Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File:                     3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier:          SV2BasIHtNhSyjqMpLh/LHZWJs7B2PMvOcw5lD9eYaI=
Subject key identifier:   E2:44:1B:DB:4A:65:60:6E:E2:DC:94:2E:87:A7:59:61:34:6B:12:5F
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer:       /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial:       019F90FE8C5B627B1B0E2F207AD55DDE0725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number:          18A7
Signing time:             Thu 23 Jul 2026 22:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:28 +0000
Files and hashes:         1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
                          2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: TssSLRXOoo358dsmjl4MGeCm4r7fQGcG12nSlFdxCoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:8c:5b:62:7b:1b:0e:2f:20:7a:d5:5d:de:07:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
        Validity
            Not Before: Jul 23 22:00:28 2026 GMT
            Not After : Jul 24 22:00:28 2026 GMT
        Subject: CN=e2441bdb4a65606ee2dc942e87a75961346b125f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:69:56:7c:5a:00:4b:b9:9a:86:3f:db:27:
                    b8:b6:48:4c:29:89:8e:89:82:5c:6f:f5:08:17:16:
                    12:59:a9:ca:fd:75:bb:cf:39:e2:76:6d:07:b6:b9:
                    2d:28:36:e2:3f:0f:22:10:4e:49:35:25:c2:10:4f:
                    80:ff:af:96:d2:5a:0b:18:32:e9:f8:80:2a:a1:95:
                    44:bc:bf:25:ce:c7:2f:7b:ac:d7:3e:b1:39:f0:ff:
                    72:67:e2:b9:7e:4b:4a:aa:e1:e2:c3:66:bb:ef:5f:
                    2e:d8:51:58:22:b6:8e:fd:46:a7:39:93:bd:fc:22:
                    b5:e2:6a:43:04:10:14:9d:74:de:eb:15:3b:96:a8:
                    88:a5:ba:05:2d:7d:56:cd:88:48:02:66:a5:43:60:
                    10:c1:62:36:1e:cb:84:17:fe:07:a1:b0:54:d6:0a:
                    52:c7:f4:71:af:93:59:c1:dc:1e:ce:e5:16:db:68:
                    57:d5:a4:4b:91:af:1f:7a:8b:52:c5:0e:0e:62:8d:
                    57:dd:61:f7:6f:e0:d7:3c:3e:8d:e6:e1:95:c8:2a:
                    d4:c7:22:01:34:34:48:df:f9:78:21:b5:26:29:48:
                    e8:5f:be:ec:c9:66:a5:0a:30:cb:bb:83:71:ed:b1:
                    a3:2c:77:fa:8e:19:9b:77:89:40:dd:2a:b2:ab:54:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:1B:DB:4A:65:60:6E:E2:DC:94:2E:87:A7:59:61:34:6B:12:5F
            X509v3 Authority Key Identifier:
                keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:21:14:29:95:8a:6b:6d:0d:48:3e:f6:2e:cf:4d:14:be:
         83:09:bc:5e:a1:af:08:6f:6b:54:b9:9c:7d:7b:98:f4:3e:58:
         6e:bc:54:6c:6e:9f:b2:6b:15:62:6e:ff:c4:ee:90:21:58:70:
         80:4c:64:fc:b0:cd:e6:6f:73:4c:6b:9f:4f:97:dc:f4:58:79:
         1f:47:5a:fa:01:17:16:3f:d8:9a:fd:d1:81:22:de:b4:c9:25:
         8e:96:60:6d:43:b8:2c:6f:95:4b:a3:79:af:b9:8c:0f:19:df:
         b8:a2:96:92:73:08:b4:e0:85:25:0c:77:b6:73:f6:37:df:f4:
         5b:65:7b:dc:8c:80:83:42:d6:6c:2f:63:8e:85:c6:11:2d:38:
         ff:30:a8:2a:48:92:08:7c:4b:3b:5a:11:ed:8c:0d:44:c9:b5:
         2d:48:e9:8a:6c:24:3d:b8:90:57:d7:70:0f:f4:2c:73:d8:fe:
         4d:19:ec:e8:86:0b:bc:23:c5:83:6d:2c:7c:33:c0:a0:ed:b2:
         a8:c0:8b:8f:28:18:89:03:c0:e3:af:4e:cf:90:9c:15:e8:13:
         d0:a3:63:3c:0e:78:16:59:e1:58:66:61:f6:20:5c:8f:42:73:
         23:c1:42:0d:8b:9b:81:c5:93:c6:c7:ac:b2:e4:a5:9e:2d:6a:
         fc:62:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:52 2026 by rpki-client