Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File:                     3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier:          uuKgKdMCTNFBIuu8SBsTKW70BJR1svUtuRptg3zrZ/8=
Subject key identifier:   BF:20:42:6A:A3:6E:62:63:98:35:86:40:E5:64:9C:57:99:1C:E4:95
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer:       /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial:       019F90FE8406DEC85922C6FDE15898F7A27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number:          1304
Signing time:             Thu 23 Jul 2026 22:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:26 +0000
Files and hashes:         1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: l90bO3atBf1GUUHqVnlld0BDLo7Q8rK1xQ6f8R6hcRc=)
                          2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:84:06:de:c8:59:22:c6:fd:e1:58:98:f7:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
        Validity
            Not Before: Jul 23 22:00:26 2026 GMT
            Not After : Jul 24 22:00:26 2026 GMT
        Subject: CN=bf20426aa36e626398358640e5649c57991ce495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:71:42:e2:46:e0:9e:7d:3e:8a:6f:26:15:
                    5d:24:d7:a7:0e:81:ff:1f:12:3a:93:cb:d2:78:aa:
                    8f:98:78:bf:c5:8d:93:0e:d8:63:92:78:1b:70:2b:
                    19:2d:ea:b6:fc:f0:45:79:48:af:17:64:7c:8a:cb:
                    da:7f:04:38:8e:91:45:27:6c:e0:2c:c5:10:7e:da:
                    e5:97:34:ba:71:b3:7a:cd:c2:71:77:bd:8a:04:0d:
                    94:9d:70:5e:6f:17:79:36:93:3e:8e:d7:1a:91:87:
                    eb:6f:8d:73:60:b0:43:f7:a5:2d:49:c2:e5:af:b8:
                    c9:ad:93:f7:54:27:d5:7c:7a:0a:e5:b5:3b:71:39:
                    8c:91:37:3b:b5:d2:03:42:b8:07:87:2e:f3:2f:26:
                    b7:ea:6f:9f:ef:71:4d:fb:f1:93:42:d5:d4:7b:3c:
                    43:ae:65:13:58:a5:61:62:0c:fd:46:4d:c0:2a:88:
                    79:62:1e:04:2c:ec:1e:25:50:6c:31:5a:e6:0a:05:
                    0c:f7:be:28:d7:71:8b:35:25:74:27:3c:1e:2d:97:
                    ea:34:3b:af:e5:31:14:af:27:55:ad:06:d3:7f:2e:
                    8d:9f:c2:d4:e3:a9:f5:bf:c2:f7:ab:b5:6b:43:f7:
                    b4:76:1d:8f:d6:53:d4:83:21:f2:99:3b:e3:57:54:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:42:6A:A3:6E:62:63:98:35:86:40:E5:64:9C:57:99:1C:E4:95
            X509v3 Authority Key Identifier:
                keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:c7:39:2d:86:e3:02:6f:df:4c:29:e2:6e:ca:bf:88:0b:
         b6:19:bd:e1:b0:21:16:30:85:3b:64:dc:67:6c:b2:c5:7d:5b:
         30:b8:42:20:d6:c3:ff:16:42:31:cd:20:8f:7a:1c:2a:b3:47:
         b7:31:8b:96:0e:61:06:3e:da:12:da:92:c7:43:6e:ab:b1:b7:
         e7:0f:39:3c:32:35:d5:40:1b:f8:9a:a5:f8:34:1b:14:30:35:
         78:0c:d8:f0:4b:6d:44:1f:b4:9b:bb:d9:7a:b6:38:65:89:ac:
         0c:27:57:10:45:5d:a1:21:38:4c:12:63:42:4a:a1:be:da:bd:
         62:2b:dc:32:a3:ce:ee:c5:7c:28:87:23:ce:a1:df:3b:31:41:
         00:64:d7:90:05:9f:2e:44:5c:1a:24:1b:29:29:20:10:54:29:
         40:95:d7:e3:13:5e:a6:b9:c4:7b:19:4d:f1:66:1c:6e:55:25:
         0f:2d:39:96:f8:c5:dc:5b:c5:c8:57:58:3c:f1:61:80:d3:23:
         45:15:30:07:27:58:e8:66:73:15:c7:75:4b:1a:bc:bf:90:7b:
         9f:21:ef:61:28:2d:e6:4c:fb:bf:1a:7f:3f:59:54:15:68:14:
         d3:cb:5f:b5:44:10:b9:b2:7d:05:f4:87:d0:15:24:c9:f0:c6:
         9d:6b:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:52 2026 by rpki-client