Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          iuVnBkYuMO/zUtWQc4/kqyDdXgNLHgyRWF4lFAnO59c=
Subject key identifier:   68:A4:84:7F:F9:C5:E2:D0:59:A9:59:A2:5D:62:EE:4D:F1:6B:1C:60
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019F90913730C9CFF9B548FC9F7AF07B3EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          19D7
Signing time:             Thu 23 Jul 2026 20:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:03 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: kNfxkWUunQcRKn/hx4UhmNu0WtOmONR7kmB/EJ+qK+k=)
                          2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
                          3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
                          4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:37:30:c9:cf:f9:b5:48:fc:9f:7a:f0:7b:3e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Jul 23 20:01:03 2026 GMT
            Not After : Jul 24 20:01:03 2026 GMT
        Subject: CN=68a4847ff9c5e2d059a959a25d62ee4df16b1c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:fd:59:11:57:28:b7:a6:01:21:18:04:da:
                    c8:ef:79:49:22:a6:66:21:73:7d:47:f1:bd:1b:33:
                    93:59:9a:5e:b2:f6:d9:4f:0d:a2:82:6f:51:8f:47:
                    7d:35:b7:e3:f0:c8:2e:ff:de:a7:0c:5d:6a:5d:11:
                    b2:46:28:32:fc:27:88:d4:69:63:b5:30:89:7a:86:
                    62:7e:fa:6a:8f:29:23:14:04:4c:e2:71:bf:91:b8:
                    46:86:53:1c:2b:9a:cd:be:bf:85:7f:48:1d:3e:69:
                    46:18:95:5b:2f:c5:c7:ec:f9:c5:f4:67:8d:2f:94:
                    ba:d7:6a:c1:01:42:9f:49:c7:09:ba:25:88:f2:7d:
                    a7:72:57:40:1e:01:54:c8:7f:0c:58:00:c4:46:02:
                    66:12:f4:02:6a:9b:e4:6f:fc:6f:da:31:13:0a:4b:
                    ef:e3:f5:75:d1:e4:a7:2b:3f:d8:32:af:05:f6:ab:
                    a9:26:6e:3e:01:56:e3:8c:c5:4c:3f:e6:48:38:ee:
                    2a:96:91:49:04:71:5c:a2:dd:ea:c2:65:29:2e:54:
                    ed:10:6f:fa:12:4d:d8:5d:0a:31:a5:94:fc:c2:75:
                    5b:96:71:5e:7f:c8:df:0f:9f:e2:21:e6:72:13:73:
                    36:0b:38:b2:8f:a2:57:b0:73:45:31:88:6d:46:05:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:84:7F:F9:C5:E2:D0:59:A9:59:A2:5D:62:EE:4D:F1:6B:1C:60
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:46:40:31:83:32:c3:6a:7b:c9:b0:48:60:84:28:6c:30:
         b7:c1:6d:50:40:8a:05:fc:e1:43:86:df:d4:07:37:d4:fd:7a:
         fd:9d:44:16:16:35:32:aa:fc:d9:a0:64:33:80:52:b2:27:be:
         6e:b0:d5:e0:5d:08:04:c8:eb:36:8f:8c:aa:0d:02:d6:55:8e:
         b5:91:e8:3a:54:f0:6f:01:00:9a:7d:e0:77:dd:3c:05:97:39:
         e0:ff:e2:ff:5f:cc:db:91:4a:ac:f5:c0:36:86:dd:1d:bb:56:
         61:47:2d:bd:3c:3d:c4:6b:eb:a8:52:37:d6:8f:0c:2f:2d:22:
         81:6e:22:05:37:01:75:b7:d6:58:b9:5a:19:a6:36:5f:a4:e1:
         4d:66:a2:89:26:4b:e3:21:f3:a4:f3:eb:c3:78:ca:1e:a6:9d:
         b2:80:ce:0f:3d:71:75:29:ef:ab:a8:37:ce:a7:d6:0a:18:ae:
         0c:8a:85:51:2e:24:1b:ad:f4:76:14:aa:e9:01:78:3a:17:bb:
         58:13:d1:dc:8e:08:25:99:f3:14:50:d9:5d:01:f8:5d:2e:95:
         05:b1:5e:77:eb:f2:9c:b7:0a:50:ad:1c:ec:a1:8f:31:a6:cd:
         cf:af:d1:99:a5:74:ee:87:9d:fa:e4:2f:99:5c:aa:96:2f:12:
         01:2c:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:31 2026 by rpki-client