Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
File:                     ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft (raw, json)
Hash identifier:          objVgri4gNbBWTDUmuvteKDtoLqyQ6+wV8KEtfgjMjw=
Subject key identifier:   11:D9:F9:4D:47:60:4F:81:03:74:0C:69:11:CB:A7:33:50:AA:58:B3
Authority key identifier: 07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB
Certificate issuer:       /CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
Certificate serial:       019F8F7F707EEB4222928FD71C61866B12B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:02:01 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:01 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:01 +0000
Files and hashes:         1: ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl (hash: yal5dhXIdoAeXuemW2JfmZp+6rP7zt6NfkLxYdk2bQw=)
                          2: Ihlb6TMBZzdM2msP85mC6C7Tb9s.roa (hash: C2sKJQtjBRRMbWL99kznod9g3VbH4JLuuFtryMZLOS4=)
                          3: zUx63CcUp4baA3iUErZSKlbOHRc.roa (hash: heT/cGlUMpfy9RzMb4tH36LoY9pPNQCq8//toyP8e8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:70:7e:eb:42:22:92:8f:d7:1c:61:86:6b:12:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072244b8edd116cf58a6713ef7b66f5d3b8f4feb
        Validity
            Not Before: Jul 23 15:02:01 2026 GMT
            Not After : Jul 24 15:02:01 2026 GMT
        Subject: CN=11d9f94d47604f8103740c6911cba73350aa58b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:81:f1:e4:50:f1:e1:65:fd:57:ea:55:4e:
                    5e:11:be:f4:a3:5c:a7:4f:ee:b0:3b:53:0e:eb:b0:
                    4d:3b:fd:79:e3:34:27:e6:92:f6:b8:f4:9d:ed:f0:
                    57:1a:d1:79:dc:48:5e:4d:8e:63:ec:48:18:69:a1:
                    2a:92:97:7d:1b:36:a4:ee:e3:2d:8d:0a:c1:d7:a1:
                    70:4f:e6:25:82:2d:4b:74:e3:66:71:a7:fb:6a:1a:
                    b8:8b:e6:ff:04:18:3c:f0:c3:0d:3e:d3:ee:0d:69:
                    90:a1:8c:cf:88:f7:29:ae:32:05:67:26:e2:f0:10:
                    6e:74:af:c3:71:2e:f4:b6:db:f4:a9:36:92:5a:91:
                    9c:45:4f:93:38:c9:d2:ab:0a:74:bd:01:91:bc:ca:
                    3f:3e:f9:de:ef:2b:25:be:d0:f8:bf:17:27:35:dc:
                    5a:a5:4d:cd:59:93:94:ae:a7:87:e7:f0:bd:e2:99:
                    3b:1d:9f:f9:d7:95:d5:fa:83:d5:dc:17:ce:91:9e:
                    c9:3d:bc:e8:59:a1:6e:fb:d2:20:d4:b7:e0:ce:7b:
                    90:74:a3:b7:12:2c:7e:b2:9b:b3:03:71:19:7e:cc:
                    cc:4f:73:9e:a4:de:88:75:2d:fc:1d:b6:a5:62:26:
                    34:91:44:17:22:ec:9c:00:c8:1b:75:de:e1:e3:cd:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D9:F9:4D:47:60:4F:81:03:74:0C:69:11:CB:A7:33:50:AA:58:B3
            X509v3 Authority Key Identifier:
                keyid:07:22:44:B8:ED:D1:16:CF:58:A6:71:3E:F7:B6:6F:5D:3B:8F:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByJEuO3RFs9YpnE-97ZvXTuPT-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/ByJEuO3RFs9YpnE-97ZvXTuPT-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:8f:62:d6:20:b7:e3:e3:fc:bd:e4:4c:37:0e:25:fd:c2:
         c2:e4:0a:e4:bf:33:b1:89:31:2b:c6:7e:13:73:b0:c8:81:b5:
         44:b4:b9:42:82:3d:d4:b0:e6:c0:fd:44:ae:cc:6b:c6:ae:ef:
         40:13:c3:57:fb:0b:e4:29:9e:d5:18:fd:db:a3:b3:69:99:33:
         26:c6:df:26:ff:11:b8:df:46:a1:c8:b9:d9:65:66:cc:4c:1a:
         7b:40:7e:72:91:f0:eb:d4:6b:ef:25:25:a1:a4:f0:54:fa:2d:
         6b:61:f7:60:af:78:64:04:97:49:b0:1e:17:cd:5d:e6:8b:40:
         93:4c:04:35:e2:7c:ca:f8:bb:a3:cd:ba:64:11:ea:14:2b:9d:
         53:99:91:17:d3:15:a1:09:33:10:6c:b0:f0:59:71:7b:69:4e:
         d4:fb:5b:07:74:0e:c7:23:9d:93:20:b9:1d:49:1d:a2:92:74:
         26:22:35:fe:7d:4b:3e:a5:e5:d4:b9:5d:40:f8:ef:fa:fd:86:
         ea:45:33:b9:90:4d:cf:eb:91:51:3c:76:ea:e6:b2:c8:39:72:
         8c:26:38:f8:f0:f6:2c:78:97:1b:46:ba:ee:0c:27:46:18:9b:
         5a:09:3c:3d:44:b1:28:c3:7c:5a:58:0f:72:cc:ac:f3:c7:94:
         fe:ba:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:35 2026 by rpki-client