Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File:                     3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier:          lTmJKadZrJx6BPzvIJnKbWWwhGiPLuSpMVdkz+afvJM=
Subject key identifier:   8B:FF:42:43:3D:E2:AF:AD:0D:99:2E:F5:20:00:E2:65:F7:1D:E8:14
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer:       /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial:       019F8FEC9142BDB8E42A56AFC82DC0A28A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 17:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:13 +0000
Files and hashes:         1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: awiwLCUFaDGCHf8m5dRWiHZGhDKhaluqbAoJLd9c2hc=)
                          2: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (hash: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=)
                          3: 6qswnHV8JvW6cu6cSwBLoqp6-Ng.roa (hash: IUM2z/m3IjX5AfUXwWnD2PsPO+D6A7StpRGqMV8Cn/Q=)
                          4: c-q-1btZT4jua2JDzrYBPweRMfo.roa (hash: T3Vq03V1v96UVyz+QAoFvPmYD+d9eRiyCI2mm1ddpyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:91:42:bd:b8:e4:2a:56:af:c8:2d:c0:a2:8a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
        Validity
            Not Before: Jul 23 17:01:13 2026 GMT
            Not After : Jul 24 17:01:13 2026 GMT
        Subject: CN=8bff42433de2afad0d992ef52000e265f71de814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fc:01:ed:3a:c3:c1:33:20:64:5e:d2:36:0a:
                    7e:f2:88:c0:4d:f9:db:b4:f8:13:5d:22:ea:43:fa:
                    20:3f:57:f9:9f:46:f3:be:87:6f:8f:58:de:50:35:
                    70:24:05:a1:14:dc:ea:e2:26:5d:f0:50:85:d4:f3:
                    8a:3f:e9:69:29:c6:b9:94:66:65:b6:da:f4:6d:f4:
                    c8:bf:44:fc:a6:d1:b6:95:f8:02:9b:48:8e:89:05:
                    ec:59:f9:c7:8e:ae:9b:21:ea:36:30:45:b6:c7:99:
                    21:63:32:9a:27:e8:cc:d9:49:12:92:be:26:ec:c1:
                    8c:6f:83:80:b9:bc:5e:d4:8e:37:8f:4b:a0:3a:a7:
                    4d:0c:ae:0c:94:b6:01:11:2b:5f:6a:77:46:18:c0:
                    4f:56:6d:2f:d6:2a:f7:5b:71:a0:6d:d5:a4:9c:02:
                    dd:4e:bd:13:d5:11:ec:0f:7c:cc:e6:06:00:53:81:
                    6a:a6:96:51:4c:b9:e1:f9:af:b3:80:c1:e9:15:5d:
                    1f:79:71:9b:85:20:c0:b5:7c:ca:d6:a3:88:77:03:
                    c7:35:96:a2:a0:4f:8a:8e:a4:6b:93:9b:6b:95:9c:
                    d5:91:c4:7b:ea:a1:64:c1:ac:e0:b3:2f:e1:58:f1:
                    2c:df:32:3f:5a:fe:e0:2c:c5:0b:9e:59:df:04:8c:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FF:42:43:3D:E2:AF:AD:0D:99:2E:F5:20:00:E2:65:F7:1D:E8:14
            X509v3 Authority Key Identifier:
                keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:cf:de:4c:b0:20:06:c3:12:b6:ff:f9:be:09:c6:cf:b2:25:
         6f:19:47:de:e9:25:de:26:ee:7b:39:dd:6e:56:91:08:74:79:
         3a:58:c5:32:1e:ca:81:1d:e4:ca:22:01:41:40:cf:81:b8:f0:
         1c:8f:24:3e:3c:71:91:88:d4:3d:9d:8f:4b:96:e5:e3:e9:00:
         bc:36:82:fe:bb:76:c8:3f:33:bd:9b:32:61:0f:57:29:5c:0c:
         e8:e0:b2:53:a6:bc:83:a9:b1:83:87:6e:22:e7:a9:b6:50:00:
         b7:b8:96:d5:44:93:b5:71:c8:52:cb:6e:cb:23:57:c5:28:56:
         aa:66:10:f0:48:64:74:d7:f4:1e:92:d3:10:05:f6:92:36:57:
         64:2d:d0:f9:ce:b2:cf:2b:8f:51:f5:21:22:85:b6:c1:8f:69:
         bd:57:09:1a:f3:cc:77:cb:15:4d:98:0e:51:8c:8f:a9:c8:df:
         fc:5e:e9:48:22:a9:2f:5b:fe:05:4a:1d:3e:9a:7c:61:04:7b:
         7e:d5:0e:5c:6f:f1:93:62:12:f7:ac:3c:82:43:6f:62:5d:91:
         f5:53:3a:86:66:c4:18:5d:98:83:be:93:9f:f1:2a:e4:f8:85:
         f9:e8:42:e2:5c:f0:c8:1f:69:4d:5c:8d:31:75:de:98:ee:70:
         51:45:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:51 2026 by rpki-client