Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File:                     3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier:          s6nDxALqRFG5NQwQ4d4RICDSsIxp4QFvtMHtNnbwdBg=
Subject key identifier:   D6:06:EC:C0:5B:1B:71:A1:BC:AA:38:12:6B:D3:2F:E7:33:C9:FD:CA
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer:       /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial:       019F927FD486CDAD359D4317D5FF44B2543A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 05:01:18 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:18 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:18 +0000
Files and hashes:         1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: volPjY7ZNHEaoiWZDtIJNZPV9ZUIAVxz1+OEOs7dmVM=)
                          2: EVEUejBUxMAFSM5mcutAdBHE7R0.roa (hash: qHDy6GnHP2/o9uXwJYd4YuP8Cxkyp2quR/Jtu60lrfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:d4:86:cd:ad:35:9d:43:17:d5:ff:44:b2:54:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
        Validity
            Not Before: Jul 24 05:01:18 2026 GMT
            Not After : Jul 25 05:01:18 2026 GMT
        Subject: CN=d606ecc05b1b71a1bcaa38126bd32fe733c9fdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:e1:48:ad:81:db:d9:42:80:61:b3:54:92:
                    6a:af:dd:f3:3d:f9:3a:cf:45:31:a9:09:ba:55:4a:
                    c4:f0:8c:41:6f:28:18:04:37:8a:0f:bd:dc:3d:46:
                    82:01:58:04:d1:81:ad:c9:07:89:e0:08:34:ae:c3:
                    59:88:ba:eb:8c:05:96:50:ef:34:09:7b:76:9f:50:
                    b2:0a:30:d3:40:d9:af:bb:0f:5b:e6:b8:1d:b6:d5:
                    c4:7b:9b:01:04:05:85:0c:5a:13:10:d4:77:1d:a8:
                    51:5f:ce:a6:b3:d7:a7:45:14:b1:70:30:03:8c:29:
                    08:c0:7b:7a:09:ff:a6:af:6d:fa:e4:92:01:a3:ab:
                    23:c2:c8:e9:10:d7:12:57:af:c8:c2:2f:70:78:37:
                    cc:08:be:61:0d:13:86:6b:40:48:88:d0:14:f0:9c:
                    9c:63:c6:d4:f2:d0:cd:e2:09:6b:4b:6c:a8:90:ac:
                    5c:0b:1e:72:41:0f:ed:a2:3a:8c:b1:7e:13:68:3f:
                    91:d2:22:c7:70:92:d1:f5:63:d6:8b:4e:f4:81:76:
                    f2:f0:87:e1:3c:f5:e0:6d:94:ac:13:e0:02:d3:78:
                    88:3e:ab:ea:40:20:6a:d6:a6:58:9e:ef:3f:47:b5:
                    d8:60:b9:65:fc:b5:80:a9:f7:44:11:21:48:23:6d:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:EC:C0:5B:1B:71:A1:BC:AA:38:12:6B:D3:2F:E7:33:C9:FD:CA
            X509v3 Authority Key Identifier:
                keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:48:69:43:dd:65:a9:50:3a:d3:84:7a:cd:0c:57:5b:23:
         87:f0:a5:e8:7f:b4:61:8e:17:60:ff:e2:c3:1c:2f:3e:70:72:
         10:0c:70:a4:78:f2:3e:64:76:7f:ee:fc:c9:66:74:40:fb:a9:
         89:c3:7d:13:95:db:b0:7a:6c:8b:37:f7:6a:ce:4b:e0:36:2a:
         8f:e0:22:51:55:7a:ea:76:04:b1:fe:42:a2:95:d5:ee:10:a6:
         d4:84:cd:ab:ca:2b:c2:a9:ad:ad:8e:1a:2b:d3:b7:18:84:41:
         98:dd:86:36:8f:c5:52:ad:79:be:1e:d2:fc:77:bf:78:e2:fe:
         eb:55:4f:9c:33:70:0f:48:24:b3:25:a2:0c:59:21:46:bc:6c:
         e8:cb:c4:2e:d5:4f:3a:48:c2:94:2e:8e:06:eb:4a:f2:e8:3d:
         4b:13:6f:45:15:08:56:8e:d5:ca:30:63:61:f2:cd:97:7a:32:
         59:f7:f6:42:3f:37:76:b2:76:0a:97:0e:dd:20:80:29:ea:6e:
         e6:9b:09:e6:fa:73:5d:42:4c:9d:cd:fd:af:40:cf:11:72:60:
         2a:42:5a:16:99:cc:5f:cd:2a:0b:81:6f:5e:fb:b0:a7:59:0b:
         cb:d3:a1:4a:1c:96:6a:70:7f:77:2c:50:c2:d1:7b:ef:b6:da:
         25:0f:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:05 2026 by rpki-client