Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
File:                     r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft (raw, json)
Hash identifier:          vh7zZx+z9QdfkhzepulTVyOPfrMsDhzAAp1Qf2rmk2s=
Subject key identifier:   2A:36:67:9C:4C:05:09:C1:6B:75:F6:C5:14:5A:EF:E2:5B:24:4D:36
Authority key identifier: AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
Certificate issuer:       /CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Certificate serial:       019F8F7DF75EAEE2BD4722D723E416A1C51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:24 +0000
Files and hashes:         1: d0YkCPdnCyaNIksA2mKdrGoNCqk.asa (hash: zX6hSb7dbU0ZGqZxmFYD03Uuu0hUFOMksbh8I/RIpYE=)
                          2: r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl (hash: Y84UOZ5lVi8fy19tTBc8PB73EEZvIeE9baVG7J089l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:f7:5e:ae:e2:bd:47:22:d7:23:e4:16:a1:c5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdec6e19638feae5c24bac3392aadd29d09a10b
        Validity
            Not Before: Jul 23 15:00:24 2026 GMT
            Not After : Jul 24 15:00:24 2026 GMT
        Subject: CN=2a36679c4c0509c16b75f6c5145aefe25b244d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:a3:8d:d7:0c:9f:17:f3:a7:05:90:9c:b5:
                    7c:ca:65:86:73:c8:63:3b:6f:52:26:e2:87:d6:60:
                    0f:a2:53:42:b3:34:ac:8c:39:97:aa:85:19:62:fc:
                    60:8b:08:a9:15:39:2c:d6:15:da:26:fd:43:6d:37:
                    05:d3:86:3a:31:b6:53:1d:f4:d3:7e:cb:5b:96:5d:
                    7c:32:41:b1:2b:d4:1b:10:63:ca:3b:10:51:f0:2c:
                    60:61:3a:2c:b7:14:f6:24:da:bb:ba:1a:9c:bd:ed:
                    2d:71:7c:d9:d3:d4:be:f9:18:cf:00:84:7c:73:34:
                    b6:50:03:e3:bb:90:5a:c0:97:ed:95:56:99:4c:e1:
                    16:13:86:d0:03:12:e8:75:13:1d:0e:81:ae:0e:af:
                    7c:5b:30:86:ae:93:37:70:25:40:44:53:0c:f6:1c:
                    a6:51:a0:42:d4:45:a2:ee:73:9a:35:90:6b:a7:ac:
                    2f:35:c6:24:76:6b:cb:90:aa:f9:12:62:27:02:8e:
                    8b:63:87:11:f0:da:33:b7:6c:17:1a:d1:67:38:8a:
                    14:11:25:3e:22:ca:e3:12:18:70:ab:9d:16:f9:eb:
                    67:33:92:2e:12:f9:40:3c:a8:af:e3:f9:66:6b:40:
                    e9:02:2f:19:aa:94:9b:fb:df:cd:2e:d6:bc:c1:39:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:67:9C:4C:05:09:C1:6B:75:F6:C5:14:5A:EF:E2:5B:24:4D:36
            X509v3 Authority Key Identifier:
                keyid:AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:4c:6b:36:3a:58:8f:a9:ca:59:61:4e:02:c2:6f:d3:96:
         41:58:7b:95:54:c9:42:67:0c:2a:88:38:e1:28:35:67:a4:3c:
         3b:b1:98:b0:b5:d6:d7:37:3c:97:f0:5a:f3:9c:78:4f:27:4c:
         f2:84:36:13:d6:11:9b:bd:d0:7f:8a:9e:55:18:1a:1a:bb:b5:
         da:71:bd:11:f2:b4:e3:b7:55:fc:8f:48:9b:19:bf:b5:bf:db:
         7c:3c:52:c8:23:c4:90:8d:4f:bf:22:54:f1:01:cb:7d:e1:36:
         6a:16:49:9b:ce:77:87:7c:ec:a6:23:78:2c:1f:29:1c:c3:96:
         a6:a8:88:b0:2b:0c:e3:1e:e5:50:1e:df:e8:cb:df:16:10:55:
         3a:f6:88:3a:ba:53:7c:7d:0e:57:99:d0:d7:c9:ae:e7:ea:ae:
         a4:28:0d:59:a9:59:ec:95:6f:9a:18:3b:7f:5c:8b:f6:58:49:
         69:b8:3a:17:34:52:20:42:0d:e5:67:46:de:d3:b4:6a:1a:7b:
         c3:e5:71:89:9d:db:1d:3d:df:63:ce:05:fa:b4:3b:34:11:03:
         21:0f:08:01:a2:90:a6:ae:de:4e:c9:4c:52:73:58:16:54:e9:
         2d:83:33:c9:10:a0:bb:4e:18:dc:4e:42:8c:a6:4c:4e:58:58:
         a0:1d:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:38 2026 by rpki-client