Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File:                     3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier:          cm1TQj9bNjXh01JoBdfxYopwRVzeHWSjm4dCTP45jz4=
Subject key identifier:   32:03:03:1F:8A:DD:17:F8:D7:C9:94:D1:F5:07:FE:15:4D:FD:ED:F7
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer:       /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial:       019F9090C54E0D599271AF7CA8BF1735165D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number:          097F
Signing time:             Thu 23 Jul 2026 20:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:34 +0000
Files and hashes:         1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: 2GX6pmKvG/nhOIxAEf2jkHlgGLrU0qUBl2fkXSbc3y4=)
                          2: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (hash: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c5:4e:0d:59:92:71:af:7c:a8:bf:17:35:16:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
        Validity
            Not Before: Jul 23 20:00:34 2026 GMT
            Not After : Jul 24 20:00:34 2026 GMT
        Subject: CN=3203031f8add17f8d7c994d1f507fe154dfdedf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:01:aa:e4:92:93:9c:c7:a0:89:b7:aa:a8:
                    f0:02:85:a7:f4:3f:7a:61:47:57:29:45:d8:92:79:
                    21:1a:09:84:07:52:51:6e:1d:3e:fe:d0:35:1a:71:
                    a5:11:48:3c:f4:27:60:21:1d:9c:40:51:32:1c:10:
                    77:7c:5d:c6:a4:e0:bc:79:eb:44:93:df:17:52:24:
                    1d:7d:bd:6a:a3:86:20:97:72:b1:8e:9d:12:f4:c6:
                    85:d2:7e:59:d1:92:39:00:65:b4:52:78:e1:b7:df:
                    37:ee:56:48:36:08:87:61:3b:7c:00:7b:63:49:0e:
                    c0:49:d7:0c:62:33:5d:00:a0:08:2a:96:60:3c:73:
                    b7:7d:a1:b8:5c:e0:e5:ba:79:c9:c9:7e:af:2d:1b:
                    6d:2a:f5:58:73:a0:86:ed:ac:a4:0c:5a:26:e1:80:
                    21:50:ae:39:7d:1c:d8:11:06:12:56:fb:41:ec:5d:
                    5a:d3:48:f0:2f:f3:6a:58:e7:fc:28:b5:50:7c:25:
                    2b:ca:c2:e0:6a:4e:06:10:11:26:8f:09:54:d6:dc:
                    b7:b4:b3:74:5c:78:13:b4:34:6e:4a:5d:1f:7d:6f:
                    39:42:b1:5e:6c:04:67:eb:3f:5f:9c:5c:7b:6e:b7:
                    21:60:27:67:af:35:57:3c:33:c2:19:30:d5:69:a8:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:03:1F:8A:DD:17:F8:D7:C9:94:D1:F5:07:FE:15:4D:FD:ED:F7
            X509v3 Authority Key Identifier:
                keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:24:3f:c4:34:23:45:73:02:35:1d:dd:d2:90:6c:e5:23:7c:
         89:ab:49:45:e8:2c:d8:f7:6d:f8:50:de:8b:d5:0d:15:a7:a7:
         3d:fb:23:0c:1a:bb:0a:b7:84:2d:9d:d7:54:e6:25:dd:e1:23:
         40:26:57:b7:bc:97:86:96:e7:c3:85:87:ba:71:21:9f:4b:91:
         ab:fd:33:80:04:12:f5:a3:4c:e1:ee:07:ab:60:ce:f4:ec:7e:
         fd:70:74:99:70:04:1a:4a:18:4f:ad:ba:7c:a7:1c:4a:ed:8f:
         d2:0e:3d:76:70:a0:cb:16:14:7e:75:1a:37:95:d5:37:9d:37:
         4a:6f:86:b2:25:04:75:43:9c:a7:b0:e8:88:13:1d:e7:ad:77:
         90:db:0b:97:60:e0:5b:4f:dd:76:c9:18:8a:f3:97:7c:9c:f7:
         74:72:aa:99:30:9f:e8:7b:28:65:d9:77:8c:4c:ee:c3:6d:22:
         c5:46:02:ed:1d:10:85:02:e6:f4:81:0c:df:56:2f:f4:dd:1e:
         41:47:a2:6a:b4:25:d0:e0:7c:70:c5:d1:29:18:44:01:cc:f9:
         94:eb:56:f4:0e:03:d5:15:6e:f4:16:4f:be:3b:c9:5f:a3:75:
         01:28:f1:33:0a:d4:53:4b:dd:92:55:60:26:63:e8:21:25:ef:
         44:c9:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:53 2026 by rpki-client