Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          UicnmQ+Xt22lQjHKnulCgMZ8amosBK0lr0y7t9BiVoQ=
Subject key identifier:   F1:6E:B2:50:FD:D0:EA:AE:0C:DA:C1:BA:5B:4A:0C:FB:53:A5:C2:B3
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       019F905AA042FA582713684FDA2E82F494EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          191B
Signing time:             Thu 23 Jul 2026 19:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:26 +0000
Files and hashes:         1: 2VjRyY35srd4tFZwYR3n2JNFpTM.roa (hash: KVtq1ksbn0eFzWJ+vieJNzHVkLQs/x4Zv2yLi0iRHw8=)
                          2: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: ZltA03obWr2S7VmObpcVWQySMinqlJ0aedr+rjYzaG4=)
                          3: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (hash: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ=)
                          4: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (hash: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:a0:42:fa:58:27:13:68:4f:da:2e:82:f4:94:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: Jul 23 19:01:26 2026 GMT
            Not After : Jul 24 19:01:26 2026 GMT
        Subject: CN=f16eb250fdd0eaae0cdac1ba5b4a0cfb53a5c2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:4d:20:f8:2d:45:19:0e:c7:a5:07:7b:ed:
                    32:89:5d:20:8c:8b:cf:5a:0f:16:ae:3d:72:62:5b:
                    a4:58:d3:8b:1f:84:14:15:de:d5:d7:03:9f:6b:41:
                    61:c7:6d:32:2b:d0:e9:e9:f9:4c:a6:84:97:e7:4b:
                    88:6c:9e:d9:44:08:65:4b:47:5f:c7:31:ee:89:7c:
                    57:83:8c:2b:a5:2d:67:d9:81:68:cb:11:c8:42:b2:
                    b8:b5:43:35:fe:9f:a7:0b:11:c2:5d:25:60:13:30:
                    81:30:26:0a:e2:55:0c:6a:ef:83:cf:f2:7e:35:ed:
                    d5:41:ea:21:af:88:f6:81:45:f1:a2:80:fa:1f:fc:
                    c7:28:3d:ef:70:be:1b:76:5e:72:d3:13:0e:5e:33:
                    ae:60:39:d4:ab:29:1c:03:db:17:e2:ef:2c:93:c8:
                    d8:13:6f:c2:56:83:70:6c:f2:dc:43:50:97:6a:2c:
                    b6:da:a2:75:08:99:a6:52:13:4a:f8:66:6b:f7:04:
                    fe:53:a3:13:5e:95:a7:13:86:17:ea:95:59:72:c0:
                    f4:1d:6c:80:f4:d8:9e:31:cc:7c:ef:18:02:1c:5e:
                    9c:4e:f9:ee:c5:f4:55:43:0f:0c:eb:09:c8:8e:0a:
                    98:98:4b:70:95:c3:80:9c:04:3f:d5:8b:9e:99:3b:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:B2:50:FD:D0:EA:AE:0C:DA:C1:BA:5B:4A:0C:FB:53:A5:C2:B3
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:c9:ce:6c:2e:d7:27:f0:e7:b6:08:87:d9:30:e8:8d:90:
         cf:79:37:5c:25:fe:38:36:bd:7b:5f:41:1f:df:23:19:a6:f1:
         6a:3b:fd:6d:c2:76:c7:d8:04:60:7d:4a:d9:9f:ef:05:60:53:
         35:05:0b:ea:ab:f3:53:13:06:4b:59:5a:94:18:92:ff:60:69:
         0c:6d:69:8d:9b:e4:b1:fe:08:7f:98:ca:f4:f8:dc:64:79:2d:
         ab:cf:0b:fa:07:8b:b6:cf:01:65:68:ef:9f:7a:35:c4:57:c7:
         b7:62:ae:f1:ab:c5:e4:49:d2:78:7e:a3:ff:b8:6e:53:d5:09:
         a3:21:5b:bc:fb:5c:fb:5a:df:72:ae:ae:27:79:d8:f8:5d:e7:
         d5:94:8f:80:67:2b:a0:c0:83:9a:86:be:35:56:d0:ee:eb:a8:
         b3:7e:f8:75:03:d0:7a:52:22:d6:a6:ec:56:84:c4:85:5f:50:
         19:f3:0f:8a:9c:81:ad:d5:57:6f:ee:cc:e5:5c:69:8e:5a:24:
         92:85:94:ed:0e:f6:d5:0b:b3:99:c9:7f:da:5c:a2:a8:47:43:
         f3:de:b1:ac:a2:a7:74:43:07:ee:ed:1e:c8:95:7b:41:8a:b5:
         0f:d9:1c:14:dd:16:47:87:09:6d:02:42:3e:f9:d7:3e:dc:5a:
         e6:59:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:24 2026 by rpki-client