Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          vd7IQGT53lqyeFYVvu++jGnzVVm1EA+PG+DKM32pKGk=
Subject key identifier:   4F:32:FC:AC:C8:D6:BE:49:4B:D5:4C:00:BA:FA:01:1B:AF:B3:4A:6D
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       019F8FEC08C2C53A8B74C3FC4C92D676CEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          19DF
Signing time:             Thu 23 Jul 2026 17:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:38 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: KDjRrGsI9VItpfrk0KfV7qwOX3b+BkC/8kKjMcPhims=)
                          2: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
                          3: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
                          4: w49gIkVLNSYogOVZSrdUPgUp370.roa (hash: 6U7SbASkeATtJP3IVCl3hK3qgWI7Ka+3JgVPUarezUQ=)
                          5: zqr4aGdDDtzTHDNPWJqgcPddlew.roa (hash: SNHy9E5ZRD/6ft8c8Ogn35Ny9ABmYBAl4wY1xF1BhGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:08:c2:c5:3a:8b:74:c3:fc:4c:92:d6:76:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Jul 23 17:00:38 2026 GMT
            Not After : Jul 24 17:00:38 2026 GMT
        Subject: CN=4f32fcacc8d6be494bd54c00bafa011bafb34a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:da:62:98:29:89:38:c1:53:9f:d9:9a:8b:
                    c2:4b:70:66:3a:6a:b9:d1:30:a0:4a:40:8d:46:7f:
                    20:ac:99:49:b3:fc:20:48:65:bf:cc:b3:06:76:ef:
                    09:87:74:cb:3c:cf:e6:5c:ed:36:06:99:7e:5f:d9:
                    71:ee:18:cc:b4:8c:5b:87:c7:05:93:dd:a9:4f:1e:
                    3d:5a:04:17:1d:8c:47:ec:61:2f:cb:e9:78:07:9b:
                    48:26:a0:1b:4a:c7:10:41:c9:50:31:06:8b:ab:de:
                    5f:e8:7a:d8:8c:86:02:85:75:57:bc:0e:6a:3d:13:
                    89:ee:21:1d:64:22:c3:87:c9:ff:8a:2a:b7:47:15:
                    1c:9c:35:ab:09:eb:00:76:94:67:28:94:d2:87:c3:
                    47:8a:bb:b1:6b:07:ec:ce:1e:9c:a8:d4:3e:16:82:
                    51:59:c1:31:0d:f5:7c:45:72:bf:9d:ae:7b:6d:d0:
                    2a:ea:f1:ca:8a:03:b5:fa:81:f4:50:43:dd:1c:3a:
                    3d:21:51:72:0e:a7:f7:4a:68:a3:86:c7:d3:b7:f9:
                    b2:b6:96:eb:83:f7:40:64:54:1d:1e:09:56:70:1a:
                    86:66:8e:50:4c:29:31:45:49:1d:50:fb:01:7e:d8:
                    ae:69:fc:b1:f3:c7:d5:0f:de:68:6c:43:7b:b6:a5:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:FC:AC:C8:D6:BE:49:4B:D5:4C:00:BA:FA:01:1B:AF:B3:4A:6D
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:ae:8c:e4:db:36:12:31:85:80:25:71:c9:c5:5a:63:fd:
         cc:0a:c3:94:95:8c:1c:31:6a:20:a1:86:f6:2f:cd:92:3f:c5:
         7a:c0:c4:40:6c:ac:6b:72:5c:83:18:71:d3:e9:01:0f:ac:e0:
         1b:29:49:9e:c8:7c:18:9c:1b:df:5e:3c:78:60:b1:6d:19:39:
         14:75:ea:cc:df:ff:74:e8:3e:4b:26:2f:10:bd:bb:2d:30:ea:
         e0:18:87:ff:c1:71:1c:05:23:b2:c3:09:07:c9:2a:68:f9:02:
         cb:f5:5d:01:09:8e:2c:63:0e:3b:67:df:29:8e:71:30:c0:9e:
         e3:6c:1b:14:f2:5a:93:1d:e3:fd:72:0e:0b:9b:41:df:48:8d:
         e3:4b:ff:22:42:a5:b5:3c:96:a2:f7:25:dd:98:ab:26:51:64:
         76:c9:52:99:67:76:aa:d8:af:cd:07:82:67:92:03:2a:a8:f1:
         70:62:32:ca:26:51:5b:98:80:50:9f:55:af:44:47:8c:de:6c:
         80:95:fd:65:1a:74:93:7c:fe:21:f7:af:65:3a:bf:cf:5d:14:
         26:bf:ac:4d:25:a4:29:3f:d7:21:f7:69:1e:69:1e:c2:ee:9e:
         2f:bc:1a:c6:df:8b:62:1c:0c:52:38:8d:75:37:d7:e1:b6:a5:
         48:45:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:00 2026 by rpki-client