Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File:                     3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier:          X5HqYOmTnbLSLYIA6orCXlOp39sRPMVWh/wXJqB5dr0=
Subject key identifier:   F3:43:E9:62:9F:45:F0:71:18:23:66:1B:46:1E:54:6A:41:AD:EF:05
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer:       /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial:       019F8FB5C5155720C2A3250F0A027167EBED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number:          105A
Signing time:             Thu 23 Jul 2026 16:01:21 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:21 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:21 +0000
Files and hashes:         1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: p57jk3d0/mjzVJ9q6taVtdn3MsBOGGA67zhtxHiBDr4=)
                          2: QFEuDeeu4X6RvqTM-9j-vL-jCec.roa (hash: enIY13X+DtKSJonUyur86EMN51RX0wJhm2ZaFev3lAE=)
                          3: lGfy-skAnLgxdiq51q1vJk9OXZg.roa (hash: 905M+SG71AWuwma3AVwJNMrg+VeownsgNGw18kPIIEs=)
                          4: shwWHH59CwEK5l3nYzgvrpyDADs.roa (hash: Xxgj4+MGImPO/BRjCoJfEL8QyT6UC4SQ9MovxKsATjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:c5:15:57:20:c2:a3:25:0f:0a:02:71:67:eb:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
        Validity
            Not Before: Jul 23 16:01:21 2026 GMT
            Not After : Jul 24 16:01:21 2026 GMT
        Subject: CN=f343e9629f45f0711823661b461e546a41adef05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:7f:78:b9:34:bd:df:cd:05:8d:40:f3:24:
                    97:e3:aa:b8:f0:8a:aa:d0:41:80:df:10:aa:ec:ce:
                    16:ff:19:39:c7:ed:3e:f6:5e:2f:39:35:a1:c1:c9:
                    45:b4:bf:51:5b:84:5d:b9:5a:df:1e:bc:c8:8c:38:
                    a1:4a:bf:d0:53:5e:04:fe:78:10:0e:2c:54:fe:b7:
                    f4:46:13:d2:97:ad:f9:b0:ae:8a:20:bb:9b:85:f6:
                    fc:41:3b:13:79:cd:c7:72:7d:ca:36:3b:be:9d:88:
                    93:9f:34:66:e9:b3:82:80:d1:1b:17:72:a1:6a:4e:
                    48:cb:7e:7e:62:5d:d4:e2:fe:22:ca:13:7d:65:4f:
                    6a:5c:69:3f:42:13:c4:fd:12:5c:7f:02:47:76:ef:
                    b5:90:60:0b:96:4b:f0:6d:41:33:ae:7a:4e:dd:9c:
                    89:4e:bc:28:5a:fd:91:65:2a:e9:44:44:08:e3:51:
                    12:8f:52:0f:b1:91:b9:fc:00:8d:22:50:bb:93:26:
                    e4:30:5c:5a:3b:98:99:49:34:6e:b7:bd:fc:dc:2b:
                    da:29:ca:0c:1e:6b:62:aa:e2:21:7a:92:a9:30:43:
                    eb:ad:d2:85:67:2b:9b:8e:58:62:33:a0:23:70:3e:
                    b3:1b:ea:bf:b5:8a:85:6b:c7:3e:25:a4:64:40:4c:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:E9:62:9F:45:F0:71:18:23:66:1B:46:1E:54:6A:41:AD:EF:05
            X509v3 Authority Key Identifier:
                keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:ba:25:92:55:84:fa:5e:e7:72:4a:ae:d4:8a:e3:f7:80:
         9f:ae:7a:ea:1f:0b:0a:6a:59:f9:fa:b4:50:da:c7:04:3e:01:
         40:88:c0:c5:3a:8e:34:53:34:40:fb:16:dd:80:b4:7c:20:bc:
         5b:0c:7e:1e:c7:6b:07:79:7c:20:f4:c8:3b:cc:f6:a6:20:d6:
         ce:5d:3b:a4:55:bc:ae:d9:3d:53:bf:0c:8b:06:ac:c0:45:5d:
         b3:36:db:5e:47:40:ea:ce:a3:7b:f1:f3:79:bc:53:f2:8b:d2:
         fe:ca:6a:2f:c2:32:a3:f0:77:be:2f:4f:51:bd:6d:9a:9b:78:
         9e:6a:27:99:83:36:1b:8f:0c:49:64:7f:fc:8b:cc:90:6e:7f:
         d9:6b:24:94:1e:15:ff:8b:ea:68:3b:0e:7e:06:87:df:73:05:
         d8:f7:7a:80:0a:82:a6:20:b5:f4:62:7b:cd:c0:24:9d:7b:47:
         fa:e9:c3:ab:e9:ef:95:87:b6:65:41:f4:f8:cb:53:5f:8d:b4:
         24:f3:fb:dc:61:ad:39:c6:f3:0c:ca:f0:e4:78:26:9e:d8:a7:
         f9:8e:66:b1:fb:0d:f8:8c:44:35:ed:7a:1d:d6:27:fa:64:28:
         4e:d8:86:35:d0:e3:5e:2d:6b:ef:7d:18:ba:1a:79:37:e8:8f:
         5a:1f:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:02 2026 by rpki-client