Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File:                     3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier:          CLRwz2Q3RLs+IJS2QQv8YPBvU3EczbSOVcPlDiAy/IU=
Subject key identifier:   C0:64:6B:2C:71:FC:69:92:91:DA:F3:14:39:C1:44:49:D5:0F:1A:4D
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer:       /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial:       019F946D8782C1058A91A3A8428003AAB7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 14:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:33 +0000
Files and hashes:         1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: PHJkZhuRa3Ic/LBbN28KSITl4kC6adwyAOcGVtWOeiE=)
                          2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:87:82:c1:05:8a:91:a3:a8:42:80:03:aa:b7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
        Validity
            Not Before: Jul 24 14:00:33 2026 GMT
            Not After : Jul 25 14:00:33 2026 GMT
        Subject: CN=c0646b2c71fc699291daf31439c14449d50f1a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:bb:d5:0d:38:8f:35:f1:79:c2:27:74:a1:
                    4a:4b:21:83:ad:60:39:00:aa:43:e8:ac:77:1b:46:
                    06:f3:fa:e7:3b:7d:43:18:95:3a:26:de:4e:55:4d:
                    d6:d3:56:33:d4:4d:17:eb:ae:29:74:11:89:60:d4:
                    6c:eb:6d:0c:5f:3b:e3:7f:77:62:6f:81:d6:bc:69:
                    d8:d5:eb:c2:06:70:19:52:8e:a9:00:d0:38:3b:b6:
                    93:10:4e:64:ec:79:e1:50:e9:36:c4:02:eb:c1:2a:
                    d2:e4:91:95:b4:96:30:10:0c:54:5b:97:23:c0:13:
                    99:01:b1:b8:19:83:00:d5:c0:2e:ae:97:b1:b9:a5:
                    b4:4e:65:e1:bc:0e:ae:fd:f4:9b:20:54:ed:c1:46:
                    eb:31:b4:55:08:8f:5e:8c:08:c4:6c:a4:e3:cc:a3:
                    29:0a:70:76:b0:a2:1b:62:a8:28:88:29:1a:f0:9f:
                    c8:60:7d:e8:53:a3:14:09:90:2c:57:6b:0c:f8:26:
                    04:c4:e8:58:92:b2:f6:f3:0c:5e:cd:72:46:e0:86:
                    2a:a6:75:c2:6c:5b:05:e0:56:7a:e9:a9:b6:06:77:
                    0a:a6:75:50:37:1f:10:5d:bb:7e:ce:c1:82:f9:e0:
                    fd:7e:55:7d:f3:ed:a7:70:6e:03:e4:45:3d:82:9e:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:64:6B:2C:71:FC:69:92:91:DA:F3:14:39:C1:44:49:D5:0F:1A:4D
            X509v3 Authority Key Identifier:
                keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6d:28:47:8e:b8:e9:e6:1f:ea:c7:64:ad:2e:51:57:5e:1b:
         c3:96:0c:e2:ce:51:18:4b:f3:f3:4d:94:eb:3c:69:b0:70:96:
         b8:23:14:6e:35:ca:9f:89:b2:d2:aa:64:54:70:95:f5:e2:52:
         f7:07:05:68:c1:ab:11:5a:5d:dd:c8:08:3e:dd:81:79:65:b6:
         c1:28:2c:a0:66:fe:75:17:d7:a2:3d:7f:3e:dc:53:e0:ab:5b:
         50:e2:86:af:d9:ac:e2:46:18:4b:41:75:10:cb:3c:67:a5:4b:
         6f:2f:62:00:06:26:e8:21:d2:c4:c7:2b:5f:f9:3d:54:ad:c4:
         3b:a4:82:bc:53:8e:21:be:89:cc:94:96:eb:33:7a:c1:cf:18:
         4e:11:65:96:5c:11:9c:a1:3a:8d:33:de:9b:fc:c5:32:1f:ed:
         51:fc:46:c1:59:51:98:c4:90:a6:67:93:09:43:a8:7f:02:be:
         bf:96:f7:1a:29:98:c3:cb:b8:7e:d5:27:f9:04:7a:bd:7e:09:
         0f:fe:7c:76:8c:a4:98:c7:f0:f6:4f:ee:68:9b:1f:28:82:86:
         d7:0d:3f:fc:02:0c:b8:f9:b4:d2:5b:f4:5a:79:e8:d0:19:ea:
         91:6e:d8:dc:17:1f:b8:de:75:a7:3f:25:95:87:e1:44:fd:0d:
         33:4f:97:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbYeCwQWKkaOoQoADqrfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi
ZWM4OTQwHhcNMjYwNzI0MTQwMDMzWhcNMjYwNzI1MTQwMDMzWjAzMTEwLwYDVQQD
EyhjMDY0NmIyYzcxZmM2OTkyOTFkYWYzMTQzOWMxNDQ0OWQ1MGYxYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31m71Q04jzXxecIndKFKSyGDrWA5
AKpD6Kx3G0YG8/rnO31DGJU6Jt5OVU3W01Yz1E0X664pdBGJYNRs620MXzvjf3di
b4HWvGnY1evCBnAZUo6pANA4O7aTEE5k7HnhUOk2xALrwSrS5JGVtJYwEAxUW5cj
wBOZAbG4GYMA1cAurpexuaW0TmXhvA6u/fSbIFTtwUbrMbRVCI9ejAjEbKTjzKMp
CnB2sKIbYqgoiCka8J/IYH3oU6MUCZAsV2sM+CYExOhYkrL28wxezXJG4IYqpnXC
bFsF4FZ66am2BncKpnVQNx8QXbt+zsGC+eD9flV98+2ncG4D5EU9gp6cyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBkayxx/GmSkdrzFDnBREnVDxpNMB8GA1UdIwQY
MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct
YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4
LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADW0oR464
6eYf6sdkrS5RV14bw5YM4s5RGEvz802U6zxpsHCWuCMUbjXKn4my0qpkVHCV9eJS
9wcFaMGrEVpd3cgIPt2BeWW2wSgsoGb+dRfXoj1/PtxT4KtbUOKGr9ms4kYYS0F1
EMs8Z6VLby9iAAYm6CHSxMcrX/k9VK3EO6SCvFOOIb6JzJSW6zN6wc8YThFlllwR
nKE6jTPem/zFMh/tUfxGwVlRmMSQpmeTCUOofwK+v5b3GimYw8u4ftUn+QR6vX4J
D/58doykmMfw9k/uaJsfKIKG1w0//AIMuPm00lv0Wnno0BnqkW7Y3BcfuN51pz8l
lYfhRP0NM0+Xsg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:24:21 2026 by rpki-client