Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File:                     3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier:          J7l14Tt5OJcwWmlw/wA/EFhB5tsjtz34G1QLE8vN/5c=
Subject key identifier:   01:B5:42:A9:66:5A:FF:72:64:6C:6D:33:F8:B2:D9:4E:C8:76:DA:E0
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       019F8F473E38FE7746CD29AF21B245017AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number:          187D
Signing time:             Thu 23 Jul 2026 14:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:38 +0000
Files and hashes:         1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: w+YTJ6Oe0yW29rK5GV6DLMydbdn3n7aBA8XHs/Y0iYE=)
                          2: AmRr-NsaiHfyuDev91oo1Zo4i14.asa (hash: flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=)
                          3: FNdC6V014hPt1Cj_9ePfXPj82Z8.roa (hash: me6C5aY++lhd9zOBr03z1dtrXd+vXTlDDm5g9m7Go/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:3e:38:fe:77:46:cd:29:af:21:b2:45:01:7a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: Jul 23 14:00:38 2026 GMT
            Not After : Jul 24 14:00:38 2026 GMT
        Subject: CN=01b542a9665aff72646c6d33f8b2d94ec876dae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:57:40:22:81:b1:be:14:65:48:6f:b4:70:
                    56:02:eb:95:94:29:16:65:91:6e:b0:f6:2a:93:ad:
                    91:c5:7c:29:e3:c0:9b:73:ad:f6:90:8a:9c:9f:1b:
                    99:b3:e3:e8:af:29:37:85:79:50:20:b5:a1:5e:a6:
                    8f:ad:f1:7d:83:dc:cb:75:55:89:ae:4f:d6:d5:7b:
                    1a:23:b9:50:a9:75:80:b4:8b:0f:df:0c:16:0a:92:
                    57:73:a6:67:da:6c:50:66:17:f3:2e:22:29:50:54:
                    92:c5:5d:2d:d8:49:84:03:37:b6:65:72:5c:11:56:
                    d9:92:f1:ce:52:41:83:be:90:9a:08:3d:e2:c5:50:
                    46:c9:ad:19:b0:4f:64:be:a6:59:be:5d:dc:4e:a9:
                    59:98:f5:91:c6:94:d9:f5:ff:2d:8d:c6:22:c9:06:
                    9d:28:64:0b:fa:c0:68:40:39:92:20:97:8a:2d:b1:
                    0a:b8:cf:26:00:87:67:23:a6:e3:54:dd:b1:38:75:
                    b8:cf:98:cf:e6:e9:a7:13:d8:b4:ac:c6:0e:4b:2e:
                    64:f8:a9:27:b7:0f:22:8f:9b:f7:5c:82:49:d9:4c:
                    ef:67:3a:9e:9c:e7:1f:f2:7a:4e:bf:7d:1f:6d:55:
                    28:cc:08:91:d2:de:9a:28:53:57:e8:d6:c2:d3:d3:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:42:A9:66:5A:FF:72:64:6C:6D:33:F8:B2:D9:4E:C8:76:DA:E0
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:79:d1:ec:68:cd:fd:56:c1:ad:b8:de:3c:9e:5e:5b:ef:
         7e:71:39:f5:71:4a:f4:5f:59:74:80:29:52:3b:e4:fd:66:e0:
         ab:64:79:31:df:75:2e:7b:b6:6a:b8:cc:ec:53:fd:ff:55:e6:
         84:dc:66:23:f4:3c:8e:84:8b:a7:62:d0:6f:0e:c3:59:ca:36:
         e4:50:00:0c:62:c9:98:e1:09:64:91:05:9e:69:2f:37:eb:e6:
         1e:4d:1b:82:d1:00:f7:ec:dd:1b:5c:9c:a7:6d:81:6b:ff:e3:
         02:f5:3f:6b:d3:82:34:3e:dc:0a:28:95:6a:d2:98:d7:33:a8:
         0e:7d:ba:ba:32:ac:c9:b5:19:be:2e:ce:f9:5f:b1:83:82:ed:
         0a:94:98:91:35:c4:e3:0c:c9:26:26:ef:19:58:90:eb:be:81:
         59:93:23:8c:bd:54:ef:7d:61:67:32:97:1b:fa:16:a4:fc:82:
         f9:3c:cb:f9:d2:ef:89:1a:7b:98:e8:1e:15:15:52:e8:a9:de:
         1f:4e:7c:f4:51:79:b0:d5:da:c5:ea:e2:41:76:5b:ce:9b:33:
         ac:45:ad:da:61:88:f9:9f:4c:86:5c:bf:98:d5:94:ed:f5:01:
         ac:f3:58:e2:04:3c:c9:92:e1:52:d8:35:89:00:4b:5e:2f:b1:
         2e:c8:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:45 2026 by rpki-client