Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File:                     3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier:          jHpFyfJFG/ydH8FtWMY3MkQ+YYTv6YsL/ZOCkcgKXJo=
Subject key identifier:   67:56:5D:21:0E:C6:E2:5D:81:E8:FE:F2:BB:64:1B:3D:BC:F6:7F:58
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer:       /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial:       019F8FB5332A5608610F3D5641B489C7D678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 16:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:44 +0000
Files and hashes:         1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: J8ufxeNqpJ92pgfAKn2gVECg1Oxx11StO4kSDOutUS4=)
                          2: gF9egdIcd91P1OP4RPz2DkEHDD8.roa (hash: JDz8GS+aZf4wXrBiyWB1Bck1IR0dmoeHU/KEMVi1Ghc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:33:2a:56:08:61:0f:3d:56:41:b4:89:c7:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
        Validity
            Not Before: Jul 23 16:00:44 2026 GMT
            Not After : Jul 24 16:00:44 2026 GMT
        Subject: CN=67565d210ec6e25d81e8fef2bb641b3dbcf67f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:d6:d0:fa:70:da:45:ec:13:24:e0:79:1a:
                    48:f4:19:41:a6:f6:1d:b7:1a:ff:0f:2a:fa:59:a6:
                    2a:d7:00:e0:73:3c:5d:b2:24:64:f8:e1:b3:ee:9a:
                    54:ec:7d:b5:79:b7:fc:8f:8d:ad:51:6b:e5:d8:ae:
                    74:87:f4:c9:93:26:f2:02:93:03:70:4d:d3:dc:9a:
                    9a:1b:65:1d:cb:e0:d4:cc:16:e1:88:02:05:13:dc:
                    1c:23:ca:12:1e:54:03:c2:0a:40:96:27:77:6e:8c:
                    8c:5e:fc:04:be:67:25:9d:9e:4d:73:b9:e1:eb:86:
                    ab:53:c3:55:4b:57:dc:d1:2e:45:25:40:f6:4c:fb:
                    4e:bf:1d:67:6d:bc:cf:47:58:72:58:b5:b7:77:47:
                    4c:1c:15:96:fb:2d:21:a2:ee:11:53:51:4f:3d:98:
                    cd:ea:4d:ba:8c:b2:77:2c:df:47:23:1d:83:c4:91:
                    5d:87:ec:15:56:43:83:95:e4:60:06:0f:92:0f:66:
                    5f:be:ee:c6:52:19:e8:85:21:db:28:2d:16:ba:e3:
                    54:97:da:e9:9b:1a:60:c3:b6:9d:ab:a5:18:49:4c:
                    0f:e4:9a:2f:89:c5:89:36:ac:ba:f3:93:89:62:8b:
                    c5:b1:76:ec:32:87:17:4a:b1:13:11:df:3c:fd:0c:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:5D:21:0E:C6:E2:5D:81:E8:FE:F2:BB:64:1B:3D:BC:F6:7F:58
            X509v3 Authority Key Identifier:
                keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:62:3b:87:7e:9e:72:8d:33:e7:9b:b6:3f:a6:74:82:11:ab:
         33:43:2f:04:11:7c:b1:37:da:a5:bf:9b:5a:ec:76:15:22:e9:
         aa:86:77:37:88:41:cf:ce:c8:39:81:93:4d:c7:2a:05:52:09:
         3e:49:bd:97:71:3f:7c:e3:21:53:62:5a:30:e4:54:1d:08:a0:
         2d:dd:fa:db:db:d9:3f:30:96:a4:e6:5c:1a:78:94:c5:14:6d:
         86:b3:7f:c0:a8:35:a4:3b:48:01:01:1d:13:96:83:fb:c6:62:
         3e:fe:aa:1b:ad:0b:9a:dc:1a:44:9f:0d:de:f0:da:cb:94:b0:
         3c:03:7e:45:b8:91:e9:e3:1d:04:b4:a5:59:47:bb:bf:38:bc:
         1b:3b:c7:bb:ee:8a:71:30:19:5d:bb:8b:7a:58:42:e6:50:79:
         4d:69:6d:f8:39:96:24:f2:a9:75:73:b0:18:43:83:ca:fe:9c:
         0e:31:da:1d:29:fe:98:95:1d:fa:ac:e1:ec:26:7f:21:5c:9a:
         65:9f:33:0f:6d:f5:18:bf:59:6b:4a:80:cd:62:3b:3d:20:eb:
         53:cf:3a:93:3d:ba:fa:1d:b2:ed:02:5a:5b:dc:7c:0e:ea:73:
         4f:4c:62:18:59:b6:2e:ce:a5:5f:24:0f:5b:8b:b1:0b:74:1b:
         45:f1:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:33 2026 by rpki-client