Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
File:                     dvknpsZ58qd-NF9680OQgutLrJ0.mft (raw, json)
Hash identifier:          KmWupuYrupGd+1J+E2IqxpeP3H6XQYmcEe5WsdCcEl4=
Subject key identifier:   82:7F:9E:35:61:3B:C7:5E:4A:01:98:37:82:36:49:8F:3A:26:61:DF
Authority key identifier: 76:F9:27:A6:C6:79:F2:A7:7E:34:5F:7A:F3:43:90:82:EB:4B:AC:9D
Certificate issuer:       /CN=76f927a6c679f2a77e345f7af3439082eb4bac9d
Certificate serial:       019F8F7F2B2583565317EB16780C8FC1D8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:43 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:43 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:43 +0000
Files and hashes:         1: ZMk0TcH_sU0I9-xUq2dEjh37ixk.asa (hash: 0j+vzvHuC8tv7A5MzE2hAe26t/2z6R0x5UsinsDU01w=)
                          2: dvknpsZ58qd-NF9680OQgutLrJ0.crl (hash: Ur+Xbpb2I5aSwml8QPy28xTg3CFWs14daL9XdxYHNus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:2b:25:83:56:53:17:eb:16:78:0c:8f:c1:d8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f927a6c679f2a77e345f7af3439082eb4bac9d
        Validity
            Not Before: Jul 23 15:01:43 2026 GMT
            Not After : Jul 24 15:01:43 2026 GMT
        Subject: CN=827f9e35613bc75e4a0198378236498f3a2661df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:e4:6f:2f:b0:0b:2b:a6:37:1e:73:0f:08:
                    f4:97:b2:bd:1d:f4:64:93:84:b6:9a:98:13:d9:4b:
                    bf:35:12:3b:59:86:23:2c:75:8a:a8:27:c1:81:bb:
                    0c:df:d6:a7:fe:f7:20:61:1a:aa:85:80:55:6b:2b:
                    62:1f:a1:14:56:aa:b8:11:75:c0:a5:79:53:60:35:
                    57:34:5c:08:0f:fa:63:ad:a7:db:1b:58:52:ab:d8:
                    ac:fc:4b:48:3d:f8:3e:24:d9:cc:d9:fb:a5:00:c6:
                    d5:81:41:cf:bd:38:43:d5:93:77:7e:2f:6f:62:be:
                    69:fd:a4:0b:9d:94:c6:37:54:8d:3d:ca:c0:b5:69:
                    cb:d4:6b:66:b3:fb:0a:94:03:7e:0b:3c:94:f9:7b:
                    d2:32:9a:a0:80:15:91:47:42:64:78:ad:b0:4c:51:
                    bf:38:49:56:5d:32:e1:af:1d:bb:29:09:37:a0:51:
                    05:66:d7:15:cd:bc:c6:84:fe:44:c6:6a:fa:99:38:
                    e4:98:b5:2c:10:f4:8c:63:b9:0f:03:1a:cc:54:5a:
                    c1:f8:a0:25:3a:3e:fa:06:f3:a5:08:d6:0b:93:99:
                    d8:eb:70:f4:30:8e:95:ec:91:fb:23:05:5a:44:04:
                    7d:e6:d5:c0:5d:cf:d0:56:f7:ab:32:e0:cc:c6:f6:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7F:9E:35:61:3B:C7:5E:4A:01:98:37:82:36:49:8F:3A:26:61:DF
            X509v3 Authority Key Identifier:
                keyid:76:F9:27:A6:C6:79:F2:A7:7E:34:5F:7A:F3:43:90:82:EB:4B:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1d:02:42:a5:95:ce:e6:c2:e1:3e:cc:ba:55:1c:00:e2:74:
         c4:23:dd:ff:41:a7:a0:15:49:ec:c9:50:87:05:6b:30:42:ae:
         cd:3c:ad:cd:2c:bc:07:69:1d:8a:bb:94:39:13:7d:69:16:aa:
         64:34:c7:1c:1e:57:e6:02:a5:30:b9:c4:64:6e:86:cc:9d:b0:
         13:a8:00:6f:32:a3:22:f8:65:80:74:27:32:5d:39:77:b8:a2:
         42:75:1a:10:8b:7e:64:b6:ef:7c:e9:b1:7a:14:91:6e:a4:94:
         ff:62:ae:be:cc:f2:57:29:10:30:3c:0c:7e:90:82:e8:5e:9a:
         1c:1b:c1:e3:5f:80:02:f3:43:be:a8:41:b3:88:a9:e4:d3:8f:
         d8:d2:92:6f:d6:f6:03:c9:c2:51:8b:37:14:10:40:ff:a6:3b:
         7f:94:c6:5e:9d:84:16:c3:51:67:bc:93:56:93:34:ed:cd:64:
         f2:40:92:25:49:3e:7c:6e:26:32:09:92:7b:35:6e:bf:38:0d:
         6f:84:31:0b:92:6e:47:fb:9b:aa:84:6a:1b:d2:f5:9f:49:e6:
         48:c8:29:ea:bc:99:f0:27:23:10:33:84:5b:24:db:e0:23:e0:
         bf:fc:cb:d4:2c:ba:f3:e9:6a:f6:ad:8f:ee:4c:08:28:b4:2f:
         6f:6e:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:11 2026 by rpki-client