Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
File:                     CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft (raw, json)
Hash identifier:          WPFD1L/puDF8anDCu7Z04ZxMJA1MCgGre9t2YtuL4eM=
Subject key identifier:   85:8F:A9:87:F3:18:3B:01:3A:FF:16:33:03:8E:54:48:CA:1B:A5:F6
Authority key identifier: 09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30
Certificate issuer:       /CN=0947bf06ffd6aa837371666ac4fb485c3322af30
Certificate serial:       019F90C8343993130438BB28BFEAE3AB93A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
Manifest number:          C3
Signing time:             Thu 23 Jul 2026 21:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:07 +0000
Files and hashes:         1: 1eP5CXO1PBIl9QsPThVXxpFKkiI.roa (hash: KZ7tVteP3lGVX8UW1l2BZ5G++9dxomswpEwb1weu7Qg=)
                          2: CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl (hash: /gjl7zKZw0Q0Rzk/LHW73WCykYTHxiHbQKfd+mJizA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:34:39:93:13:04:38:bb:28:bf:ea:e3:ab:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0947bf06ffd6aa837371666ac4fb485c3322af30
        Validity
            Not Before: Jul 23 21:01:07 2026 GMT
            Not After : Jul 24 21:01:07 2026 GMT
        Subject: CN=858fa987f3183b013aff1633038e5448ca1ba5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:04:77:54:28:6e:55:e9:be:71:55:32:68:
                    65:e8:fc:a5:ea:d3:88:af:a5:b5:fd:87:3d:94:af:
                    df:de:7a:95:5d:93:1c:8c:c8:46:45:cd:90:81:8f:
                    2f:8e:51:52:34:4f:4f:00:5e:18:17:a8:3b:68:a4:
                    96:72:50:ba:63:d6:1c:f0:ab:cf:39:70:c0:4b:24:
                    a6:98:ee:3c:fc:27:cc:be:02:f7:52:46:92:75:c0:
                    97:d5:f9:f1:ad:04:81:68:ac:65:80:f8:f2:f3:da:
                    36:83:93:2a:21:2f:b3:53:ce:64:5c:d3:6b:9d:fe:
                    ad:f0:d9:bc:61:03:6b:96:db:a7:15:76:69:ec:b0:
                    d8:cb:68:6b:29:ef:46:c7:1a:1d:69:c8:6f:6f:8d:
                    fd:19:6d:1c:14:64:ef:f8:36:95:a8:10:9d:03:10:
                    cf:61:23:74:e5:28:a8:2e:aa:68:d5:31:fe:65:a9:
                    d6:cf:7a:57:19:8d:9c:73:87:0a:b8:f7:5c:20:7f:
                    9d:64:8f:21:eb:3d:12:4e:82:67:c1:c6:c5:3b:e0:
                    fc:d3:1e:d2:43:17:77:08:ae:8e:e1:c0:94:ef:46:
                    88:44:e0:b2:b3:8d:e4:57:06:3a:d4:9f:f2:69:fc:
                    26:b9:af:63:f1:7f:ff:ed:27:c7:87:a7:d6:4c:a4:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:A9:87:F3:18:3B:01:3A:FF:16:33:03:8E:54:48:CA:1B:A5:F6
            X509v3 Authority Key Identifier:
                keyid:09:47:BF:06:FF:D6:AA:83:73:71:66:6A:C4:FB:48:5C:33:22:AF:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUe_Bv_WqoNzcWZqxPtIXDMirzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4320e2-55cc-4e5d-98cb-0912d9a5d947/1/CUe_Bv_WqoNzcWZqxPtIXDMirzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:db:87:f1:33:83:87:dc:fa:4e:ac:73:fe:41:26:b3:8c:8c:
         40:08:b3:f5:67:65:8b:91:64:f2:e2:6e:75:46:37:15:72:37:
         86:96:5d:99:1d:33:a9:db:f9:da:29:a1:07:61:e4:a8:be:cf:
         dc:33:54:16:73:92:48:ce:30:9e:46:96:72:46:91:80:22:09:
         66:14:af:82:b5:28:83:46:de:f2:db:ef:09:cf:61:86:a8:9a:
         25:51:28:45:e1:60:45:12:c0:5c:cc:96:28:86:ea:08:40:c7:
         88:6a:74:39:c5:8f:26:13:7d:ba:68:49:90:7f:b1:eb:84:59:
         ce:d4:2a:9d:39:57:6c:e8:98:79:03:cb:e4:67:2d:9f:78:d1:
         08:13:6c:e8:56:e0:34:6d:dd:e6:c6:28:ea:0e:af:87:84:6d:
         1e:6c:6f:18:85:58:42:4c:8c:04:6c:26:61:45:e1:61:4b:40:
         77:b1:54:a0:48:10:71:6d:ad:d7:47:0d:00:4c:99:12:94:21:
         1a:3f:cf:b0:ba:9a:8b:75:d7:09:ea:92:61:0a:96:42:5e:75:
         14:25:87:c6:0e:04:34:76:b3:c5:80:e2:49:88:49:85:a0:9a:
         42:59:ff:cc:79:78:0f:57:6b:6e:d3:39:a5:fe:46:31:c4:9c:
         86:77:2d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:30 2026 by rpki-client