Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
File:                     Axrg595e2RBFnl_GJAgVFTwuZ44.mft (raw, json)
Hash identifier:          TPmJTeV5LRyiSmguGkRtY3Wb4WD7tCg5vK9jtftHcc0=
Subject key identifier:   11:0B:41:4B:18:68:16:E4:DE:17:FD:59:19:FA:C5:D5:7E:F0:72:7B
Authority key identifier: 03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
Certificate issuer:       /CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Certificate serial:       019F91356A65E038B21B03165CC98B77BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
Manifest number:          3B
Signing time:             Thu 23 Jul 2026 23:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:24 +0000
Files and hashes:         1: Axrg595e2RBFnl_GJAgVFTwuZ44.crl (hash: 5E6t0GTV+p4UEXw0uPOeIj3UI8QsgGxn6AZZhd8ielw=)
                          2: ucADD6Yh4BlCI1nzbXrE79pdugQ.roa (hash: lIeb2K1Ku3XdMNralNbKNkojTmlUe23ubgq7NoIci/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:6a:65:e0:38:b2:1b:03:16:5c:c9:8b:77:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031ae0e7de5ed910459e5fc6240815153c2e678e
        Validity
            Not Before: Jul 23 23:00:24 2026 GMT
            Not After : Jul 24 23:00:24 2026 GMT
        Subject: CN=110b414b186816e4de17fd5919fac5d57ef0727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:e2:cb:c3:53:9c:9f:67:1b:23:74:35:6b:
                    88:21:79:70:9e:f7:f9:e6:0d:29:fc:2a:71:bf:32:
                    3c:ba:85:1d:c9:a9:9e:15:29:2c:ac:a5:cc:48:56:
                    ac:da:e8:51:37:bd:4d:25:dd:81:0b:cc:56:56:ae:
                    32:49:18:71:3b:32:41:bb:cc:c7:fa:f1:2f:68:5a:
                    57:e0:fe:07:08:57:d6:6e:a3:ee:88:33:95:6d:d2:
                    3f:c5:3c:d3:77:08:44:af:fd:5f:62:e2:80:69:43:
                    8c:4a:22:4b:cd:f2:6f:97:10:fb:bf:8a:31:d7:da:
                    ac:df:1d:83:ea:25:f2:f2:0c:76:74:82:4f:a7:26:
                    c3:0a:4a:f6:c0:90:14:0d:99:65:25:17:f7:71:f9:
                    44:06:bb:93:8e:c0:42:df:1e:ec:5c:4b:66:8e:f7:
                    58:02:a0:d6:86:1a:5d:e6:7d:25:1f:ac:89:98:99:
                    b9:83:d4:7a:79:6d:f5:b9:1c:80:d2:51:19:16:58:
                    bd:0e:66:88:e5:b5:45:29:0d:b3:31:29:f1:56:ed:
                    85:6d:55:c4:1b:39:a2:5e:2f:e5:3a:3a:d9:59:6f:
                    0b:1d:df:2c:72:75:2f:a0:33:b9:d5:7c:4b:8e:02:
                    fc:d3:0d:e9:3b:eb:39:8c:f9:d7:8f:06:fe:ae:73:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:41:4B:18:68:16:E4:DE:17:FD:59:19:FA:C5:D5:7E:F0:72:7B
            X509v3 Authority Key Identifier:
                keyid:03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:47:61:42:86:68:47:88:71:85:48:6e:12:e3:30:21:48:34:
         4a:e6:36:e4:be:af:74:de:a2:4b:1a:d2:e4:1d:97:5a:44:dc:
         17:94:3c:93:69:d3:06:61:8c:00:17:d8:78:50:7b:d2:b4:38:
         e1:e8:bf:6c:c1:ec:c9:80:8d:f9:8d:d0:15:05:ac:c1:29:4a:
         1c:bb:c6:9a:2f:e3:f5:3f:b9:e6:a5:7b:ef:d0:e1:c7:d3:31:
         c8:00:db:94:95:55:b4:f9:47:a6:e6:29:c0:0e:4a:13:4b:b8:
         0a:22:89:8e:da:df:2e:1b:2a:52:51:87:fc:f2:5f:5f:3c:8b:
         ce:b1:12:c8:b7:46:42:fe:ce:30:37:3d:b6:31:64:1c:b5:69:
         d4:9c:66:1e:99:c5:b2:d1:32:ef:3a:9c:01:b8:cd:31:a1:0c:
         36:2d:9f:47:99:e4:4a:b0:23:ae:09:d8:37:e1:88:65:ba:d9:
         58:a0:99:d8:65:4a:d2:be:cd:b1:20:11:01:f0:b6:33:89:bf:
         fa:db:bb:70:db:cc:b0:92:b2:fa:ca:f9:e1:22:c8:23:fd:f1:
         55:b8:69:6e:fa:cd:35:d5:2f:f8:84:e1:a0:1a:28:de:3f:22:
         7a:bc:c2:37:37:5c:6e:17:a3:c3:07:5e:3d:ab:1a:9e:01:c2:
         4f:5e:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:16:03 2026 by rpki-client