Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          isMLwUoAa8xFz8CjrgaDWbmTvIXy6OSGl6cM8kO/eQ4=
Subject key identifier:   18:30:FD:FC:86:05:15:6B:FA:96:A3:7A:21:66:DD:16:B6:F8:F6:77
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       019D288497D29B0F6AE21941043CF476BD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          151F
Signing time:             Thu 26 Mar 2026 05:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:11 +0000
Files and hashes:         1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=)
                          2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: VW4gOLPFVNn71WxK32rXytL/crRiyGgNvGG5WzCUuQs=)
                          3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=)
                          4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:97:d2:9b:0f:6a:e2:19:41:04:3c:f4:76:bd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Mar 26 05:01:11 2026 GMT
            Not After : Mar 27 05:01:11 2026 GMT
        Subject: CN=1830fdfc8605156bfa96a37a2166dd16b6f8f677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:6e:83:7e:c3:f9:e0:86:c4:99:d6:ae:0f:
                    a8:a9:2e:e4:2e:d9:53:8f:ca:0c:1b:d0:04:c7:3e:
                    29:1f:c9:5f:3b:65:e5:33:3a:49:63:16:e4:d4:48:
                    a0:b2:67:53:df:d6:ee:18:c9:33:ae:c7:3d:ee:00:
                    2e:c8:b0:57:f1:e2:74:10:ea:32:32:5c:86:16:24:
                    30:65:a4:48:ce:e0:2e:98:5c:3d:40:5d:6c:9a:bb:
                    ea:3a:42:94:2a:09:36:b3:8d:c6:8a:e3:92:9f:38:
                    73:af:a2:4c:cd:fc:b5:51:92:93:ad:70:ed:6d:08:
                    fe:54:c1:fa:2f:4f:08:ab:97:e0:7e:d5:71:bf:db:
                    53:33:71:96:5a:c7:98:80:e6:fd:3e:32:73:68:2a:
                    c3:b6:ed:56:5f:5e:35:01:3f:73:0b:9b:d7:b2:4a:
                    e3:21:b7:a7:56:fc:ee:88:f0:39:eb:d0:31:56:fc:
                    ce:7f:2d:e9:20:75:fb:6c:a2:af:e6:56:af:12:dc:
                    dc:c4:c6:05:5d:d7:fa:3e:50:00:d3:e9:ca:37:99:
                    0d:91:a4:3c:c6:35:3c:18:1e:fe:88:bb:1d:9e:1d:
                    e1:fa:9c:2e:30:31:28:24:0c:c1:26:db:09:f7:28:
                    76:6a:55:1d:c1:d9:21:08:ca:9f:27:67:92:f1:73:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:FD:FC:86:05:15:6B:FA:96:A3:7A:21:66:DD:16:B6:F8:F6:77
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:8b:e4:13:6b:b8:df:29:4a:66:3e:67:cf:9f:13:88:2f:
         a3:de:5a:1f:32:b5:2a:6e:a7:9b:e9:48:f1:86:f3:00:cb:cd:
         16:74:91:45:c3:0e:ef:70:d3:af:a8:ff:d2:af:6c:1a:e4:15:
         3c:45:26:82:b9:56:75:dd:f4:63:c9:0b:aa:f6:1a:7f:f4:d4:
         e8:1c:cc:ed:29:a1:ea:49:77:92:91:7a:84:18:d8:43:e1:4d:
         35:0c:53:36:0f:45:00:b5:25:89:3a:7f:60:0b:9e:15:2d:1c:
         48:1c:7f:43:95:e4:d2:90:d3:9b:64:6b:68:c4:17:47:25:94:
         10:fa:87:2f:27:d0:a5:20:dd:28:31:be:2a:6f:e0:8f:95:b7:
         44:14:31:0f:35:73:de:b5:82:ee:2f:10:93:dd:18:8d:79:86:
         19:aa:2a:44:92:43:d9:e6:31:f8:94:f2:cd:0b:06:2e:79:95:
         0c:ae:cf:41:79:2b:f7:c5:8a:41:a3:13:61:2e:5f:6f:68:bd:
         52:60:39:d5:7f:50:61:82:2c:32:fe:a7:43:88:b8:2f:e2:b3:
         de:cb:49:af:6e:d8:e3:95:bf:92:d6:ee:16:40:ef:63:a5:45:
         67:18:2a:25:85:3a:10:c6:f7:b9:bc:86:fb:c2:b7:42:e9:2c:
         5f:d7:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:26 2026 by rpki-client