Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File:                     3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier:          2I0gImKbqwkVQPOOQrMUVOhE8FCSqCtwiQFwqJ9bFiY=
Subject key identifier:   31:10:C2:F5:A1:81:6C:3E:19:A7:C1:14:7A:E7:BF:E4:5F:96:D4:65
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer:       /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial:       019F916C52E6150CCCFA8A710261DA44D434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number:          0EED
Signing time:             Fri 24 Jul 2026 00:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:23 +0000
Files and hashes:         1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: OQ+pNLfKsMRtDbn4apVrXQkS3Si2T9XAjjGg8+GuM3Q=)
                          2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:52:e6:15:0c:cc:fa:8a:71:02:61:da:44:d4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec756af77dafebca10684d68556baacd7173617
        Validity
            Not Before: Jul 24 00:00:23 2026 GMT
            Not After : Jul 25 00:00:23 2026 GMT
        Subject: CN=3110c2f5a1816c3e19a7c1147ae7bfe45f96d465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:b6:fc:db:34:fe:e2:d7:3e:b0:2a:22:88:
                    d6:db:d8:10:3e:b4:2d:ca:1c:a2:75:1d:a9:b0:92:
                    6a:a4:3a:86:d1:67:cd:c9:50:f2:f8:73:54:97:92:
                    ff:bf:8f:f1:1d:9a:4c:59:81:d0:9a:b6:fb:03:b7:
                    d1:c7:59:09:ea:c7:aa:00:33:83:ce:cf:bb:62:75:
                    41:ae:ab:b3:ee:da:3f:ac:3e:d9:36:32:25:70:d6:
                    41:31:aa:a0:4c:46:23:f6:a8:ee:ee:50:24:40:50:
                    b5:1e:0c:76:2a:6a:f0:92:2a:eb:80:a8:62:c6:92:
                    f1:0a:d4:35:78:fe:1e:99:68:13:00:9e:e7:71:0c:
                    d7:07:84:da:fc:3b:df:d6:94:b3:25:74:aa:3b:41:
                    5b:68:a6:46:1a:2d:ad:15:d1:49:1e:5e:cf:bf:3e:
                    67:58:25:13:c6:8c:cd:5f:de:7e:64:a1:7b:04:06:
                    61:61:5b:ad:a4:cc:f0:30:e0:61:1a:63:9a:f4:a9:
                    f7:bd:7f:9e:d9:ef:94:f3:37:39:ce:5f:1f:8d:92:
                    8d:df:d7:d1:06:c8:24:fe:77:b5:77:af:34:89:c7:
                    ee:74:a3:aa:b2:1b:1d:88:09:e1:d9:65:7f:16:2b:
                    2f:d9:d0:2c:f8:6e:3e:d6:43:76:1e:6f:1c:6c:37:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:C2:F5:A1:81:6C:3E:19:A7:C1:14:7A:E7:BF:E4:5F:96:D4:65
            X509v3 Authority Key Identifier:
                keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:59:ba:e0:60:a9:b5:13:28:ed:7e:29:9f:f5:68:ef:d3:0f:
         14:5e:f0:c4:bf:02:9f:14:6b:7f:23:27:fe:ef:f5:f6:97:02:
         19:9b:07:60:35:d6:31:86:d8:18:44:f6:44:01:d0:a1:46:ed:
         2f:64:7b:ca:03:70:53:81:91:2e:7e:64:0a:e1:fc:d5:2c:c9:
         f6:d1:7e:90:b2:17:e3:95:a8:c4:df:c1:8d:dd:e4:15:6b:7f:
         30:b9:1f:e5:82:63:03:f4:91:67:1c:ab:79:cf:d2:92:3e:9e:
         83:a7:a0:92:6f:e4:c5:ef:81:fe:79:3d:0d:46:da:2d:f7:dd:
         98:b6:2d:2b:82:82:e4:79:30:a0:e1:35:e4:e5:38:42:69:2b:
         3b:01:24:85:ea:17:a2:5e:38:3d:0e:bb:10:74:4b:b5:57:12:
         37:e5:10:88:35:87:74:3a:fc:54:68:64:90:1c:0b:b8:80:e3:
         30:9c:00:49:3e:c0:f8:04:a0:90:4e:ab:10:1e:35:94:e2:b4:
         4e:76:dd:da:d0:a1:08:c6:3a:d5:2d:d9:a5:1f:59:fa:84:87:
         f5:67:f9:82:22:fe:f4:b0:25:24:fe:24:1c:f0:f7:6a:16:ad:
         13:d6:63:4c:62:c3:00:c8:49:09:4a:64:ce:49:d6:dc:f9:12:
         9e:28:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:54 2026 by rpki-client