Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          vXxUUcVpZkkpy1HFkyUZqnBW0iWUh5HYboubva/gUIw=
Subject key identifier:   27:12:E8:DD:55:90:06:92:45:83:87:E2:57:E0:4F:30:60:4F:5B:42
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       019F927F036356D021D3199A5241888AB3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0A3F
Signing time:             Fri 24 Jul 2026 05:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:25 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: GTB22WCTPE5EqRVWuFNHIHUs5I6i7x4MArgm4e3Z2nM=)
                          2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:03:63:56:d0:21:d3:19:9a:52:41:88:8a:b3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Jul 24 05:00:25 2026 GMT
            Not After : Jul 25 05:00:25 2026 GMT
        Subject: CN=2712e8dd55900692458387e257e04f30604f5b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:84:aa:fa:62:99:33:ce:cd:32:a7:a9:59:
                    e6:2f:c6:72:3f:6d:79:0d:1b:fb:b7:51:f2:a5:62:
                    a9:7b:1e:76:d3:35:b9:8a:8f:a2:9a:a1:1f:18:51:
                    19:18:43:cb:2a:55:ea:57:cc:a5:fa:f7:9a:7c:09:
                    64:4e:74:c0:03:38:70:7e:57:5d:3c:c7:53:a7:5b:
                    2e:d4:57:b0:42:b0:e6:d3:14:49:cc:75:16:48:f3:
                    7c:15:85:81:3a:57:87:db:20:bb:90:11:ab:34:6f:
                    79:9d:f2:78:b5:c0:5c:ba:91:a3:5e:b6:d3:4a:19:
                    6a:df:ef:4f:80:e4:fd:36:66:81:0f:32:51:88:61:
                    32:28:8c:92:d8:fd:d8:36:90:cb:f9:39:d8:d7:fd:
                    c6:06:4a:ab:04:e7:45:94:f7:90:3f:a1:50:8a:96:
                    9a:03:71:69:78:d1:5f:75:58:00:48:69:6b:14:5e:
                    6b:62:12:b5:6a:11:2d:ee:7a:af:16:cc:63:b7:d7:
                    73:13:10:69:0a:82:bd:1e:e9:32:38:a9:05:ea:52:
                    0c:31:72:e7:26:ac:e8:ed:b1:8a:c6:05:5c:dd:95:
                    99:85:e6:36:4b:7b:fd:3b:0d:4b:04:0c:31:69:ae:
                    16:5d:2c:a2:62:be:f0:cf:a0:c6:ac:e8:da:b3:a2:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:E8:DD:55:90:06:92:45:83:87:E2:57:E0:4F:30:60:4F:5B:42
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:27:88:a5:0b:b7:e4:ae:ca:e9:ef:cc:08:50:e1:03:ef:
         3b:b8:2c:d0:e0:a4:34:e2:2c:db:aa:64:65:9d:17:f0:1b:18:
         a2:86:b3:ad:d9:d8:22:4d:44:b1:f1:b3:f0:3a:42:5e:53:32:
         47:ea:16:18:a5:79:39:41:f3:fe:62:78:7d:d2:91:ab:2a:e2:
         d3:6b:88:94:81:cb:bb:bc:02:42:b3:de:c0:72:4e:38:59:eb:
         c8:52:3a:ba:46:84:00:01:4c:af:d6:e5:20:9c:35:cc:53:2c:
         0c:14:71:dc:36:d8:a6:bf:ef:47:71:08:4d:f2:69:fd:05:27:
         fc:9e:8a:9d:2e:ae:03:2a:80:e5:de:43:c8:16:51:95:59:b9:
         85:c3:79:8d:e1:e7:5d:40:d5:f0:36:25:a5:5a:99:2e:6f:29:
         85:02:7c:b4:4c:cb:e9:57:39:c0:db:54:b6:f4:b0:d4:25:3a:
         55:ac:a7:c3:d1:c9:90:47:7d:43:47:a9:2d:e2:a2:b9:5e:2f:
         72:4e:80:7d:09:70:83:25:5c:d6:d2:61:13:b2:4c:8e:c5:55:
         84:ac:ad:16:e1:fe:9c:73:27:1d:9a:6e:57:98:59:28:f2:3f:
         44:71:cc:bc:1c:dd:8c:45:4e:df:ea:3c:38:f4:6d:e8:87:63:
         80:16:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:41 2026 by rpki-client