Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File:                     3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier:          ygM3yoRYWUdJIorJAGc0ISt0lz40MLRfJ0qnXjzAfao=
Subject key identifier:   A1:75:E2:CA:F8:96:DF:84:93:3B:BD:4D:32:36:B7:A8:A8:FF:70:E1
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer:       /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial:       019F90C7A99CF2696456A2A78BC1C2FDA4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number:          164F
Signing time:             Thu 23 Jul 2026 21:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:31 +0000
Files and hashes:         1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: x0v8JUwxBUFtY0JZFZbLMHlbJyl2Dh+TVoSQ8WNoGyY=)
                          2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a9:9c:f2:69:64:56:a2:a7:8b:c1:c2:fd:a4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
        Validity
            Not Before: Jul 23 21:00:31 2026 GMT
            Not After : Jul 24 21:00:31 2026 GMT
        Subject: CN=a175e2caf896df84933bbd4d3236b7a8a8ff70e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:e7:0a:06:21:15:d0:25:2a:49:e8:7a:9d:
                    eb:6c:81:64:7f:64:0a:5a:d2:19:4c:04:5c:04:63:
                    d2:34:31:dd:f7:45:5d:26:bb:cb:c5:16:c1:e8:94:
                    5b:67:15:f2:9b:4f:c4:dc:99:c9:4c:ed:a4:85:b7:
                    9e:de:7a:6c:81:ee:a3:3e:49:99:c4:e7:3c:58:6c:
                    67:e4:c3:85:b9:5a:17:d0:e8:72:c5:d7:5c:93:49:
                    a2:cf:c2:f7:f2:9d:36:9d:64:71:a1:ce:f9:77:8f:
                    9a:c4:ba:9d:34:91:00:60:99:27:c9:79:10:b6:a2:
                    ca:4c:e7:7e:9d:36:78:2a:8c:f6:e2:ca:12:ee:71:
                    ef:e1:8a:13:95:98:d3:05:82:e2:6e:95:07:99:a3:
                    ac:74:bf:d4:c1:5e:87:ce:24:54:71:c3:b9:8e:69:
                    23:b5:a1:1f:60:39:d4:b5:cc:bc:24:66:e1:ca:49:
                    ca:7d:fc:5e:4f:c7:5d:1e:77:2f:d6:c8:09:9a:2c:
                    be:36:1c:41:a5:d6:e4:e1:c0:11:33:4c:32:c0:52:
                    87:61:b5:ae:08:e9:70:47:f6:8a:90:74:35:92:6a:
                    19:ee:84:1e:81:88:83:82:ce:b6:4f:40:be:5c:05:
                    dc:ac:d0:ff:3a:bf:c0:ba:b0:06:d7:47:e3:a6:5e:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:75:E2:CA:F8:96:DF:84:93:3B:BD:4D:32:36:B7:A8:A8:FF:70:E1
            X509v3 Authority Key Identifier:
                keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:7a:1c:99:af:91:04:08:6f:94:26:68:4d:cb:dc:8c:b5:
         be:bd:46:bd:23:1a:17:aa:f7:06:d5:87:a9:1f:c5:ae:34:6f:
         93:9b:0d:37:39:51:81:af:d9:b4:e7:ae:03:8d:2d:40:69:ad:
         34:cd:d6:e9:b0:f9:9e:78:0a:a9:b7:5a:ea:38:24:70:08:47:
         3d:c7:46:2c:b8:b5:ef:e3:43:f4:43:58:0a:57:b8:4f:c4:e2:
         cd:66:2d:f0:43:7e:36:c8:34:8a:76:79:af:c9:ff:e1:46:cc:
         ee:0b:64:f7:fc:40:6e:85:e1:3e:04:47:c3:23:b5:bc:73:9a:
         5b:0e:71:8f:0f:6f:aa:8e:5a:62:01:ef:eb:e2:1b:e0:df:4f:
         9d:1e:1d:b3:5f:02:fd:49:18:18:f7:fb:d2:c4:63:00:cf:60:
         ac:7e:aa:f7:c9:d0:97:47:03:f9:ad:79:79:d1:f2:5b:10:53:
         c5:2f:73:49:d9:99:63:57:f9:2a:8a:f2:05:c0:4b:20:7e:fc:
         a7:da:6e:5c:77:9f:86:12:cd:38:e8:b0:b4:d9:2e:dd:c1:1d:
         1b:d6:a4:2d:05:5e:14:6c:df:d9:9a:96:55:1a:d6:30:e0:a6:
         b7:4f:6a:d6:b8:a4:19:be:db:96:fc:eb:0b:72:c6:e0:cf:4f:
         cf:c2:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:01 2026 by rpki-client