Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File:                     s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier:          +RE0+sKBloL1gYIKqZ3fDmJFHYsStegJViBc3IPNNC0=
Subject key identifier:   8F:FF:4E:62:7D:E0:9A:30:F4:95:2D:72:A5:57:10:5D:19:8B:05:D7
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer:       /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial:       019F92B5F321CAEC9431DCC9C2CDDFE4CF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 06:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:25 +0000
Files and hashes:         1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
                          2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: ZqXaE3Tf0x+W2s80yBo7S4s+QafqtdAtL+UtP/6v/Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f3:21:ca:ec:94:31:dc:c9:c2:cd:df:e4:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
        Validity
            Not Before: Jul 24 06:00:25 2026 GMT
            Not After : Jul 25 06:00:25 2026 GMT
        Subject: CN=8fff4e627de09a30f4952d72a557105d198b05d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:2b:db:2b:a0:25:da:be:e6:42:54:b8:22:
                    7f:d2:d8:a3:fe:a9:bc:c9:3a:be:ee:a8:6b:33:37:
                    17:a7:c1:e9:a6:81:99:8d:56:3d:b0:07:3a:7a:50:
                    7b:d0:5a:bb:59:25:92:7e:46:1e:a3:ff:b9:74:f2:
                    b1:41:ec:92:1b:83:b8:2e:12:3e:84:f8:4a:b7:22:
                    e8:18:4b:97:ce:75:de:77:31:61:a3:20:21:c1:c4:
                    6d:c7:4a:74:88:a7:3c:7a:81:68:08:e3:76:d7:b7:
                    9a:3f:a5:1d:12:dc:fd:2c:79:b3:4c:86:73:39:0b:
                    c8:0f:02:77:0d:c6:f9:39:7f:fc:7b:f5:ce:e5:f3:
                    0d:c2:e0:74:c8:17:07:d0:b1:29:0b:d1:bb:99:71:
                    45:e8:08:af:50:4a:45:f9:7c:c8:22:2a:8f:ff:ce:
                    09:01:a6:bc:f7:03:6f:ae:28:cc:04:69:7b:ce:11:
                    57:e7:fc:e7:1e:f3:14:d1:71:86:b5:e1:36:42:83:
                    3b:a4:d0:be:df:54:e1:26:13:f3:46:72:5b:17:30:
                    34:98:fa:65:68:93:f1:0a:9e:65:84:88:93:56:c9:
                    23:42:e2:4c:94:68:f4:d5:09:a2:0a:e7:15:de:9d:
                    d7:be:7a:99:d6:ae:28:70:c1:b2:2f:5b:19:7e:1e:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:4E:62:7D:E0:9A:30:F4:95:2D:72:A5:57:10:5D:19:8B:05:D7
            X509v3 Authority Key Identifier:
                keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:44:74:11:62:c3:9e:c9:bd:f2:c7:51:47:98:a6:d3:8f:
         75:9b:1f:f3:e1:f3:af:f8:4c:be:00:3c:44:c2:cc:9d:32:40:
         c1:78:53:ca:c3:1b:95:66:16:c3:5d:27:58:48:61:e5:12:ce:
         49:da:42:02:50:c8:4f:41:9a:a9:17:9b:f1:7d:a6:f0:69:4f:
         e0:9e:b6:99:f6:ea:e6:b4:c1:44:0b:95:06:fb:01:fb:f5:ca:
         d8:b5:3e:17:cf:e6:c9:4f:f5:d6:b8:cd:0c:af:44:82:35:16:
         81:d1:b6:fe:ec:55:df:12:f2:08:3f:c8:ac:1f:d0:34:e3:83:
         4f:ec:0e:aa:b9:96:bc:99:0f:4b:8e:4a:d3:64:f4:f9:a0:b8:
         3b:c9:bb:7c:cd:50:90:e2:6b:12:0f:0c:c3:2d:88:b0:79:2d:
         aa:00:76:9c:34:28:cd:0b:20:e8:1b:cb:f1:15:32:d9:98:1c:
         cb:ed:83:14:95:f4:d1:72:7a:d3:7d:fd:af:70:cd:6f:e9:36:
         37:c7:a9:69:b9:e4:38:33:3d:1e:c6:ac:b6:3a:da:ce:a5:81:
         b5:02:4c:24:1a:33:b9:ae:41:13:3d:a2:06:cc:ff:29:d3:67:
         05:f6:0d:82:b6:1f:a4:a8:4e:be:fa:b7:04:b1:62:da:a1:88:
         83:e1:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:42 2026 by rpki-client