Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          qf/o0KnGI4Npqgu0cHxQMw/6J9d3DBzqNTRLMoX0QY4=
Subject key identifier:   4D:17:D3:0A:C2:B8:0B:B3:6F:B8:02:C2:DF:24:5C:E8:FE:B0:A1:89
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       019F927F0701116CF3B4A88B419183DFAA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          0E31
Signing time:             Fri 24 Jul 2026 05:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:26 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: pmRW+ndpRjoU4cFbl9q9Cvo4l5TUv4h1QU6e8fwrJ0c=)
                          2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:07:01:11:6c:f3:b4:a8:8b:41:91:83:df:aa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Jul 24 05:00:26 2026 GMT
            Not After : Jul 25 05:00:26 2026 GMT
        Subject: CN=4d17d30ac2b80bb36fb802c2df245ce8feb0a189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:ea:ed:07:ef:69:a5:00:a3:c2:f5:9a:48:
                    e1:33:cf:53:3a:a4:d2:fc:f2:2c:ef:ae:ff:55:dd:
                    f9:4b:26:c8:a8:56:f4:f4:6f:e1:08:f0:da:07:94:
                    d5:4b:41:41:a0:c2:fe:a4:e2:40:8d:88:6a:34:59:
                    0e:85:9e:27:5c:19:68:78:06:ce:a4:62:c9:44:61:
                    93:52:8d:0e:2a:14:a7:44:90:3d:a1:95:65:c5:df:
                    59:95:01:c0:e4:2c:37:df:23:ed:a9:38:2b:c6:34:
                    1c:84:b7:7e:99:79:a0:f4:e4:30:3c:0c:2a:1e:46:
                    5a:5e:82:1a:c2:76:66:36:0b:63:5b:48:16:55:71:
                    7d:62:8f:90:8e:5e:d5:3d:48:13:06:17:6e:fa:1f:
                    69:d2:87:5a:50:7d:26:dc:af:5e:71:ea:5b:09:76:
                    c9:ee:00:39:f9:41:9b:77:3a:8e:83:fb:51:19:cf:
                    aa:b5:d8:48:8b:74:36:94:c5:8a:c9:77:dc:6d:4a:
                    2a:09:50:f2:b7:09:a9:65:87:e9:94:22:c3:8b:e3:
                    63:bc:87:b0:e2:7a:f7:0f:e6:54:0c:fc:09:cf:a6:
                    59:88:32:b4:81:23:7e:58:1c:35:83:d3:8b:3b:03:
                    3d:4f:72:63:1a:3c:47:f2:c0:05:33:09:46:cd:8e:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:D3:0A:C2:B8:0B:B3:6F:B8:02:C2:DF:24:5C:E8:FE:B0:A1:89
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:02:14:c7:14:25:b0:ad:2c:87:3f:9b:55:e6:dc:19:c2:
         3d:8b:09:7b:cb:21:2d:b7:86:aa:05:0f:9a:e4:b0:30:cb:ed:
         59:ff:e6:75:50:85:75:1a:88:d0:b6:09:77:af:ea:e7:9a:2c:
         f1:90:24:d4:83:1a:f7:08:52:c6:48:4d:cf:a1:81:51:54:18:
         92:aa:03:e1:df:d5:c8:34:e9:5b:44:9a:24:64:77:83:1c:65:
         05:d0:67:bc:9e:a2:97:9f:f0:18:fd:4b:ff:85:a2:3b:38:77:
         d4:c7:98:43:62:61:fa:d9:30:14:45:d0:3f:cb:4a:12:b3:3a:
         7f:e9:38:e2:0e:25:1c:e4:c1:e4:db:18:a6:a3:98:23:7a:3b:
         a3:8a:cf:2e:0d:7a:86:cb:61:50:0b:d8:ee:e2:e2:1a:ce:ef:
         bb:22:16:49:27:e2:d6:70:ab:98:97:25:07:c0:83:38:1e:2b:
         30:a4:67:1c:e2:58:5c:a7:d1:d9:57:f3:3d:3c:29:6b:cf:77:
         1d:d0:46:8c:04:b4:2d:74:3c:6e:7d:5b:4a:0f:9b:b7:12:7c:
         fc:5c:6e:88:a3:4e:46:74:1c:d2:c3:e0:a0:c3:0d:b6:0d:6c:
         b1:03:c1:fa:3e:da:cd:c3:47:3a:bc:94:f6:c1:89:3d:9b:77:
         87:6c:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:43 2026 by rpki-client