Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File:                     3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier:          B2V00uCpCt3ypRR2nag5LrQqQH7lV6E1I7ksdoYLslM=
Subject key identifier:   04:A1:D1:0A:E3:4D:BF:6C:5F:A1:DF:68:72:AD:34:B6:4F:58:D6:31
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer:       /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial:       019F8F109CD4D9E0738184035C427AF4B1EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number:          024F
Signing time:             Thu 23 Jul 2026 13:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:58 +0000
Files and hashes:         1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: OxFj2xwZW9m5E/BdfJpI06XNCoeL/aXbcBcdSXOeY6o=)
                          2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
                          3: Z4m8c_khyolcVDO5PV7q2NiXQe0.asa (hash: 1+Jl7vHo2Ld6XyDIDZY+xyRWhlS4TA+0ypKq1kqiGDs=)
                          4: jaxXvAizdbnOZ260E3D28kqdvDc.roa (hash: DfDxUm/qCB11xHbyJJCLMlzjpAVxvuDgSoZ8iUQR0iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:9c:d4:d9:e0:73:81:84:03:5c:42:7a:f4:b1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
        Validity
            Not Before: Jul 23 13:00:58 2026 GMT
            Not After : Jul 24 13:00:58 2026 GMT
        Subject: CN=04a1d10ae34dbf6c5fa1df6872ad34b64f58d631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ff:8d:4b:da:88:c2:ff:64:5d:11:b7:a1:23:
                    cd:d6:d8:4d:1c:02:5c:17:14:7f:fa:8f:95:32:5d:
                    0a:6a:90:56:45:af:03:89:1f:69:e5:53:86:a9:65:
                    c5:1f:30:69:cb:0a:3e:4d:59:f0:b0:1b:e9:91:09:
                    e0:69:dc:a0:b1:5b:b5:07:a6:eb:86:fa:73:c7:04:
                    8d:17:35:16:85:5a:7e:05:d2:85:29:73:e8:6f:78:
                    77:1d:6d:16:75:2c:0c:bf:4c:6a:f4:43:6a:9f:12:
                    a1:15:cc:c5:6f:ec:05:11:93:72:8c:e2:29:66:19:
                    55:78:a2:77:8d:e7:87:f1:d3:1a:6c:9e:8d:7c:c3:
                    1c:52:c9:8f:21:67:9c:07:53:fc:91:9f:30:ac:fa:
                    7c:6c:f6:74:bf:22:d1:02:1e:f2:05:b4:85:3e:c3:
                    a4:44:f7:52:f1:a6:4d:e5:2b:8a:52:65:d7:86:29:
                    d2:06:26:5c:63:78:65:ae:80:01:50:63:3d:c2:ad:
                    74:be:dd:0e:1a:cd:56:2b:20:41:11:da:4f:90:b3:
                    26:df:8b:76:ed:4a:e3:6f:3c:5f:ba:01:7e:49:49:
                    6a:68:b8:22:2b:0a:d3:1f:88:bc:06:f8:80:df:d0:
                    1c:50:95:52:e4:a3:64:7a:c6:ec:ca:9b:7e:19:ec:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A1:D1:0A:E3:4D:BF:6C:5F:A1:DF:68:72:AD:34:B6:4F:58:D6:31
            X509v3 Authority Key Identifier:
                keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:59:05:fd:02:b1:f3:74:61:85:40:50:55:2d:9c:06:2b:c6:
         e1:e4:e8:c5:81:3f:bf:35:46:58:3a:e5:c3:86:37:06:6e:87:
         02:1c:64:2a:0e:21:22:fb:de:6d:3f:e0:e4:f6:b3:dd:85:4b:
         65:a0:20:b0:c6:5f:0b:07:a6:42:5b:42:4d:37:78:7e:16:ad:
         66:e6:b9:8d:e5:e2:bd:65:81:56:77:0a:cf:3b:4d:e9:ee:21:
         73:43:19:5f:43:c2:f2:c6:5d:1f:7b:ef:fb:28:73:66:67:2e:
         dc:9b:88:a2:dd:ad:0e:44:9a:e6:f5:b3:e4:e5:b9:bd:ad:a1:
         26:51:84:93:16:9e:07:77:1f:c0:3b:02:eb:0f:84:5d:7f:5b:
         6e:f6:43:b6:a0:34:4e:19:b2:c2:ff:00:4f:99:3b:4c:4a:6b:
         59:7d:a0:f6:da:1f:5c:86:81:37:9f:d5:ef:7a:df:8e:2b:66:
         ff:24:da:93:10:a0:7a:2f:22:6e:e6:5c:5a:b4:ec:9a:25:7b:
         93:b9:f7:06:a4:52:8a:93:0d:f0:ef:b6:88:d4:74:a6:25:c7:
         c8:02:46:a0:cc:a7:2f:20:d3:54:e8:9d:90:e8:47:50:b2:54:
         3b:d0:16:87:cf:73:fc:8f:91:5c:69:07:e4:6e:f0:67:4d:4d:
         4e:1a:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:38 2026 by rpki-client