Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.mft
File:                     DMWBw0aWzOLbNJykC0hvs5x6a-0.mft (raw, json)
Hash identifier:          oHpU/Pat5XZ17+qHRicI+2UutLe0ZpB68dRHjzzZe+8=
Subject key identifier:   8B:BB:12:92:7D:85:1B:92:33:58:5A:F7:D8:9A:E8:9B:D1:1D:4E:8E
Authority key identifier: 0C:C5:81:C3:46:96:CC:E2:DB:34:9C:A4:0B:48:6F:B3:9C:7A:6B:ED
Certificate issuer:       /CN=0cc581c34696cce2db349ca40b486fb39c7a6bed
Certificate serial:       019F8F7DE417F5D7CC594C9D0C987CBB8130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:19 +0000
Files and hashes:         1: 1DLo26SW3RxP503TL1JHns0NU8I.roa (hash: OS503Q3stIleem4kEzlsVyVPsit/jhabxYiInNJDr0U=)
                          2: DMWBw0aWzOLbNJykC0hvs5x6a-0.crl (hash: gmdN0latSXr6S+lKY7ID6Af3WxmTGIYkzuZA8RMWs4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:e4:17:f5:d7:cc:59:4c:9d:0c:98:7c:bb:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc581c34696cce2db349ca40b486fb39c7a6bed
        Validity
            Not Before: Jul 23 15:00:19 2026 GMT
            Not After : Jul 24 15:00:19 2026 GMT
        Subject: CN=8bbb12927d851b9233585af7d89ae89bd11d4e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:84:94:61:5d:63:ff:73:d9:80:85:8e:e4:
                    6d:6a:ef:ec:ce:b6:c8:bc:1a:c2:dc:77:80:f3:2f:
                    2e:35:9a:2c:07:78:80:bb:e7:ff:5b:0e:42:67:16:
                    e5:8a:8c:9e:09:55:d5:98:cb:cc:69:bf:df:07:84:
                    9b:e4:7e:39:51:0a:9c:1b:df:3e:94:d3:aa:d1:f2:
                    27:57:e9:ea:a6:e3:ca:e9:5a:9a:5b:b9:bf:eb:30:
                    67:e6:c7:8f:f4:d0:7a:75:8c:47:47:fc:0c:84:02:
                    2f:b9:e0:88:ab:09:9b:59:56:4b:71:a6:60:64:1e:
                    e9:55:8e:54:d6:20:9e:22:72:1e:aa:e4:2f:a2:a5:
                    ee:d6:15:e9:7b:9b:79:f0:83:b7:91:be:92:f2:30:
                    c8:d5:2d:2b:51:39:dd:3b:e6:ed:3f:1c:e1:db:10:
                    1a:c2:dd:e1:7e:b9:17:d1:3c:4a:d4:81:a2:cc:a2:
                    b4:fd:9a:3b:e7:3f:94:4d:ed:9f:9b:20:67:7b:a6:
                    0d:e6:24:ef:cb:9e:4c:2e:fa:5d:dd:7c:6a:69:e0:
                    7f:0a:c8:24:3f:96:ef:c7:ed:f4:fb:df:d5:b5:2a:
                    84:ac:20:c5:32:8b:64:76:00:a9:8f:7b:17:05:84:
                    e1:30:e4:38:cd:f1:63:80:cb:46:21:67:4d:a5:71:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BB:12:92:7D:85:1B:92:33:58:5A:F7:D8:9A:E8:9B:D1:1D:4E:8E
            X509v3 Authority Key Identifier:
                keyid:0C:C5:81:C3:46:96:CC:E2:DB:34:9C:A4:0B:48:6F:B3:9C:7A:6B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMWBw0aWzOLbNJykC0hvs5x6a-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/DMWBw0aWzOLbNJykC0hvs5x6a-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:d4:90:55:cf:d7:57:f2:4f:26:f8:d6:14:c6:c8:38:4a:1d:
         f7:3c:a9:34:53:6a:4c:97:df:9a:90:a1:bd:6a:b4:c8:de:21:
         16:c9:42:d1:2f:c1:c8:f4:ed:99:48:0d:bd:69:ca:c9:4e:e2:
         ac:28:40:ad:6a:1e:59:71:1e:c6:c3:d3:b4:7f:2c:24:07:2e:
         aa:27:1f:5c:ea:a0:28:97:d9:5e:7f:e1:d8:1e:74:d3:34:b0:
         27:2d:29:b7:31:5b:c2:88:1b:45:12:a8:48:16:a7:39:ed:6f:
         1f:20:0d:c5:d6:12:1c:fa:22:21:a2:e2:b4:97:43:86:e3:e7:
         ac:04:e5:40:8a:c3:71:48:fe:ee:72:71:09:1e:b2:b9:57:a4:
         d1:ea:b3:0a:7b:8b:08:2a:52:a7:25:dc:0a:e3:2d:de:60:28:
         3f:d5:f7:79:55:8c:8d:10:82:e8:fa:b0:0e:39:d2:cb:3b:71:
         5e:b5:7b:83:c0:0d:18:98:6d:9a:cd:2c:e3:30:c9:3d:a2:77:
         7f:9b:f2:81:a1:5c:cf:4c:b1:c0:1d:b1:4c:ca:16:eb:ee:fa:
         8e:03:0c:0c:4d:ee:5a:93:21:e3:e6:ab:0e:ec:c3:e0:96:73:
         7d:4a:0d:35:87:8d:3b:5b:53:16:aa:43:d6:9d:c1:b4:e3:05:
         ba:58:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:08 2026 by rpki-client