Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File:                     AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier:          i45KSLHpoiE3jJu5p49sGIY7eKtVW2bz9fSvg2JAQZo=
Subject key identifier:   36:47:73:4B:67:C7:C1:87:61:3F:A1:B0:2B:B2:34:24:94:14:27:AF
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer:       /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial:       019F913590FE1639508DE6074566C972DBDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 23:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:34 +0000
Files and hashes:         1: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: 55nigVRXLnn/hAjBta3gMpgbezDsd77/PHgqtOuHqZk=)
                          2: VeD0j8DDk8aNazB8XjlyUYtBGB4.roa (hash: 3r6wr0pUmwD48d+/WPFhEsF0b5taens/OvioZS+8fGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:90:fe:16:39:50:8d:e6:07:45:66:c9:72:db:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
        Validity
            Not Before: Jul 23 23:00:34 2026 GMT
            Not After : Jul 24 23:00:34 2026 GMT
        Subject: CN=3647734b67c7c187613fa1b02bb23424941427af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:fc:13:1c:3f:3f:4a:1c:fa:75:14:2d:9d:
                    e8:b7:00:02:98:b3:26:a2:ce:52:2e:5e:27:69:d7:
                    1a:d3:62:7b:6a:61:c6:74:49:77:a0:c3:b2:1a:f6:
                    8a:0d:4c:ca:d7:14:ab:45:10:00:19:75:dc:ea:be:
                    92:11:c4:42:0b:16:b3:4a:96:8a:00:32:b4:08:a9:
                    6c:a4:c2:69:55:8a:05:10:88:4e:fc:de:50:4b:e7:
                    c9:6c:6f:8a:af:4a:39:7e:da:48:93:7b:d3:6e:e8:
                    8d:04:c2:6d:5f:ed:6b:e5:40:69:88:a9:8a:6f:1c:
                    22:9f:da:89:05:66:48:72:66:7d:b9:fc:0d:80:79:
                    e8:94:17:46:f8:56:38:14:b3:54:bf:bf:88:15:7a:
                    59:eb:e2:9b:47:64:6c:92:38:61:b2:7c:3d:c8:eb:
                    94:c5:af:fb:4e:13:7c:90:a2:82:06:bd:8f:d7:5b:
                    21:73:13:f3:e4:ef:34:55:de:82:e8:2f:7b:17:db:
                    1a:c4:f4:00:e9:41:93:87:64:ea:ce:a2:0d:fe:dd:
                    1f:ff:d9:7f:b7:04:2c:c1:18:d7:7e:ed:2f:f3:8a:
                    94:19:c9:6b:25:25:34:24:c2:39:40:66:6d:e3:42:
                    85:8d:83:f1:3d:fe:6d:bc:a0:fb:02:db:17:a6:44:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:73:4B:67:C7:C1:87:61:3F:A1:B0:2B:B2:34:24:94:14:27:AF
            X509v3 Authority Key Identifier:
                keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:51:27:8b:ac:dd:f9:b6:40:9e:a6:0e:be:bf:cb:9e:32:
         c5:df:40:c4:48:cd:e7:cc:26:44:20:48:1d:47:fb:cd:53:24:
         7c:84:b6:bf:6a:4e:6a:a5:c5:18:07:67:bb:77:12:7c:57:d3:
         6c:f5:7e:79:63:a7:b4:6e:00:2a:ae:a8:96:94:16:70:d0:9b:
         ce:c9:c9:ce:22:64:eb:c3:dc:93:5f:70:55:2b:f2:96:73:96:
         f3:37:0e:93:32:08:bf:f3:61:57:62:2a:bd:74:b3:97:fb:3f:
         52:fa:85:c9:cb:96:97:24:be:45:dd:20:bc:c1:62:9d:17:d4:
         41:18:f1:48:66:88:b5:e5:39:b4:37:25:ab:a4:06:02:76:ef:
         7e:f2:de:ec:cb:e0:ae:cd:93:62:da:d3:fe:e3:ca:a1:ec:33:
         a1:02:bd:4d:92:5c:cd:3b:b2:a0:26:09:fb:03:c2:2b:af:ba:
         d7:7e:5a:56:8e:41:e4:2e:34:ef:c7:4f:79:c7:85:32:71:a4:
         13:0d:3e:ed:66:09:75:bd:bf:20:f4:ac:97:9c:64:2d:f1:95:
         25:e8:ed:a1:36:15:4d:0b:4d:b7:dc:cb:2f:88:69:19:6c:6f:
         50:2c:dd:04:f6:55:54:56:80:f9:af:46:92:32:c6:dc:9a:0e:
         77:33:e3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:20 2026 by rpki-client