Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File:                     POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier:          P+iXLyYL6MSjy4CJ2Jly+zqr0BZ5aqBcLhPKixRmGos=
Subject key identifier:   3B:BC:4E:26:EB:42:7A:79:71:06:7B:7E:9B:60:C9:33:F6:C7:B8:0F
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer:       /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial:       019F91354BB92B205424C5F1342157840AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number:          1222
Signing time:             Thu 23 Jul 2026 23:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:16 +0000
Files and hashes:         1: 59JIOcrvwaeo-sYFo7t-MHws0gw.roa (hash: 4M2J02zr2QMxD8HQmUQji1N30RyT0kcqU00uheMc840=)
                          2: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
                          3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: POkIkPUPkfNd2sPHscsSPhWVro3i/b/zEYLjXerGdPs=)
                          4: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:4b:b9:2b:20:54:24:c5:f1:34:21:57:84:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
        Validity
            Not Before: Jul 23 23:00:16 2026 GMT
            Not After : Jul 24 23:00:16 2026 GMT
        Subject: CN=3bbc4e26eb427a7971067b7e9b60c933f6c7b80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7c:88:18:bb:11:60:62:f5:f7:97:7d:57:22:
                    ea:84:11:54:a7:88:55:98:c5:3f:06:0c:80:f9:f8:
                    ca:44:0b:d7:e0:b0:43:4a:bc:ff:6c:77:10:95:6d:
                    44:a1:51:2b:8f:23:d5:cb:54:96:0c:ff:f4:53:80:
                    4d:e0:2e:29:be:89:f3:0d:4c:06:ae:11:ba:b1:23:
                    5a:a0:ff:5d:bd:e0:24:ea:87:35:ea:d8:ff:57:38:
                    c7:6f:f0:68:b6:94:fe:ad:38:0b:6c:0f:7e:bc:f7:
                    fd:1b:0b:eb:2c:39:f2:e6:76:a0:c1:02:60:8f:4c:
                    4b:76:6e:cf:dc:c1:56:43:95:9b:d9:77:fa:99:7e:
                    20:31:88:ea:c4:3b:46:17:67:6d:23:66:5d:fa:ba:
                    9e:3f:44:e1:c4:4d:2f:da:87:ce:e9:93:3f:23:78:
                    84:47:b4:4a:cf:ef:f0:96:53:a7:9f:eb:34:4b:e8:
                    4a:c6:ae:ff:06:99:13:a7:3d:e9:3a:dc:03:92:39:
                    84:2a:ab:c3:5d:53:00:ff:22:52:75:ce:ac:60:3b:
                    a6:82:b6:08:53:1e:be:f2:48:4d:df:32:ca:54:5e:
                    14:48:49:53:22:90:ca:42:eb:03:42:0d:61:7b:31:
                    9f:a0:82:a9:09:5f:5d:98:b6:1e:31:44:24:9f:03:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BC:4E:26:EB:42:7A:79:71:06:7B:7E:9B:60:C9:33:F6:C7:B8:0F
            X509v3 Authority Key Identifier:
                keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9c:c7:bc:ae:22:39:f9:63:99:cf:9f:33:70:e6:0b:17:01:
         df:bb:59:6d:05:77:c4:2e:48:c2:03:db:9a:c4:cf:cb:9d:9e:
         dd:29:9b:a0:22:d5:6a:00:08:bf:20:3d:e8:53:12:97:0f:fd:
         37:91:bf:ee:80:2d:78:e2:6d:5e:5a:f4:fe:48:28:08:4d:a1:
         a1:3e:e4:ab:23:90:d2:49:33:bb:b0:27:d3:21:1b:61:d3:70:
         1a:39:7d:c2:68:33:89:c4:19:20:73:c9:c1:b4:d5:06:65:5c:
         f1:fd:10:4d:c0:4c:4c:32:e9:d7:42:76:96:a4:0b:d9:ea:0a:
         50:96:60:d3:07:71:8d:cf:0d:e9:f6:96:41:16:b2:be:90:33:
         23:0e:a0:1b:90:73:99:8b:d7:97:fb:49:10:50:8b:01:66:a2:
         12:ce:56:57:ee:65:f8:1d:55:70:a4:e8:c0:bc:b3:85:b8:ff:
         d4:7f:1c:02:16:45:11:d3:54:5f:2c:72:b3:84:3d:b1:bf:03:
         11:b2:51:9c:25:64:c0:d8:54:d6:34:5f:8a:31:6e:f6:67:40:
         97:78:d0:29:df:5c:a9:b9:b1:67:d3:68:2e:80:fd:fd:c0:db:
         a8:36:ea:f8:1e:48:1d:7b:25:f0:a6:a3:50:79:7e:24:9f:ec:
         d1:74:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:39:33 2026 by rpki-client