Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File:                     S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier:          VU5gh1c912wDXxEJVnwBGBRlmKmSSZJAU9l7zlAPKfU=
Subject key identifier:   DE:34:0B:7E:06:BC:97:F4:8C:19:70:A5:55:5F:36:A7:B5:7E:C2:C2
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer:       /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial:       019F92B64206F6C14AE869185245BF560674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number:          02C8
Signing time:             Fri 24 Jul 2026 06:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:45 +0000
Files and hashes:         1: 0PNNJSyJ0wPA31PYleSlFpT7N-s.roa (hash: HmWyLzP2r/zqsv+ZvZhPS3WfEMiDosKLvFdV2iSTVag=)
                          2: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
                          3: DXccqbGebS1oWRZWwtuGkEM6mrE.roa (hash: sAlKBAN/NVbEzYwknbZfL2yJYktB8VaTsi+xqD0lVdY=)
                          4: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: ViqBMrLiKxq4XR2bxVYRqQ+lLzecDuvIuaeIPYI832o=)
                          5: qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa (hash: P+9IofTZBAc1XWPoAjdQhkamibGq6Uq0JX0SkWEsNv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:42:06:f6:c1:4a:e8:69:18:52:45:bf:56:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
        Validity
            Not Before: Jul 24 06:00:45 2026 GMT
            Not After : Jul 25 06:00:45 2026 GMT
        Subject: CN=de340b7e06bc97f48c1970a5555f36a7b57ec2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:cf:4c:19:fe:72:f6:e5:6c:c1:5e:b2:79:
                    aa:ad:dc:c7:92:87:30:1a:9d:79:84:df:7c:56:b4:
                    61:c4:bb:35:ce:5f:57:90:74:0d:c3:f4:b3:8a:d7:
                    1c:f7:54:fc:fd:e7:e0:63:46:e4:e9:41:a5:78:c3:
                    a6:fe:c0:4f:a8:26:ce:14:5c:55:79:a7:48:4e:ea:
                    85:29:9e:fb:70:68:32:b3:a5:52:82:20:dd:2f:63:
                    12:0d:76:4f:cd:e3:b7:ec:f4:7d:11:d8:91:43:c2:
                    dd:47:e0:c1:41:d9:8d:82:b8:ec:72:f1:29:5e:42:
                    5a:29:77:81:e4:71:73:1b:a8:ff:87:64:da:e5:4f:
                    8f:60:c1:c7:ca:94:c9:61:54:6c:72:cb:ca:8d:35:
                    3e:43:cf:ce:59:01:63:be:61:4d:b2:f2:6c:b5:87:
                    92:05:de:36:66:55:14:5a:0d:e8:5f:21:57:10:fd:
                    79:3a:e2:12:27:6b:dc:ce:4a:78:9e:63:08:97:e9:
                    93:5c:8f:37:84:fb:e0:9f:30:d6:87:1f:79:51:01:
                    a2:94:cc:66:21:ea:3f:ec:8b:81:bc:cd:17:67:c7:
                    ec:82:02:b6:33:74:38:36:c3:00:5d:51:6a:25:25:
                    33:6e:64:d2:8a:28:6c:7a:23:3d:14:7f:5d:eb:0c:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:34:0B:7E:06:BC:97:F4:8C:19:70:A5:55:5F:36:A7:B5:7E:C2:C2
            X509v3 Authority Key Identifier:
                keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:68:3f:d8:e3:2b:a8:23:38:03:df:9d:2f:8f:b3:55:3e:
         d9:fa:a8:48:9f:38:e4:96:b3:c5:8d:ca:c4:87:95:a6:7e:b6:
         42:0a:fc:88:35:f1:93:a3:07:7e:8e:11:ae:5f:df:33:fa:bf:
         61:07:0e:8c:53:76:ff:a5:0d:dd:25:55:71:1b:d7:fd:be:d9:
         d5:17:03:6e:85:ed:94:11:12:6a:05:6b:f0:cc:a9:5d:4e:0b:
         9e:cb:9f:36:96:de:20:1b:b5:d8:e5:0c:9d:d9:79:31:49:ef:
         b9:7d:fa:15:72:ef:a6:84:ae:a3:3e:07:10:03:86:99:97:fb:
         28:fc:1f:69:06:c3:4a:54:a7:7f:52:86:37:78:55:29:23:b4:
         aa:99:bb:4b:8c:1f:68:e6:e3:43:83:de:6b:c4:b9:c8:8a:5b:
         52:f4:11:ca:df:8d:b7:b4:6a:63:9c:af:07:42:8a:0d:4c:08:
         f3:2c:9c:55:72:0b:25:8c:59:a4:a3:bb:b6:60:3f:20:87:b3:
         58:f0:d7:b6:57:41:33:c7:90:0d:2b:c9:4b:0a:0c:a6:ab:29:
         d1:9c:2c:85:98:be:5a:e1:8f:25:1b:af:ea:98:48:5d:91:d8:
         41:83:52:0e:72:23:83:00:71:a2:f1:e2:3c:de:51:32:34:1a:
         2b:3c:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:14 2026 by rpki-client