Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File:                     3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier:          mqLDMEyE7aYioxC+QQANgPM9eZk3qW3rqeqHPe+gcz0=
Subject key identifier:   97:9D:BB:20:7B:AE:00:F8:1F:D0:AE:A9:25:E8:0E:87:3A:DA:C2:2D
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer:       /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial:       019F905A6381C9F3222DC37C37453D6AE135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number:          19D9
Signing time:             Thu 23 Jul 2026 19:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:10 +0000
Files and hashes:         1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: 4FSyjETCWxL3R0V+Sj7QSLfPqz5fxVLdGDssQIUkkVw=)
                          2: 7vheWt636zaXPWY7-s5DyNEvcCk.roa (hash: yHddO5nWyrrRYQwmZYLYDVw2iZ9LZ47A/NrBl7ewM1Q=)
                          3: GtwmzzfSMyQuHA5xN2h8yl_66bg.roa (hash: b0cWR0WKtHBGdUpy+EpGKcmMMtl7w7UTXQhFBWlOy0A=)
                          4: syWk75JGny34Q7aH7yGz8UWltwM.roa (hash: lGizpp26YDLi0eoTG2nJ/NGlhRSSauEEXdm5wIZ3bqo=)
                          5: yowCytNDfEjr6iMV6-jVqrYVTnY.roa (hash: Qecp8oYwO0klWaPBXtOGO2cs0a85Z+pJ/Flg2E7BAJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:63:81:c9:f3:22:2d:c3:7c:37:45:3d:6a:e1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
        Validity
            Not Before: Jul 23 19:01:10 2026 GMT
            Not After : Jul 24 19:01:10 2026 GMT
        Subject: CN=979dbb207bae00f81fd0aea925e80e873adac22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:16:f7:a7:9a:d7:0e:6b:c9:dd:f8:3a:42:
                    55:22:94:bf:de:f7:2b:26:a1:69:8a:31:ab:76:4e:
                    64:34:50:58:ac:70:84:5a:c3:79:5e:99:a4:17:e2:
                    34:73:91:39:c2:67:4c:a0:36:f7:7f:76:d3:ba:70:
                    06:8a:62:f8:53:d2:10:21:b4:ee:10:76:68:35:34:
                    38:f1:5a:a4:2a:90:d0:5b:8d:70:f6:1f:1a:4c:9f:
                    ab:da:f0:35:7f:b9:fd:b8:2c:75:48:3d:82:a4:68:
                    2b:d3:64:68:52:00:12:c3:fa:e5:bb:71:ce:88:c0:
                    77:35:ca:64:b1:76:67:4f:3d:58:22:87:b1:b9:da:
                    6a:58:84:22:3a:2f:9e:82:9e:c8:9f:e8:91:42:1e:
                    8b:ad:88:7a:d8:0f:6c:50:c4:19:5e:57:18:a2:96:
                    54:54:22:4c:ca:34:7b:27:4f:2b:7e:c4:bb:a2:89:
                    67:b7:f7:99:71:f0:1b:e4:97:9d:87:0d:01:17:7a:
                    69:35:04:20:75:8f:b4:5b:03:e7:23:ed:46:92:da:
                    63:f7:ac:c6:9d:c5:5e:ac:34:cf:fb:a0:fb:09:d0:
                    d2:c8:ed:08:6d:6f:a3:f5:17:cb:4f:c8:97:18:54:
                    bd:5c:2b:5c:8b:21:e9:ec:c1:5d:f5:60:06:2e:d8:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9D:BB:20:7B:AE:00:F8:1F:D0:AE:A9:25:E8:0E:87:3A:DA:C2:2D
            X509v3 Authority Key Identifier:
                keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:25:39:95:83:20:54:4c:de:5d:c8:67:26:a0:f9:a4:20:
         c0:1f:22:5c:d9:77:c5:01:3b:31:9f:66:15:40:a2:80:27:84:
         dd:0e:7d:97:1e:47:1d:f4:38:9e:b0:cb:72:d9:fb:0b:e1:d8:
         dc:0b:1f:d9:c9:4a:c9:16:11:59:24:18:22:a1:0d:46:e9:03:
         a2:68:7a:d3:55:88:ec:ad:df:f8:05:46:56:33:10:4b:d6:e9:
         ba:49:87:21:c5:3f:14:4c:bb:65:52:82:7f:1a:d8:42:85:23:
         41:60:13:5c:bc:0f:d0:99:8b:70:e8:99:1c:2d:a9:43:e4:a6:
         cb:04:ef:c6:f6:ed:38:ec:b9:f7:a9:5c:c0:d1:35:59:03:c8:
         e0:03:9b:07:4f:ab:92:72:db:38:90:cc:67:70:6c:6a:dd:46:
         77:5a:42:fa:0b:88:72:03:56:fa:29:45:85:93:03:82:2a:6c:
         2e:05:73:4d:7d:81:2e:4d:b2:ef:55:89:6f:53:69:b5:93:c0:
         17:4b:94:86:05:5f:08:5c:fd:44:19:8c:e1:1e:b8:cb:1c:aa:
         d7:78:f5:18:63:94:1e:19:27:dc:a7:8c:3d:7c:70:8c:18:4f:
         fc:6e:18:c9:52:70:da:ce:9f:88:97:9a:35:f8:4d:ea:a8:83:
         76:8f:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:57 2026 by rpki-client