Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File:                     Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier:          ffkRh2bnDZ6oPSCO0imV3Ysiy7FyAucs88qi6+ApM4U=
Subject key identifier:   AC:5F:D3:13:9C:C1:31:09:2F:09:98:AD:63:E1:FA:8F:8B:55:4D:3F
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer:       /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial:       019F8E6B48D3F6374589002632DBF788ABA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 10:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 10:00:23 +0000
Files and hashes:         1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
                          2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: E09cPlrPhiQWvARetPBokyt9/cUNqeuUIcMn/5SiQq8=)
                          3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
                          4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6b:48:d3:f6:37:45:89:00:26:32:db:f7:88:ab:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
        Validity
            Not Before: Jul 23 10:00:23 2026 GMT
            Not After : Jul 24 10:00:23 2026 GMT
        Subject: CN=ac5fd3139cc131092f0998ad63e1fa8f8b554d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:19:54:4d:fd:d6:f9:0a:37:aa:00:a8:13:
                    c6:1b:69:77:f9:99:1e:ac:36:13:ae:9e:40:9b:15:
                    23:e0:95:57:9f:ce:91:07:48:80:5a:69:29:95:0c:
                    f7:1a:a4:ef:1a:5b:2c:e9:2b:23:29:9e:04:95:c5:
                    bc:b7:7c:1c:2f:23:31:d6:d7:f2:82:d0:bd:0b:a2:
                    c5:86:0b:57:33:84:09:9a:36:2a:ee:f3:c3:72:b3:
                    45:5b:a9:d8:f7:46:21:27:3b:c4:9c:16:72:20:d1:
                    a9:df:76:fe:60:82:46:dc:0c:27:51:59:0d:7e:ec:
                    5c:92:ce:11:58:71:e9:98:14:4f:f2:ae:97:4d:f3:
                    13:dd:1a:6b:f0:a4:5d:34:24:d4:7b:20:94:9d:af:
                    88:ed:7f:1a:ec:d8:bc:df:15:84:4f:5a:f9:c2:51:
                    a1:05:ee:68:46:b4:97:9a:25:76:27:a0:33:50:ea:
                    bc:cb:e4:a7:d8:68:ee:40:ec:99:51:60:3c:fd:2e:
                    d4:ed:c3:d6:83:f7:4d:a0:24:d0:d1:06:c3:c8:6c:
                    b0:e5:fb:0a:ef:ca:51:25:2c:00:7e:a7:dc:1d:14:
                    84:64:70:a9:f8:fc:df:a5:30:53:ad:bd:92:5e:95:
                    51:12:16:40:f1:ea:f7:0e:c6:86:9e:e8:0c:f2:b6:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5F:D3:13:9C:C1:31:09:2F:09:98:AD:63:E1:FA:8F:8B:55:4D:3F
            X509v3 Authority Key Identifier:
                keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:61:9e:32:81:42:0b:4d:cf:b4:b7:5e:35:e4:69:c5:9b:79:
         d4:d9:12:49:f8:5e:5a:25:d0:25:73:20:d6:de:1c:7e:29:00:
         a3:f1:98:ff:f7:36:b1:a9:0a:f2:f5:0c:e6:03:f7:8e:4b:82:
         e5:a9:3b:1b:e9:62:f2:17:27:93:99:a8:8b:0d:a8:b3:11:7a:
         79:14:a2:91:a0:9d:78:c6:93:a0:9b:6f:e1:92:f1:d2:88:51:
         f3:d5:d8:e8:ab:07:b8:66:71:38:b3:00:9b:b7:62:f2:75:6a:
         2c:6c:67:f8:ea:1a:fe:90:b4:71:9f:0f:05:34:9c:71:95:e0:
         67:5b:5b:22:d2:2d:f2:96:7f:51:2b:b5:4e:1d:a4:ab:6e:63:
         36:f5:b5:7c:3d:b2:bd:9b:9c:65:51:d3:37:38:d9:89:3e:17:
         c1:99:d0:7e:e1:32:e7:69:95:b3:4d:4f:97:9f:b4:25:7e:50:
         dd:80:5a:73:08:72:04:33:4d:d5:2c:cf:06:64:65:64:df:02:
         62:5b:3d:79:27:17:d9:c5:cb:10:d9:03:1d:ed:bf:20:0d:b3:
         d9:92:2e:79:18:30:90:2d:67:44:e9:9e:b3:19:5a:cd:71:37:
         5a:26:40:31:c3:ef:f5:b4:b0:1b:fa:1d:05:2b:ef:73:5e:bf:
         54:4d:af:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:59 2026 by rpki-client