Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft
File:                     DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft (raw, json)
Hash identifier:          dARHuI6U8F05IPJIRRaSliWjVMMnAFVcdiD6ZjQslns=
Subject key identifier:   31:E7:BB:CE:8D:B0:44:3B:68:D6:AF:7A:01:41:61:1F:8A:35:D6:33
Authority key identifier: 0C:9E:21:2D:B5:82:EA:F4:13:D2:B6:07:92:0F:A4:6E:DB:C1:72:D1
Certificate issuer:       /CN=0c9e212db582eaf413d2b607920fa46edbc172d1
Certificate serial:       019F8F7E51ECDD858F501420317BE83FCC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:48 +0000
Files and hashes:         1: DJ4hLbWC6vQT0rYHkg-kbtvBctE.crl (hash: 0xqFDrNeT0++evGqOkdg6+c5SsBlTKHB001seHq5JwY=)
                          2: Z4--KUYifq2Y40eCVqxDnJdaP_w.roa (hash: RKffzHIaL53f5qFN2lTaq7PTByMkV+bB8EAdafoiYuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:51:ec:dd:85:8f:50:14:20:31:7b:e8:3f:cc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9e212db582eaf413d2b607920fa46edbc172d1
        Validity
            Not Before: Jul 23 15:00:48 2026 GMT
            Not After : Jul 24 15:00:48 2026 GMT
        Subject: CN=31e7bbce8db0443b68d6af7a0141611f8a35d633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:30:75:e3:de:a2:bb:ef:fd:e4:c7:c9:84:
                    f3:e0:75:f2:6d:54:17:76:9e:05:09:2f:0f:64:3f:
                    ea:1a:e8:c7:f9:94:57:6b:a9:52:2c:16:8d:ef:c4:
                    8e:24:0b:a6:96:ca:73:79:d7:39:d7:1b:9b:dd:6e:
                    8f:30:d8:67:89:ef:dd:23:23:ee:b4:4f:04:26:d1:
                    8f:d5:1f:fb:fd:70:80:71:3e:ed:c0:d9:ec:05:0b:
                    36:e7:bc:ca:f8:c3:c0:af:07:35:b9:78:91:fc:8d:
                    30:fc:22:42:8a:ca:e9:8f:5d:b5:5f:4c:97:b7:cb:
                    8c:d0:52:16:0e:3a:48:c3:db:03:86:4f:74:b5:b6:
                    86:12:6d:8c:68:e6:2e:f0:a5:6a:0d:04:7b:2b:58:
                    5e:f7:8d:be:26:1d:ab:d2:73:25:9e:b8:cd:e1:ae:
                    13:db:d0:9b:00:23:17:6c:d8:9f:ab:f0:d1:b1:2a:
                    3e:2c:f5:e0:31:8d:17:24:9d:24:7d:de:92:df:b1:
                    65:07:11:6a:4e:ad:e0:a7:de:18:41:17:29:24:cb:
                    f2:ca:9d:a9:57:b0:8a:82:e9:d9:70:98:85:d6:87:
                    64:01:cb:b0:96:59:06:01:ff:ca:11:13:dc:07:f8:
                    a3:41:b6:49:b0:be:e7:ef:18:a8:9a:00:5e:2c:21:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E7:BB:CE:8D:B0:44:3B:68:D6:AF:7A:01:41:61:1F:8A:35:D6:33
            X509v3 Authority Key Identifier:
                keyid:0C:9E:21:2D:B5:82:EA:F4:13:D2:B6:07:92:0F:A4:6E:DB:C1:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ4hLbWC6vQT0rYHkg-kbtvBctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/DJ4hLbWC6vQT0rYHkg-kbtvBctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8a:3c:04:4a:b6:b0:78:1a:8e:68:2f:44:c0:58:df:19:c3:
         b8:0c:a3:bc:1e:7c:3c:9e:34:63:9e:81:de:a2:62:2d:42:7c:
         5f:17:f6:c8:3d:a2:c1:30:aa:0b:52:fd:27:0f:21:ea:3f:01:
         05:83:6d:9d:55:58:08:30:55:75:19:2e:0c:a2:b8:48:07:f2:
         57:e3:bc:16:75:47:32:81:a9:8e:49:65:df:da:c5:6a:f6:e6:
         5a:93:8a:cf:a0:3b:c0:8e:dc:ec:6d:3c:03:a1:05:cc:ba:ed:
         41:3a:20:39:7c:b4:72:82:36:8f:33:71:26:ce:c0:76:ae:52:
         af:fc:5f:8f:66:28:f4:79:66:e6:5c:37:58:c0:7b:10:85:7e:
         e9:38:17:25:b3:46:4e:6f:e4:9d:37:22:f6:44:b0:24:26:49:
         49:dd:22:ad:f5:a7:60:ad:90:ea:15:00:93:81:ab:bb:fc:f4:
         3e:9a:98:e3:22:23:09:d0:16:3b:17:24:0c:2a:34:f6:7e:cb:
         67:9f:41:eb:0c:12:99:bd:b7:fa:28:10:25:ad:7d:4c:ae:ef:
         ae:4b:19:55:03:2a:e0:e7:de:fe:f4:53:ae:ff:01:da:28:c8:
         12:e3:49:c1:7d:84:26:d1:db:70:8d:23:63:fc:90:71:b2:68:
         aa:2a:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:13 2026 by rpki-client