Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File:                     B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier:          V82rx58EkSK2MuK5HzR0zWOK8mR7n+2r9dE6xCTLO9o=
Subject key identifier:   77:55:8E:7C:F5:FF:D3:D6:8E:85:25:7D:FD:E0:F2:C4:4B:6D:66:59
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       019F8FB4D182F176E9335DC2B67C1B4CBE2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number:          0491
Signing time:             Thu 23 Jul 2026 16:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:19 +0000
Files and hashes:         1: AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa (hash: KB2aJQENkpsyC9FBJhTiCS7SCs2ZFa04cjwD/nhBfoA=)
                          2: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: IMI1IObzypNH2/c982NaESQCUyZW78Y+ooi9nr9y6eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:d1:82:f1:76:e9:33:5d:c2:b6:7c:1b:4c:be:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Jul 23 16:00:19 2026 GMT
            Not After : Jul 24 16:00:19 2026 GMT
        Subject: CN=77558e7cf5ffd3d68e85257dfde0f2c44b6d6659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:cf:d1:f4:a4:a1:73:a6:ba:2e:e6:4e:5b:
                    bb:61:5f:3b:32:54:97:e9:49:ee:63:ed:09:08:9c:
                    c5:29:c1:1d:7d:cf:93:0c:31:2f:62:b6:c6:ee:0d:
                    bf:a9:1b:c8:4c:1e:b2:f1:90:78:2a:b4:45:b0:a2:
                    73:f2:70:88:9d:de:73:13:b0:8c:ba:78:42:e1:88:
                    32:f0:98:29:a5:47:30:8b:64:42:10:ca:12:73:6c:
                    84:ad:19:a4:fa:b5:03:a8:aa:0f:46:db:be:6f:7e:
                    a0:72:0b:89:15:e9:22:c2:8c:30:5b:09:7d:4c:2f:
                    d6:a7:9b:44:a8:58:14:da:8a:73:05:5b:71:06:5f:
                    3d:83:6e:48:81:68:48:4c:a8:3d:c6:12:7e:97:72:
                    bf:97:e4:09:b5:9e:81:6d:18:a8:f6:21:2f:fe:74:
                    8a:4d:ec:c8:df:73:b4:c9:6f:31:9d:6a:60:28:5a:
                    6a:6c:85:07:ee:f1:25:7c:99:27:43:66:cf:2a:bc:
                    b6:a6:c8:63:df:a9:35:f1:89:51:42:07:eb:c6:8f:
                    92:3d:cf:12:cb:81:9e:00:28:a2:3c:e6:6a:21:e2:
                    00:34:33:22:5d:fc:19:fb:a7:88:3f:c8:48:7e:df:
                    7f:b7:89:61:2a:2d:14:32:f3:60:8a:14:90:b1:96:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:55:8E:7C:F5:FF:D3:D6:8E:85:25:7D:FD:E0:F2:C4:4B:6D:66:59
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2a:e3:2b:cf:2e:9c:79:57:09:bd:47:d9:96:fc:10:9a:19:
         71:eb:dd:b9:b2:05:58:8a:43:72:d9:09:14:54:ef:8a:f7:87:
         02:97:28:00:3e:75:00:26:4d:db:0c:98:2e:49:98:6f:2b:0d:
         e4:c6:82:8d:ce:1f:0b:86:47:71:bc:a3:1c:51:e9:72:cd:bc:
         ee:b1:23:05:b7:5b:05:66:03:76:7c:a7:50:81:bf:68:0d:45:
         5d:6b:70:2f:b7:01:c1:0f:43:4a:ac:db:a0:4d:f6:57:da:52:
         9f:a9:df:b7:64:2a:e3:0f:8e:8a:47:60:da:a6:2f:74:bb:68:
         a6:8d:93:cf:bd:98:c8:c0:44:4a:96:8b:e1:73:2d:9a:3d:c9:
         5d:13:28:c2:85:de:34:a3:d8:fe:c9:6a:88:10:35:ad:ce:02:
         70:c0:0f:21:60:f6:a1:8d:8d:3a:6f:41:74:63:53:cf:47:c4:
         93:b5:f8:2a:3d:ba:a1:7e:d5:4e:93:08:08:5a:20:97:95:34:
         c2:48:95:68:a5:89:4f:f4:f9:c6:2b:36:0b:12:fd:bb:ae:cf:
         86:81:e6:a3:8a:1b:25:70:4d:b2:85:5b:45:ae:e3:f1:a0:d7:
         60:5f:9a:b4:16:f8:56:91:65:42:65:a3:39:23:bc:2e:17:dd:
         9c:de:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:25 2026 by rpki-client