Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File:                     AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier:          awVivOoULxPHlxw8J9Bg93qbi+L3RFZ2jCzo+N76fr4=
Subject key identifier:   9B:89:7B:BE:C7:28:9F:4F:4A:BF:D6:06:42:04:B1:F2:62:0D:5D:EC
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer:       /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial:       019F8F7DDB174054D0FE765F66E47D4A2674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:17 +0000
Files and hashes:         1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: XqIN67lI64IayMcJZc3wcgl8KYvHzSXi7urq4etFg10=)
                          2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:db:17:40:54:d0:fe:76:5f:66:e4:7d:4a:26:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
        Validity
            Not Before: Jul 23 15:00:17 2026 GMT
            Not After : Jul 24 15:00:17 2026 GMT
        Subject: CN=9b897bbec7289f4f4abfd6064204b1f2620d5dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:5b:b3:c1:f2:75:a9:1c:87:fe:b5:0a:83:
                    20:21:f5:7e:53:c0:36:41:d9:42:5f:b5:7e:d3:f3:
                    6a:31:1e:0a:5b:3a:f6:20:9b:81:a4:e0:fd:5d:21:
                    b6:49:3d:0d:ce:b1:28:85:da:d3:f7:6e:7d:ea:3a:
                    3e:ae:ec:5a:d3:fe:fe:b3:a5:c1:a3:6d:e2:cd:6e:
                    f9:59:2f:d9:bb:8f:ba:85:76:14:53:ab:5d:b4:06:
                    a9:f0:b4:f7:bb:da:90:91:6b:ac:9a:9d:75:1c:56:
                    8b:d6:ea:e1:83:eb:a3:c4:23:23:73:32:37:59:72:
                    84:8b:c1:e8:de:26:96:5f:dc:06:d6:18:a8:d6:3b:
                    c3:79:ae:d7:1a:fa:85:e2:91:f7:2f:aa:26:66:dc:
                    35:7a:9b:36:81:56:db:03:5a:0d:b0:71:95:13:2b:
                    fe:08:f9:1c:33:02:ff:f3:f6:e8:7d:16:2d:c7:48:
                    48:67:51:c4:91:07:00:90:e4:9c:2b:e1:d6:b5:93:
                    25:b9:a2:5a:d6:4e:36:a5:96:9e:ab:75:e5:f0:a8:
                    b7:eb:b3:f1:5f:ea:ab:3c:1b:80:33:35:9b:8d:d5:
                    b4:07:14:d7:7b:db:11:09:16:96:b3:cc:ce:88:44:
                    bf:f0:25:1d:33:d2:39:af:d1:6e:a4:04:ab:58:9f:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:7B:BE:C7:28:9F:4F:4A:BF:D6:06:42:04:B1:F2:62:0D:5D:EC
            X509v3 Authority Key Identifier:
                keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:9e:e0:c7:04:55:f0:93:bc:b4:88:03:5a:22:84:36:df:
         d8:78:14:1d:b5:e6:44:4a:5c:7a:a6:d4:2e:ec:eb:f0:0b:12:
         8d:f9:bd:e0:1e:ee:0f:b5:52:e3:0f:cc:09:49:2b:68:74:74:
         35:39:f3:94:7a:8e:d2:57:fa:79:4f:6f:19:41:bb:be:d2:ba:
         d2:76:ab:b6:bf:e2:bd:4b:da:53:08:d0:57:7b:56:96:1f:7b:
         86:25:44:df:58:3d:c0:4d:07:27:02:c3:2e:97:8c:29:a8:62:
         24:0a:3b:74:59:e3:fe:57:10:9f:4b:fb:7c:ee:e0:99:78:c4:
         51:f1:d0:83:7d:62:5a:86:a3:f2:20:2d:a8:ab:b5:fa:da:4e:
         45:a4:f6:45:21:66:2b:4c:a8:ac:24:72:77:44:19:f4:dd:51:
         54:9d:a3:42:22:75:82:7a:ec:ee:90:91:17:a6:36:ea:49:f3:
         d1:b7:6a:36:0b:ae:5d:c0:e1:60:67:17:64:a3:db:a1:fc:63:
         ab:f0:e7:70:d8:a6:56:08:a0:58:26:bb:08:41:62:11:ce:61:
         00:72:16:fe:48:97:0b:ac:60:0d:fb:ed:47:98:c5:d5:4b:83:
         a2:a0:28:24:cd:86:2f:30:98:c1:9a:b4:0b:f0:00:d3:f2:76:
         65:c7:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:19 2026 by rpki-client