Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File:                     3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier:          7lI2PFqzm+4+iFt35a04n4byf6q7TgqJGNXXMXC8CuQ=
Subject key identifier:   26:A1:8F:A5:64:57:D2:FC:4F:4C:96:6A:35:06:41:C5:9C:74:DF:4C
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       019F91A3C25CCAEFD4E2E9F2B24EBF65059A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number:          169D
Signing time:             Fri 24 Jul 2026 01:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:56 +0000
Files and hashes:         1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: waxl0dG1CeeslPoKS9NV+OBNFHvEZ4H0fJnjmrm/8Vg=)
                          2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:c2:5c:ca:ef:d4:e2:e9:f2:b2:4e:bf:65:05:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Jul 24 01:00:56 2026 GMT
            Not After : Jul 25 01:00:56 2026 GMT
        Subject: CN=26a18fa56457d2fc4f4c966a350641c59c74df4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:ce:2c:6a:f1:c5:46:f1:79:b5:90:15:4c:
                    74:a5:a5:0e:03:ca:5d:3f:d6:f3:63:3b:94:d5:b3:
                    d5:0f:4f:67:af:01:3d:ec:1d:51:5e:86:7a:87:20:
                    d1:ae:91:cd:30:14:50:0e:23:86:5c:f4:bf:a8:1a:
                    17:af:f7:af:81:33:1e:b6:57:76:8f:30:d4:4c:93:
                    61:bc:64:92:80:d4:45:77:c1:f9:56:df:f1:68:a2:
                    cc:62:6a:a0:21:24:e3:45:b4:ad:08:b6:fe:5d:51:
                    61:08:67:d0:e9:ab:ce:1b:17:4b:01:50:d3:01:56:
                    b5:22:82:8d:15:8a:48:ae:fa:b1:f6:a3:fd:d0:ac:
                    0a:61:b3:86:73:1a:be:93:fa:17:9b:a6:5d:ad:21:
                    a3:83:ee:6b:33:b4:25:e2:87:31:eb:c6:85:71:f5:
                    99:19:fb:84:71:38:8f:63:d9:2f:3f:2f:dc:8b:02:
                    95:72:12:9e:ee:32:f0:4c:c5:9c:74:eb:14:24:f9:
                    f0:5a:be:ea:76:02:2b:cb:35:72:a7:84:c1:b8:86:
                    1c:68:c5:c0:6b:4c:5a:5e:a5:34:60:40:cc:b3:81:
                    bd:cc:8e:56:88:77:97:df:f7:9f:bb:14:4d:76:bf:
                    2a:62:57:da:7d:85:58:52:c2:09:e1:0c:26:96:60:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A1:8F:A5:64:57:D2:FC:4F:4C:96:6A:35:06:41:C5:9C:74:DF:4C
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:92:b1:28:f0:d0:06:f9:26:5e:f7:f9:d6:31:8e:7f:fc:
         b6:bc:c0:24:6e:cb:e1:bb:e2:2c:01:68:df:32:0b:a4:0e:00:
         3f:e1:1d:c4:48:66:ae:e7:f0:2b:35:f6:a9:7d:2c:14:c5:0d:
         2b:65:c6:0a:d4:36:86:6d:f5:0f:03:c6:c2:e2:4d:ab:6a:1a:
         5d:34:d3:0d:4d:70:b1:a9:2a:4f:2d:c7:e7:32:50:6b:11:d4:
         25:9f:ba:04:11:6f:d5:d3:cb:9f:d2:1b:2c:42:de:97:41:5f:
         3b:09:34:79:3f:af:58:22:ad:a0:95:63:05:82:1e:52:14:e6:
         34:1d:79:bf:8e:c0:13:af:7a:46:8b:9b:5c:2a:6d:93:4c:1b:
         80:01:d4:f4:b8:0f:32:15:b8:a9:b3:48:64:67:0b:05:ae:c3:
         f2:24:d0:af:13:5c:52:12:bf:d8:51:b8:79:67:50:dc:fa:44:
         71:08:8b:f9:45:50:4d:3e:3e:ec:7a:81:d3:a1:eb:00:6d:58:
         9a:e5:ec:31:62:d1:d7:69:75:76:24:75:f9:4e:b9:ea:ab:0b:
         7f:2d:8b:7e:67:96:b4:63:53:0a:67:61:14:b2:6e:44:84:99:
         a8:01:0f:7d:62:ff:d4:2c:39:e1:1a:cb:73:c7:81:3e:ad:a0:
         62:d1:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:21 2026 by rpki-client