Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File:                     8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier:          G/ZqDXfPKTZNhMFr5UTf0Js8srAKOjlGlWi+kZdh/uw=
Subject key identifier:   AD:46:C4:67:B0:44:D4:D6:9B:07:EF:25:8C:E1:95:76:E3:3C:EC:9B
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer:       /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial:       019F90FE9CDB12C91DA86706D9D59CD43375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 22:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:33 +0000
Files and hashes:         1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: gMR0rZ0+W7Nd78++eLUh+7qfp1Wkb1WqkFuObXOs/nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:9c:db:12:c9:1d:a8:67:06:d9:d5:9c:d4:33:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
        Validity
            Not Before: Jul 23 22:00:33 2026 GMT
            Not After : Jul 24 22:00:33 2026 GMT
        Subject: CN=ad46c467b044d4d69b07ef258ce19576e33cec9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:d9:23:09:ca:4e:70:3b:9f:0a:d9:01:8b:
                    ec:08:a2:56:03:45:cd:8a:43:ba:56:3b:99:9c:6e:
                    5d:af:0d:3d:8c:42:ba:0b:b1:a7:fe:17:c1:56:d6:
                    57:ab:75:0e:81:8e:94:e8:d6:a3:3e:6b:74:cf:c4:
                    01:c4:aa:97:97:35:3c:97:12:80:75:4c:a3:6c:53:
                    95:00:6c:98:23:12:3b:bf:fc:58:f2:d0:6c:ae:15:
                    0d:f1:32:cc:67:51:8a:e9:36:48:05:d0:36:10:f9:
                    31:c1:e4:de:1b:c6:18:7d:a5:4b:79:57:06:fa:bf:
                    b1:31:62:44:6c:15:37:a9:e4:2d:75:69:a7:39:0a:
                    ee:f2:99:aa:28:c8:d7:68:19:9c:51:b3:b1:8c:16:
                    42:5f:14:5f:23:70:6f:d3:cb:2a:99:92:c6:da:b5:
                    62:24:f8:6d:c0:99:53:3d:a4:f9:f4:80:f3:9f:6a:
                    69:70:57:20:51:ee:b6:c7:bf:ca:87:18:56:df:ca:
                    b6:36:c9:f5:9b:0f:09:c8:5d:89:20:00:61:98:cc:
                    5e:45:9e:10:ea:8e:42:97:51:2b:4c:4b:e6:8c:70:
                    0e:8a:f5:9e:23:08:9b:03:3a:51:2b:4f:f5:99:77:
                    19:ee:d2:ab:04:bd:8a:79:11:dc:01:c4:1f:ba:40:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:46:C4:67:B0:44:D4:D6:9B:07:EF:25:8C:E1:95:76:E3:3C:EC:9B
            X509v3 Authority Key Identifier:
                keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:f8:de:7f:01:7a:c2:1f:23:b1:19:c0:d7:76:6e:c1:8a:
         09:8d:e4:0a:90:19:51:04:bd:ca:a1:fc:b7:66:41:e0:3c:93:
         32:68:ac:3e:46:22:b8:f6:dc:d5:84:4d:25:f9:81:ca:b3:aa:
         9e:ab:2d:c8:8d:e5:54:ea:64:94:48:08:58:15:ad:b7:70:e7:
         84:27:c2:64:04:9e:82:6e:fd:35:e0:c9:1a:0c:26:e3:aa:30:
         16:ef:dc:71:48:48:13:b6:89:51:ea:47:3d:4c:d7:a5:93:64:
         c8:1a:eb:ae:00:2c:c2:1e:aa:c8:88:b2:d6:b3:fe:40:b3:60:
         8a:03:1e:8e:54:8c:cc:d0:32:d9:8f:9f:9f:42:67:43:f5:cc:
         9e:c9:ec:2d:a6:a9:e9:0f:fc:14:bc:50:12:81:80:65:40:bf:
         63:7a:a8:6a:eb:67:24:8b:d6:da:79:b2:3e:5b:a5:de:48:0c:
         8f:26:4e:73:ea:14:12:d5:5b:87:26:ba:4c:9a:3c:2e:01:f7:
         34:6f:ca:6b:33:1e:98:81:1a:f8:87:fe:01:a2:74:36:bd:50:
         c2:e9:f3:ea:42:88:5d:09:d7:03:01:7c:c7:01:df:b3:9b:bb:
         c4:d1:ba:f2:4f:5a:13:e8:7b:65:2b:f1:5c:cd:a1:7d:f9:10:
         58:c7:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:04 2026 by rpki-client