Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File:                     3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier:          1fFqXBI29phU/ZDdlJ2YUvLeKRacruSVeK+9NrbgH+Q=
Subject key identifier:   5E:EF:1E:CC:26:A3:C3:B2:BB:7A:2D:54:A7:05:42:B0:6D:54:E4:0D
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer:       /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial:       019F9059DD4FD3100906B16779180FD3F33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number:          179F
Signing time:             Thu 23 Jul 2026 19:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:36 +0000
Files and hashes:         1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: +ubFhQfgzIpjHKQsOFZvw0MjVo0DrJcXz1XwOOT2dkg=)
                          2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:dd:4f:d3:10:09:06:b1:67:79:18:0f:d3:f3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
        Validity
            Not Before: Jul 23 19:00:36 2026 GMT
            Not After : Jul 24 19:00:36 2026 GMT
        Subject: CN=5eef1ecc26a3c3b2bb7a2d54a70542b06d54e40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:eb:48:d3:87:51:66:b3:cb:94:4c:f5:2a:
                    ef:e1:bc:a6:d1:cb:c9:66:56:f5:2d:ca:be:ce:aa:
                    13:23:8a:33:ed:e0:bd:71:3f:f4:8f:dc:74:12:d6:
                    fa:8c:3b:96:b9:14:77:37:33:d2:d1:db:7c:ff:85:
                    28:0e:8a:01:bf:e6:3f:a0:85:fb:c4:e0:f3:c1:aa:
                    00:cb:9b:de:91:28:8d:0f:cc:0b:0e:9b:6b:4d:24:
                    4b:58:8f:0a:88:89:fd:57:ce:86:4a:a7:9a:ba:1d:
                    8c:9f:93:e6:df:e3:85:d1:c0:df:ed:7e:1f:16:ad:
                    f5:70:b1:bb:87:41:b7:0e:76:0a:7a:7c:09:5d:11:
                    6d:3d:69:39:f3:fc:85:9d:40:1a:ee:e0:e1:33:da:
                    4c:3d:11:ed:88:78:81:ab:05:73:1e:50:b8:0e:c1:
                    f2:e3:b7:f6:81:2e:7a:4c:23:89:ac:44:c9:19:67:
                    44:ab:df:dc:e0:60:aa:c0:fc:a3:90:5c:8a:68:11:
                    80:aa:ee:e1:e3:35:b3:48:6f:30:e7:16:17:92:2e:
                    b4:ef:65:da:5f:ff:e9:5f:c7:94:49:2e:97:80:29:
                    3c:84:6d:4c:2e:7e:0d:0b:a3:fc:55:65:49:35:f2:
                    59:a8:dc:2d:6e:10:d2:66:7d:0e:ef:db:50:f0:a1:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EF:1E:CC:26:A3:C3:B2:BB:7A:2D:54:A7:05:42:B0:6D:54:E4:0D
            X509v3 Authority Key Identifier:
                keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:f5:45:87:2b:10:b3:f9:d2:58:05:04:58:01:e7:09:2b:
         3e:06:a0:7e:8a:8f:e0:d4:f8:03:6a:c8:6d:d6:c4:aa:c0:87:
         e7:a1:6d:2c:9b:9a:db:11:2c:e9:9f:0d:28:2a:79:96:c5:36:
         94:7d:60:d5:8e:f9:0f:98:56:40:b3:6f:1f:e7:01:da:ed:46:
         4c:14:3a:2d:a5:85:1d:07:e8:da:8f:b9:ab:d9:37:6c:81:58:
         a2:14:78:d2:dd:60:c5:08:fd:c8:c2:a5:9c:82:4c:78:2d:f8:
         4e:3a:20:d8:ec:39:90:b3:ae:42:9f:01:9d:7a:14:f3:fa:dc:
         97:28:a9:5a:1d:32:45:73:ba:46:a9:ac:94:99:41:77:75:4a:
         99:10:88:40:57:6b:12:7f:83:d3:db:3c:03:76:34:47:9e:c2:
         48:48:98:66:6e:66:f8:dd:7b:ed:6f:4e:22:9b:96:c5:65:d9:
         27:e1:05:2e:d0:e7:d5:30:65:74:f9:40:37:e1:9f:b9:07:0e:
         d4:3c:d6:26:1d:6c:a7:d7:0b:85:19:d3:d0:53:66:0f:2c:f6:
         8b:22:98:f5:ab:83:9b:73:07:6c:40:5d:24:90:92:f8:3c:c8:
         be:26:5a:bb:b9:25:80:50:ea:b6:18:0f:a3:d6:05:46:df:b5:
         b9:8a:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:11 2026 by rpki-client