Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
File:                     3oBYgxYFqoam1rbjw7KwFtr73KY.mft (raw, json)
Hash identifier:          fsPODAUS+30mRqyd3yHGSuPSpHm99W/nmZSQErHqkhM=
Subject key identifier:   F4:7C:31:AE:60:37:D3:C8:B3:09:81:3B:DE:C6:3F:44:38:A6:6B:6E
Authority key identifier: DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
Certificate issuer:       /CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Certificate serial:       019F8F7F51331E1C4AB39F6A14BCB4CE7179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:53 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:53 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:53 +0000
Files and hashes:         1: 3oBYgxYFqoam1rbjw7KwFtr73KY.crl (hash: 7N/AGorC1R8MzA51aCA1jCCQEsFy1URHK2RnoOkm1Ac=)
                          2: CMby5TZcz8wJssXc79aUUhtBUYI.roa (hash: TvV4JGUUPT6lyV1Vum9UKRCqV75Oi8Ug7Yz/kSOewW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:51:33:1e:1c:4a:b3:9f:6a:14:bc:b4:ce:71:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
        Validity
            Not Before: Jul 23 15:01:53 2026 GMT
            Not After : Jul 24 15:01:53 2026 GMT
        Subject: CN=f47c31ae6037d3c8b309813bdec63f4438a66b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:1b:4b:38:33:ac:e4:16:55:d3:a3:df:55:
                    0c:ec:d3:d3:fc:b3:06:ce:f8:98:88:23:82:e3:e8:
                    e9:a1:39:d8:08:db:06:38:60:b5:f0:cc:10:16:84:
                    7e:0f:bc:fc:69:c9:86:61:62:4f:11:9e:79:ef:db:
                    64:6d:bb:69:2e:dc:28:eb:96:88:65:c0:b7:5e:00:
                    a1:63:ce:86:dc:6b:a2:82:b5:25:b0:f2:c4:13:4d:
                    6c:26:e2:ea:36:42:ce:8b:7e:2b:25:57:a8:05:58:
                    72:ef:fc:10:cc:1c:e8:5c:e3:d2:4a:cc:f9:8a:9c:
                    d8:a8:bb:0b:99:29:39:e0:a9:ab:18:73:19:b6:82:
                    f7:0d:53:27:d8:1e:05:eb:21:64:bd:ad:72:95:d2:
                    ad:6e:9c:59:c3:f9:06:ee:cf:67:3d:d6:5b:7e:3c:
                    0a:e2:d3:7d:91:f0:95:2b:a2:74:2d:2a:0c:15:f1:
                    bc:0b:53:ef:50:02:e2:ab:81:f5:ae:78:82:3d:9a:
                    6d:db:4a:69:5d:fe:b0:83:7a:8a:d9:ee:09:4f:da:
                    c5:0e:b3:62:34:34:e2:1c:85:0c:c1:ef:02:3f:6a:
                    dc:f9:06:91:ef:5e:97:2e:c8:5e:95:e4:4c:d6:f1:
                    cb:1b:21:83:f4:99:8a:38:fc:24:d4:67:a1:39:6e:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:31:AE:60:37:D3:C8:B3:09:81:3B:DE:C6:3F:44:38:A6:6B:6E
            X509v3 Authority Key Identifier:
                keyid:DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:be:02:8c:77:bf:1a:7a:ee:ba:f8:b8:3e:2f:6a:26:65:1f:
         f5:86:73:2a:97:87:69:e3:1b:21:4a:57:e8:1e:36:db:3a:83:
         31:83:15:6a:8e:4d:ed:77:8a:f0:5d:2a:68:28:98:d6:d2:37:
         60:82:92:68:95:71:5f:88:69:fd:3a:0e:e5:90:13:e9:8c:bb:
         9f:f0:c7:7c:34:93:6f:ae:a6:db:bc:bc:91:b7:39:bc:66:89:
         c1:32:46:2b:e8:fc:bb:50:ab:4f:f7:af:77:d4:6c:9c:24:f9:
         05:f1:c4:a1:51:a4:68:e5:10:f6:36:04:ca:93:ef:c2:fd:01:
         b9:eb:0f:d6:84:1f:95:3e:fe:ed:8c:db:05:a0:e1:24:82:7d:
         ef:4e:e0:3e:30:2e:65:47:a5:05:45:bd:2c:31:ab:dd:9a:9d:
         df:52:dd:0b:1f:15:3f:4a:da:85:64:f5:2b:ca:88:32:22:4f:
         91:99:9b:05:51:b5:3b:ff:33:eb:ec:33:4a:3f:ca:ec:4b:e2:
         e9:45:a9:88:aa:a4:0e:5f:9b:14:80:8c:bf:25:fa:06:7b:86:
         26:b6:bd:45:fb:0f:23:01:c3:74:90:69:7d:7a:5a:ed:05:d2:
         ba:91:ca:e2:d9:a4:03:ce:10:b8:d6:a5:33:c9:53:e2:7e:85:
         55:49:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:13 2026 by rpki-client