Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File:                     3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier:          J0IC3qKP5ig4zBIfJolWjocIG+lu7Bql/5WS3+lJcTg=
Subject key identifier:   16:85:3C:62:C9:F5:D2:C9:6B:3A:43:48:37:1A:84:7B:EF:3B:56:8C
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer:       /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial:       019F90230FB86FD85A1B986919D815762CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 18:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:44 +0000
Files and hashes:         1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
                          2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: aAEpTPMk+yT2kZytA45Vbim1O4cHhtjYMOXsEWR7ODo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:0f:b8:6f:d8:5a:1b:98:69:19:d8:15:76:2c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
        Validity
            Not Before: Jul 23 18:00:44 2026 GMT
            Not After : Jul 24 18:00:44 2026 GMT
        Subject: CN=16853c62c9f5d2c96b3a4348371a847bef3b568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:fb:c8:1b:d9:b8:06:02:13:2a:f7:ff:81:
                    3e:c3:95:0a:97:d9:af:23:b0:e1:c0:f2:19:40:0d:
                    96:c4:c6:8d:9b:4b:b0:40:db:fb:46:71:74:2e:52:
                    60:5a:04:00:36:66:73:fc:90:d6:f1:d0:79:5e:f3:
                    cf:4d:70:37:97:64:23:cb:4c:a4:55:15:44:39:d2:
                    2d:13:ca:11:33:df:30:c3:c2:27:c9:d9:9c:b2:ac:
                    a7:7c:63:c3:bf:40:3a:81:c6:a7:ca:7f:82:14:92:
                    c4:09:db:ec:e2:1c:e4:5f:e2:45:34:5f:63:a9:36:
                    ca:f3:55:37:de:27:07:0e:21:0c:f1:29:6f:a4:2a:
                    7d:d0:09:d1:c0:cf:21:68:87:4a:55:25:80:9d:4d:
                    7d:c2:e2:6a:64:26:24:ab:01:cb:a7:8c:34:50:5f:
                    6b:55:dc:f5:38:14:c3:75:cb:1f:69:f2:e5:9c:0c:
                    d7:4e:52:c3:eb:f5:60:5e:ce:2a:0f:3e:32:9b:bb:
                    21:79:c6:e1:cf:45:7b:5a:b6:9f:28:de:56:8b:e6:
                    fe:e8:f2:00:30:cf:ce:ad:3f:fb:fd:2d:18:34:74:
                    03:77:10:8b:f0:bc:2d:a4:f9:15:ae:a5:47:b1:22:
                    50:8c:d3:1d:8e:f0:36:c8:2f:12:ce:68:01:78:b9:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:85:3C:62:C9:F5:D2:C9:6B:3A:43:48:37:1A:84:7B:EF:3B:56:8C
            X509v3 Authority Key Identifier:
                keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:6d:a5:e6:07:34:ea:33:83:9d:ec:7a:f8:e6:d1:05:1f:
         73:1a:a9:6d:8f:83:07:02:77:99:c0:74:84:6c:8e:73:99:20:
         46:9c:fd:a2:ae:b5:40:6a:57:e0:bb:8b:87:00:a2:dd:1d:58:
         38:bb:14:4a:c9:fe:9d:3d:25:de:bd:e5:e0:08:4c:6f:d7:24:
         26:7f:60:b9:06:88:f9:10:af:b4:dd:69:f0:8f:90:a8:d3:a3:
         5a:f0:67:b1:32:96:19:0e:98:dc:7f:2d:5f:35:67:1f:f4:a6:
         8a:b7:b7:04:69:96:13:f7:56:79:56:3e:b7:70:b8:9a:54:6d:
         c5:99:77:cd:f5:72:8b:99:c0:e6:4a:8d:98:52:f3:00:20:7a:
         5b:a9:17:e8:6e:0e:ce:c8:40:42:36:b6:bb:a3:54:4d:1f:b0:
         93:e2:73:be:d9:68:99:ee:66:f6:00:e9:2f:12:88:69:05:ee:
         c2:7b:4f:f4:d9:36:f8:bf:5a:3d:10:18:79:8f:ad:28:2a:de:
         98:48:71:5d:b8:cf:08:2b:50:d1:6a:f4:c2:a4:f5:a5:3e:b4:
         ee:2f:08:a8:4c:68:49:6e:31:ef:9f:3e:42:77:82:0b:eb:32:
         3d:0d:e8:2e:7e:a6:7a:81:5f:cb:cc:46:c0:f1:a5:a3:a9:93:
         d2:7f:ef:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIw+4b9haG5hpGdgVdizsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw
YjliN2UwHhcNMjYwNzIzMTgwMDQ0WhcNMjYwNzI0MTgwMDQ0WjAzMTEwLwYDVQQD
EygxNjg1M2M2MmM5ZjVkMmM5NmIzYTQzNDgzNzFhODQ3YmVmM2I1NjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGH7yBvZuAYCEyr3/4E+w5UKl9mv
I7DhwPIZQA2WxMaNm0uwQNv7RnF0LlJgWgQANmZz/JDW8dB5XvPPTXA3l2Qjy0yk
VRVEOdItE8oRM98ww8InydmcsqynfGPDv0A6gcanyn+CFJLECdvs4hzkX+JFNF9j
qTbK81U33icHDiEM8SlvpCp90AnRwM8haIdKVSWAnU19wuJqZCYkqwHLp4w0UF9r
Vdz1OBTDdcsfafLlnAzXTlLD6/VgXs4qDz4ym7shecbhz0V7WrafKN5Wi+b+6PIA
MM/OrT/7/S0YNHQDdxCL8LwtpPkVrqVHsSJQjNMdjvA2yC8SzmgBeLkvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaFPGLJ9dLJazpDSDcahHvvO1aMMB8GA1UdIwQY
MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt
MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh
LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV45tpeYH
NOozg53sevjm0QUfcxqpbY+DBwJ3mcB0hGyOc5kgRpz9oq61QGpX4LuLhwCi3R1Y
OLsUSsn+nT0l3r3l4AhMb9ckJn9guQaI+RCvtN1p8I+QqNOjWvBnsTKWGQ6Y3H8t
XzVnH/Smire3BGmWE/dWeVY+t3C4mlRtxZl3zfVyi5nA5kqNmFLzACB6W6kX6G4O
zshAQja2u6NUTR+wk+Jzvtlome5m9gDpLxKIaQXuwntP9Nk2+L9aPRAYeY+tKCre
mEhxXbjPCCtQ0Wr0wqT1pT607i8IqExoSW4x758+QneCC+syPQ3oLn6meoFfy8xG
wPGlo6mT0n/vHw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:28:04 2026 by rpki-client