Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
File:                     3I_H9_qQqYNsGrKgzyvizXKgzN0.mft (raw, json)
Hash identifier:          TqkAC3JYEaM7x/fLwgt5xNQ3LjA4t4VpmEfyqf/+eNw=
Subject key identifier:   EB:A1:24:BB:19:E4:40:A2:66:D6:86:F5:02:1D:41:36:14:6E:F3:80
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Certificate issuer:       /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial:       019F90C76FF4EBD567658E17BB9F1662945E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
Manifest number:          AD
Signing time:             Thu 23 Jul 2026 21:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:16 +0000
Files and hashes:         1: 3I_H9_qQqYNsGrKgzyvizXKgzN0.crl (hash: sMnmwuIltwmlj1qZaMpmznY8FZGaleRy3YyP7CTZ/+4=)
                          2: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (hash: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=)
                          3: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (hash: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=)
                          4: RKccBzAjfAgdOH1QdushhT7AryI.roa (hash: A/QzLDENuO4yPz22/8nn+nO2J9VEx9TuDbqFSEgKIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:6f:f4:eb:d5:67:65:8e:17:bb:9f:16:62:94:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
        Validity
            Not Before: Jul 23 21:00:16 2026 GMT
            Not After : Jul 24 21:00:16 2026 GMT
        Subject: CN=eba124bb19e440a266d686f5021d4136146ef380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:ed:b2:27:ac:ef:8e:fb:77:06:22:ea:98:
                    6a:b8:a1:4d:39:74:27:98:f5:a1:6f:9c:5d:e1:d4:
                    0f:a3:7a:49:7d:8d:70:7a:43:c7:32:97:31:af:4f:
                    f2:3c:2c:5f:3f:36:4a:1b:ba:09:2e:e1:00:6e:1d:
                    b7:34:56:8c:5d:7f:22:04:90:62:b5:7f:ed:56:e7:
                    d5:db:c5:50:a3:0f:fc:fa:7b:a3:e4:1c:78:9b:dc:
                    1e:24:34:10:fc:e9:6b:3f:7e:70:dc:35:ad:2e:0c:
                    e5:09:ca:3b:b2:d2:58:84:b2:8f:8e:28:10:02:d1:
                    68:6c:9a:83:64:0b:b2:37:bf:d9:21:12:c0:85:cf:
                    e5:f8:5b:b7:26:e8:70:3c:21:5c:87:c2:b3:3b:29:
                    6f:2f:ca:45:f4:21:e9:68:9e:de:09:fd:72:9d:2b:
                    c6:d8:a3:71:95:9b:9c:f4:f4:46:64:70:9d:e3:66:
                    3f:48:02:0f:31:f0:21:7c:41:c8:81:5a:bf:19:bc:
                    e3:db:a4:80:52:c7:26:27:a8:3a:43:4c:45:6b:1c:
                    0a:bf:11:06:0c:2c:65:3b:42:61:ca:9d:9a:d1:5d:
                    41:5a:e9:28:f4:84:26:a9:e6:ca:78:5b:f7:fc:93:
                    75:2a:ce:b3:dc:5f:f4:a2:b2:71:62:7a:32:05:57:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A1:24:BB:19:E4:40:A2:66:D6:86:F5:02:1D:41:36:14:6E:F3:80
            X509v3 Authority Key Identifier:
                keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:54:ab:9b:4c:73:d5:82:c2:f2:41:ad:82:bb:f6:93:95:
         59:a2:91:61:fe:c6:16:67:6c:cf:1f:b2:ce:12:e3:2c:bc:59:
         e3:85:05:13:0c:e3:6a:04:33:73:a0:88:c8:0c:b5:9e:10:3b:
         75:a1:3f:96:b1:ae:65:88:e9:65:b5:cd:76:b1:15:f0:59:53:
         ae:2b:cf:35:69:82:ff:55:94:86:df:b8:a2:d0:c4:f0:7a:80:
         18:86:5b:a8:35:82:33:0b:b9:20:fb:4a:c0:57:f6:e0:2d:9d:
         84:95:ee:de:24:13:3f:2d:9b:96:b2:2f:f7:71:a0:f3:a4:8e:
         39:cc:c0:3b:62:cf:93:ce:8e:71:ec:b5:01:45:86:ba:3d:bb:
         b4:87:c8:95:d4:d3:bb:5b:7c:6f:d6:52:e1:5e:02:e5:32:58:
         13:47:10:34:e4:1f:4d:1d:6f:8c:8e:c6:9e:a3:f2:ed:12:77:
         dc:2c:13:ef:dd:8a:62:01:ba:98:a2:35:2d:dd:bc:29:2c:56:
         29:e2:c8:a9:25:69:b0:96:b4:b4:3e:7b:19:28:a3:4e:44:88:
         1b:4c:a9:5a:96:6a:cf:6d:2d:55:3e:a2:42:35:38:9f:e8:93:
         db:b1:4a:62:fb:a4:d9:b3:a2:d9:c0:9b:61:ff:d2:d1:58:a4:
         39:8a:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:22 2026 by rpki-client