:03:f8:5b:
         7c:ef:89:60:9d:05:72:9c:50:87:9a:41:47:db:87:01:3e:79:
         dc:19:ef:31:76:be:06:90:25:a9:3a:ab:78:57:ca:a8:86:32:
         b1:fc:ae:67:4d:09:40:11:fb:37:bf:4c:8c:5e:92:cc:6d:5f:
         f4:fb:91:9b:dd:ea:bc:41:37:8a:6c:3c:47:68:ca:82:79:0f:
         6c:db:f1:8c:16:e5:92:76:1f:f6:02:0d:51:ef:fe:b6:d7:74:
         aa:b1:f7:9c:9d:7a:5f:da:15:80:84:17:6f:cd:c0:fb:c9:e9:
         9b:2a:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:21 2026 by rpki-client