Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File:                     KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier:          QcOYPoZSKUv2DcU7a0VjJWYT4j5yf+ID9XfFKohrsBY=
Subject key identifier:   B3:41:AB:49:67:5B:39:AA:58:52:29:27:76:75:A5:48:90:7F:36:D4
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer:       /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial:       019F939284E57B08E9D06E9EE4433C0E26FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 10:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:20 +0000
Files and hashes:         1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: 8M957YwEqre2lJjZU7dURWM+rpUedCeinnfjllLwJ3g=)
                          2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:84:e5:7b:08:e9:d0:6e:9e:e4:43:3c:0e:26:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
        Validity
            Not Before: Jul 24 10:01:20 2026 GMT
            Not After : Jul 25 10:01:20 2026 GMT
        Subject: CN=b341ab49675b39aa585229277675a548907f36d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:33:54:1f:57:dd:b3:1e:86:e1:79:ee:7b:
                    39:18:af:51:f1:11:30:04:5a:18:53:0c:5e:69:40:
                    42:05:3d:76:e1:7d:12:37:64:0c:60:a0:47:8d:a5:
                    da:d7:b5:da:65:a4:4d:dc:17:46:59:ee:a5:8a:28:
                    30:63:4a:2d:64:e2:e3:a7:44:91:8d:b5:ab:f1:db:
                    e8:9b:9d:f3:51:51:02:8f:85:77:91:76:97:e9:a3:
                    5f:1a:ec:c9:24:c4:c3:07:7e:5f:ec:b0:98:fc:12:
                    5a:2a:42:46:02:6a:90:61:96:94:80:41:a3:39:fc:
                    66:cc:d6:94:f8:12:b4:8a:c2:11:7a:b7:1c:05:06:
                    62:06:2d:b7:eb:19:be:68:25:b9:95:85:a2:d2:d1:
                    4a:cd:76:78:4f:88:28:ce:87:09:af:f5:62:51:9c:
                    76:7a:a2:3c:0d:55:dc:00:0b:4e:48:89:4d:dd:f7:
                    18:e2:60:94:68:e0:49:1b:bb:13:ec:b8:51:a3:ca:
                    43:ee:28:eb:8d:23:15:8c:cc:bc:25:ec:38:90:e7:
                    08:38:f1:e8:6a:9f:77:9b:91:d9:7f:b0:60:31:82:
                    c8:3d:ed:d0:24:3c:cb:b6:62:93:7d:f6:c5:b7:57:
                    ba:44:2b:b5:19:59:84:14:9c:2c:37:be:1c:f1:45:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:AB:49:67:5B:39:AA:58:52:29:27:76:75:A5:48:90:7F:36:D4
            X509v3 Authority Key Identifier:
                keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:84:cb:a0:29:4e:af:7a:90:44:73:60:56:2e:a0:e8:0f:
         78:30:c8:27:9c:c5:04:96:c6:90:78:ce:a6:ac:e1:69:cd:38:
         13:de:6a:84:fe:49:86:a2:3f:4c:32:8d:48:ee:8d:78:33:d2:
         c4:10:7d:3e:26:22:3e:c7:e6:87:fb:05:f6:7e:bf:16:06:75:
         69:a1:1c:51:a8:fd:b9:dc:56:e8:c7:89:a8:10:2c:c1:9a:5b:
         32:1f:bd:a3:0f:93:4e:94:8d:bf:fd:b7:16:6b:ce:4b:a0:f1:
         6a:78:c8:80:32:69:c7:06:84:27:5f:11:4b:58:5d:19:89:fd:
         f6:52:68:04:64:69:f9:f9:4b:82:0c:1d:19:89:b9:ca:e2:78:
         67:86:41:77:a4:e4:79:0d:8b:3c:72:a7:b4:6b:29:54:13:30:
         43:f2:dc:b8:d9:2e:c2:e3:2c:94:67:6a:cd:ba:16:5d:31:b2:
         21:b0:9d:51:3e:30:3a:c7:23:18:56:c9:4f:c6:08:b4:2a:e0:
         d2:e9:32:87:aa:0a:86:2a:a9:8f:1c:0d:d5:d2:c7:64:41:98:
         da:01:03:f4:55:7e:53:e0:8d:5f:70:95:c3:cd:26:3d:f0:78:
         ae:1c:8f:4a:1b:79:7d:85:74:cc:65:93:6d:3f:b2:a5:b3:d1:
         54:de:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:24 2026 by rpki-client