Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File:                     3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier:          MePHRP2pKStBa79Iw4c7AtllucXI8RX0/Wq9cbApcAo=
Subject key identifier:   71:DD:58:36:3A:1D:75:BF:E9:08:8C:14:D3:8F:1F:99:AA:4C:22:91
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer:       /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial:       019F90C80564473F371ED584EB24D65F1571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number:          19E6
Signing time:             Thu 23 Jul 2026 21:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:55 +0000
Files and hashes:         1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: iiDsqY2aAZbdJsWH5Frh1e1BDIYBq5mLh0VOu0mye0E=)
                          2: IMNGeAH2RRBE8orK0TLke0HPxKQ.roa (hash: e4rxqBMgfnAkGyLI8Cggr5KhboGpBtVTFvPT4BNFaIw=)
                          3: oRUzmPVMVYzpNrzGxH1BooLT378.roa (hash: uCcKGYmN/9GuwRuNNCgcYsC9Ba96kMPVmQDqSWP2004=)
                          4: w4CVyL2U79HSB7wONrXYugmX-AM.roa (hash: yBF78znISqvhJ/sR7b39y1Qr+HsHjN0eWMU8QBarpaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:05:64:47:3f:37:1e:d5:84:eb:24:d6:5f:15:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
        Validity
            Not Before: Jul 23 21:00:55 2026 GMT
            Not After : Jul 24 21:00:55 2026 GMT
        Subject: CN=71dd58363a1d75bfe9088c14d38f1f99aa4c2291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:86:ba:67:23:42:ea:7a:2b:34:10:85:95:
                    5a:b1:4e:7a:de:7e:15:31:40:03:41:b3:13:dc:f4:
                    dc:fd:bc:07:09:93:06:5b:34:ed:45:6f:df:d3:5b:
                    21:20:18:40:cc:94:36:04:8a:88:5f:ec:18:aa:f0:
                    9b:22:bf:e2:77:df:ce:a9:23:ff:ca:e2:31:ba:67:
                    c4:bc:cb:d0:d4:96:f8:3d:4d:66:de:f1:4f:66:95:
                    7e:81:e4:2c:fb:86:80:43:13:65:d4:88:c2:e5:9e:
                    f5:59:42:4d:3a:0c:f6:f3:ed:fd:88:b4:bc:2e:e2:
                    f8:d9:ef:0c:71:dd:91:5d:b3:56:ca:5f:64:b0:b6:
                    9a:4a:fa:b5:b0:3c:23:13:3d:86:bb:d4:f6:55:9e:
                    92:50:26:29:62:d2:be:88:ef:00:1d:4f:d2:2b:2f:
                    43:40:45:c3:82:b7:4b:a6:0b:c9:b0:d3:58:23:07:
                    77:82:18:2c:92:d6:b3:90:cf:5c:59:0e:21:da:c8:
                    37:8a:6e:6c:2e:8a:a9:2b:03:cf:0a:20:90:f7:9e:
                    49:59:ed:1c:14:1c:e5:16:38:a4:2b:cd:b5:52:fa:
                    3c:58:ee:25:73:64:75:6e:11:62:f2:21:a2:67:34:
                    74:20:66:eb:0c:29:40:ff:b6:1e:12:c4:bc:dc:3a:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:58:36:3A:1D:75:BF:E9:08:8C:14:D3:8F:1F:99:AA:4C:22:91
            X509v3 Authority Key Identifier:
                keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:39:5a:61:80:8c:d9:89:47:51:c9:a0:f2:d7:a2:27:b5:a9:
         7c:8b:42:32:46:2b:b3:d1:64:b6:be:21:93:32:a4:f8:bf:d2:
         e7:e4:ef:8e:2f:4c:20:71:86:bf:ec:17:7d:24:c7:b0:a2:df:
         c5:62:a9:cd:15:18:d7:e3:73:07:29:63:6e:e0:7c:d5:a7:3c:
         aa:24:8f:a6:9a:83:ff:98:9e:db:94:2e:b2:b5:cc:9a:0f:4d:
         09:04:2c:3e:bf:f5:06:b1:ca:4d:5b:e2:94:d3:92:df:0c:05:
         ad:21:d5:2f:03:9a:71:3b:d9:fb:6e:35:f5:56:54:a0:59:85:
         18:ee:43:15:30:63:81:18:f7:7e:c2:9b:d8:da:97:4e:80:54:
         92:bb:40:d7:cd:94:7e:ad:f4:f5:29:5f:59:6a:45:e1:91:71:
         b8:73:ee:c2:0d:b2:d0:10:c5:86:5b:48:65:97:69:4e:f5:c0:
         a5:35:d2:4a:d3:e3:90:a1:e0:12:2b:5d:ba:3d:8c:ff:06:e9:
         e1:4e:6d:94:89:2b:f7:c9:0f:fd:3a:66:0c:ca:19:98:91:b3:
         54:71:75:63:1d:e7:66:98:c2:9e:a9:24:f2:26:29:67:08:10:
         cb:e6:96:c4:9c:07:2d:bc:9f:8f:d7:49:29:41:87:5c:7a:24:
         b0:ea:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:52 2026 by rpki-client