Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
File:                     Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft (raw, json)
Hash identifier:          +1QlY+r4ZRNgUnexpGCeLlceGcHlvBJsq7jRRtz1nfo=
Subject key identifier:   A0:9A:46:8F:2E:31:02:AF:B0:E5:E3:A1:3D:49:E8:73:C7:CA:53:65
Authority key identifier: 53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
Certificate issuer:       /CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Certificate serial:       019F8F7F0C6356ADC2FFD3C19B4F5C6F892C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:35 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:35 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:35 +0000
Files and hashes:         1: 2QJlNqejeO95FQ8p2esL1ZII6dk.roa (hash: Kke3EbmaVtee0KytWcvPRvyGZmTbAP6OWgdRpSMJlGg=)
                          2: Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl (hash: iYrSbiH9PvNOgSbGnCJ5hdkfpbiZu8JK6E2/sGDj2E4=)
                          3: nKoniYig4vkyih3_6WESbYJo7J0.asa (hash: fz8YeP7u+OnaTRxOC1bRvP7gc/JmHFkV2WeAiv8OI88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:0c:63:56:ad:c2:ff:d3:c1:9b:4f:5c:6f:89:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
        Validity
            Not Before: Jul 23 15:01:35 2026 GMT
            Not After : Jul 24 15:01:35 2026 GMT
        Subject: CN=a09a468f2e3102afb0e5e3a13d49e873c7ca5365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:8a:6b:d4:e8:4c:9b:8e:0f:4e:1f:3f:71:
                    7b:01:64:1a:9d:27:04:47:f4:59:6a:33:aa:7a:c5:
                    2e:f3:6c:8d:19:2a:eb:64:47:8d:9e:87:e2:75:e4:
                    63:aa:f0:05:74:dd:07:eb:ac:d3:c6:f2:f0:25:9e:
                    85:90:ab:8e:f6:09:c3:b2:fa:37:5f:2f:cc:5f:45:
                    b2:0c:31:dc:48:be:d9:4f:92:2b:ef:08:f1:05:a4:
                    6c:1d:7b:23:50:21:ba:53:a8:93:16:ea:bb:d5:e4:
                    70:c8:93:7e:b0:12:cb:4a:53:5f:e8:8f:6b:36:fe:
                    c8:b0:43:0b:3c:9a:85:78:b3:26:ce:94:13:eb:ac:
                    f4:29:ee:f7:2e:82:60:23:00:59:e6:b8:ae:c8:d4:
                    2a:48:bc:ff:07:d0:81:56:55:36:1a:67:0d:c8:15:
                    5c:ff:ae:49:f3:c9:bc:11:cd:8e:1d:15:3e:dd:82:
                    0b:42:1d:e9:24:9f:fc:08:a2:44:7a:09:de:2d:4d:
                    c6:8a:f6:df:f8:2a:a1:80:f5:3d:f0:ba:01:fe:3d:
                    06:65:00:6a:1e:f3:1d:4c:81:a5:9f:84:16:15:74:
                    85:a6:60:d0:e8:33:4e:f9:56:f6:09:d3:4d:af:1f:
                    06:10:af:5d:9b:33:41:f6:8a:1d:08:03:5d:92:ff:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:46:8F:2E:31:02:AF:B0:E5:E3:A1:3D:49:E8:73:C7:CA:53:65
            X509v3 Authority Key Identifier:
                keyid:53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:44:2a:17:e1:70:75:5d:74:d6:e2:f8:71:15:32:8e:52:28:
         d6:21:43:5c:21:32:d1:3e:8c:94:df:23:95:36:36:04:45:1e:
         e9:d0:a6:7c:c0:66:c1:3f:b0:f4:81:a6:01:e1:0e:07:be:3f:
         30:83:c3:a2:34:5a:d0:d5:bd:54:0a:af:16:ce:13:6d:7e:fd:
         76:03:aa:71:54:f1:52:79:b5:7a:2c:af:9a:41:1a:20:bc:2b:
         9a:30:0d:62:6d:20:3a:82:68:9a:0b:3a:02:26:63:e8:8a:d7:
         90:ec:6c:3c:08:36:b5:a6:a1:46:30:7c:81:91:86:4d:f1:8b:
         83:61:ae:73:71:84:90:99:0f:d2:95:05:e1:54:bb:bb:8c:47:
         25:43:3f:f1:40:7e:b5:21:c0:5a:22:a8:e6:af:5d:65:e3:b7:
         21:cb:2d:42:a7:b0:83:72:cf:37:8c:da:79:a3:12:ad:e3:b7:
         76:00:5b:4e:bf:93:10:5a:42:2b:bb:11:20:89:02:eb:0f:cb:
         03:6b:a4:ea:6a:a4:a1:57:b9:d5:c2:55:1a:5e:b9:1b:fb:65:
         74:a7:b1:d0:4e:9d:09:ca:b2:24:43:ea:17:97:44:4c:83:94:
         0a:74:5f:4e:c7:06:0e:c2:aa:ae:75:96:d0:2c:31:23:8c:ce:
         89:a2:62:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:29 2026 by rpki-client