Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File:                     U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier:          FmzXSTUlzeL+xpmJdWAUmzpDnfCf/LFr7e2K84Rbn1k=
Subject key identifier:   04:B3:12:7C:6D:DE:36:D8:77:E7:87:E4:18:BF:A5:78:C4:5D:0B:32
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer:       /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial:       019F924851B2F91BBC341B14781C1CAFE8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number:          11FB
Signing time:             Fri 24 Jul 2026 04:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:40 +0000
Files and hashes:         1: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (hash: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4=)
                          2: MB6VGwOGXL__4GDkn2ifKfMOL5o.roa (hash: tgzruOGhqB7Wz++Uyka8T5HxSlsKFcquj+FXoKwEcRM=)
                          3: ORixJag7nGsUVhn_7z-jWKPNs6c.roa (hash: 5T3+aTdZe3zV/H6LETA51CJXrWU4B9XcKgVJJWWibzo=)
                          4: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: LJM45zLa8+vVclQ3Rcd5KL6/g5O1fiWgud4T0NtaN+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:51:b2:f9:1b:bc:34:1b:14:78:1c:1c:af:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
        Validity
            Not Before: Jul 24 04:00:40 2026 GMT
            Not After : Jul 25 04:00:40 2026 GMT
        Subject: CN=04b3127c6dde36d877e787e418bfa578c45d0b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:2e:c2:e0:8f:8b:0d:02:fb:ce:89:80:80:
                    88:d2:b1:c0:2a:09:be:c6:41:24:c2:35:04:12:c9:
                    c8:d9:5e:3f:95:e3:2e:5c:9b:65:c8:d0:09:f0:b8:
                    80:01:d5:9a:4d:99:d0:b1:0a:69:a5:70:76:32:63:
                    d0:7b:01:36:69:82:62:15:a7:1a:7f:97:d3:30:a3:
                    21:30:ca:05:ac:fa:58:fb:2b:36:64:c7:1a:99:a9:
                    dc:e4:9d:d8:f4:13:bc:06:0f:91:d9:0a:b7:ec:77:
                    b4:34:46:bd:77:97:58:f4:8b:6f:30:72:cc:f5:61:
                    94:31:09:f0:7a:5e:2b:b9:54:55:72:a5:56:f7:33:
                    da:0b:7b:12:6f:c1:da:49:3f:64:6f:7b:f2:46:70:
                    50:a7:be:6f:70:ce:71:9e:2c:18:11:fa:d4:2d:50:
                    03:82:05:9e:40:fa:59:3c:d2:bd:77:2a:34:fc:a8:
                    3a:b7:99:3d:4c:35:6f:7f:f6:28:fa:4a:0f:9e:46:
                    16:fc:76:49:0d:96:2f:fa:52:ea:e4:2f:25:e4:e0:
                    31:7b:21:f8:60:51:e2:bc:7e:ba:a5:4e:47:d4:44:
                    b1:5b:2b:2a:11:8c:ea:f7:30:29:79:82:18:86:68:
                    2a:88:ba:14:30:f7:d3:62:d6:58:2b:f4:8b:70:a5:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B3:12:7C:6D:DE:36:D8:77:E7:87:E4:18:BF:A5:78:C4:5D:0B:32
            X509v3 Authority Key Identifier:
                keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:27:64:64:88:35:2e:fe:2a:15:0a:fa:12:dd:dc:5a:60:5f:
         66:3e:38:57:1f:43:b3:af:e8:46:94:cf:11:05:5b:cc:96:a4:
         54:4f:3d:1f:31:10:b3:99:3d:1a:57:a6:cc:e3:4f:d3:ad:c3:
         df:97:27:a7:c3:dd:7d:af:e6:76:33:53:de:dc:82:81:bb:3a:
         77:85:16:ed:65:46:6e:29:ef:24:d3:6a:5d:59:55:65:6c:ed:
         78:c1:bb:e8:f1:d4:c5:4d:66:d3:ce:e1:f1:80:cc:37:1e:2b:
         b7:c0:d7:73:b9:57:8f:57:eb:00:5c:c7:cc:fb:f5:b6:28:73:
         e7:a7:f5:4b:84:ca:95:28:1d:1e:ea:2d:d7:38:9d:93:4a:ea:
         98:c8:c0:99:bc:00:d9:46:89:7b:5a:ab:42:4e:e0:c9:3a:80:
         3c:ac:a8:f3:77:0b:44:35:ca:81:b2:d5:61:ea:f5:63:b0:2b:
         e5:0f:14:3e:d4:57:d6:17:84:78:bd:76:d8:75:95:87:d0:6f:
         44:06:5e:f9:3e:dd:79:91:0e:95:b2:99:6d:be:ed:25:fe:77:
         2b:48:8b:05:31:f7:8f:3d:b0:9a:a1:a9:00:36:69:96:5c:30:
         f8:9a:99:d4:74:93:3d:c6:e5:a7:66:2e:30:28:64:b7:86:eb:
         c2:9c:ea:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSFGy+Ru8NBsUeBwcr+jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm
ZjFjNjEwHhcNMjYwNzI0MDQwMDQwWhcNMjYwNzI1MDQwMDQwWjAzMTEwLwYDVQQD
EygwNGIzMTI3YzZkZGUzNmQ4NzdlNzg3ZTQxOGJmYTU3OGM0NWQwYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RkuwuCPiw0C+86JgICI0rHAKgm+
xkEkwjUEEsnI2V4/leMuXJtlyNAJ8LiAAdWaTZnQsQpppXB2MmPQewE2aYJiFaca
f5fTMKMhMMoFrPpY+ys2ZMcamanc5J3Y9BO8Bg+R2Qq37He0NEa9d5dY9ItvMHLM
9WGUMQnwel4ruVRVcqVW9zPaC3sSb8HaST9kb3vyRnBQp75vcM5xniwYEfrULVAD
ggWeQPpZPNK9dyo0/Kg6t5k9TDVvf/Yo+koPnkYW/HZJDZYv+lLq5C8l5OAxeyH4
YFHivH66pU5H1ESxWysqEYzq9zApeYIYhmgqiLoUMPfTYtZYK/SLcKVjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASzEnxt3jbYd+eH5Bi/pXjEXQsyMB8GA1UdIwQY
MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt
ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx
LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGidkZIg1
Lv4qFQr6Et3cWmBfZj44Vx9Ds6/oRpTPEQVbzJakVE89HzEQs5k9GlemzONP063D
35cnp8Pdfa/mdjNT3tyCgbs6d4UW7WVGbinvJNNqXVlVZWzteMG76PHUxU1m087h
8YDMNx4rt8DXc7lXj1frAFzHzPv1tihz56f1S4TKlSgdHuot1zidk0rqmMjAmbwA
2UaJe1qrQk7gyTqAPKyo83cLRDXKgbLVYer1Y7Ar5Q8UPtRX1heEeL122HWVh9Bv
RAZe+T7deZEOlbKZbb7tJf53K0iLBTH3jz2wmqGpADZpllww+JqZ1HSTPcblp2Yu
MChkt4brwpzqew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:47 2026 by rpki-client