Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
File:                     3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft (raw, json)
Hash identifier:          ji7mGMsrKJxUVQ8w0OYNUGXnLe8CLnRc1Da5atjQ9A0=
Subject key identifier:   19:4C:13:A2:10:0F:CD:20:A5:8C:D9:81:40:F9:99:A4:1F:09:48:BB
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Certificate issuer:       /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial:       019F8F7E73C744AFB4BFD8AE00CB6F3A2CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:56 +0000
Files and hashes:         1: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl (hash: mf7AtOgPPYl6jLQEfBkOk0bnOMpNc3umZKJI7E7viwY=)
                          2: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (hash: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:73:c7:44:af:b4:bf:d8:ae:00:cb:6f:3a:2c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
        Validity
            Not Before: Jul 23 15:00:56 2026 GMT
            Not After : Jul 24 15:00:56 2026 GMT
        Subject: CN=194c13a2100fcd20a58cd98140f999a41f0948bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:e7:1a:c4:bc:ab:29:1a:89:68:f1:21:f7:
                    6b:41:ce:c3:14:a2:f9:3d:ce:e5:40:5c:3c:0c:7f:
                    7b:a4:d1:55:2d:8c:d6:70:02:56:88:a6:7d:94:0d:
                    f7:71:6d:31:66:e0:c8:d4:d5:4e:01:19:b8:44:8a:
                    f7:78:7c:23:3c:cc:9e:e6:ca:08:6b:be:c4:3e:d0:
                    f4:9b:6f:c0:58:e1:45:5d:3c:07:30:41:f2:8c:c1:
                    75:87:e6:d5:cc:84:ae:68:95:46:e9:0c:23:94:48:
                    37:89:9e:ea:7b:3b:f5:e7:2d:bd:35:9a:0b:e0:03:
                    ba:34:d2:ea:47:de:93:06:5a:d3:45:1d:e2:4e:df:
                    35:61:11:ce:1a:fe:62:8d:e1:7f:2a:98:e9:66:e6:
                    0e:40:2d:59:7e:65:c6:b3:3d:93:95:16:2a:68:32:
                    8c:ad:36:a5:77:c2:4c:6a:c4:c7:ae:a5:e1:f7:8b:
                    2f:59:5b:b9:95:07:66:73:f8:20:cc:02:8d:93:d1:
                    33:59:34:68:03:b6:9e:dd:a9:27:0b:8e:4b:70:a6:
                    d2:14:8e:0d:68:67:ae:74:6a:8a:5c:1f:4d:7c:62:
                    0c:34:07:f1:a2:96:63:84:ff:30:8e:4c:3c:c5:40:
                    5e:2e:6c:a6:2f:7b:90:e7:7a:6a:50:c8:3b:fb:fb:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4C:13:A2:10:0F:CD:20:A5:8C:D9:81:40:F9:99:A4:1F:09:48:BB
            X509v3 Authority Key Identifier:
                keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:02:0b:cd:63:b0:db:3b:b6:06:e8:0c:4d:bf:d9:d2:9d:
         1c:60:34:33:89:5d:d8:02:7f:16:0a:6d:44:7e:59:3b:08:e7:
         57:13:1b:3a:7a:f1:c0:e8:a5:6a:ea:84:1c:e4:9d:c3:65:98:
         d0:f0:e1:c2:65:32:cd:da:18:a5:67:eb:52:42:69:e1:f8:d9:
         d7:c0:52:b5:d2:e0:44:2a:df:1a:8e:ad:71:aa:49:bd:e7:44:
         0a:bb:1e:73:eb:48:15:ef:f2:e9:e3:11:76:54:77:03:fe:10:
         e8:65:fb:dc:74:f1:81:4c:c6:32:6c:86:f5:24:60:28:a1:32:
         8e:9a:a0:73:f6:6b:98:d8:11:df:30:cd:18:35:b6:c4:22:19:
         6f:b1:9b:d8:e1:08:ec:ad:56:3a:19:0c:62:0a:97:91:2e:07:
         bb:d6:2d:4e:f0:f2:be:05:3f:d5:81:f2:d9:db:61:fc:ef:f0:
         29:c9:38:8e:76:42:26:0b:30:0a:d7:de:19:e8:c6:52:81:34:
         8a:1d:ca:5f:76:13:3e:0b:14:60:9d:05:d4:ea:21:6e:4a:aa:
         34:46:ec:3e:60:72:c7:3e:54:99:9f:c3:a3:44:d9:02:fc:d2:
         32:63:c7:8d:10:ee:d0:81:a2:88:1d:7a:47:60:14:c9:40:84:
         22:e9:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:36 2026 by rpki-client