Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          rboJySRvCEY2fYxqnf5tvSZGGgg/Za0RMQ8sztBK+8g=
Subject key identifier:   C4:D0:4B:18:48:A9:53:DC:2C:D8:82:88:EF:BE:25:5F:EC:EC:BD:07
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       019F91A442E3B639A17199AAEB346F77CF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 01:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:29 +0000
Files and hashes:         1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: Ml5o7ARyQX665Ce4e6y6ykz1qy4H7ATCbNHgYGU4qOM=)
                          2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
                          3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:42:e3:b6:39:a1:71:99:aa:eb:34:6f:77:cf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Jul 24 01:01:29 2026 GMT
            Not After : Jul 25 01:01:29 2026 GMT
        Subject: CN=c4d04b1848a953dc2cd88288efbe255fececbd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:75:3a:5d:a8:e1:b6:ba:d1:d1:3f:eb:67:
                    3f:ec:d0:1b:7e:47:8c:03:49:56:e7:af:50:d1:37:
                    c8:ff:06:20:4c:5c:29:2d:be:ca:30:e0:db:5d:a0:
                    76:80:7f:c5:be:57:b5:9e:a2:74:3b:c1:23:9c:15:
                    c5:c2:85:10:ee:d9:eb:3b:3b:ce:6a:7f:72:1d:df:
                    9c:e6:c7:dd:6a:84:33:4e:4a:da:97:54:a6:c9:4b:
                    42:5e:0b:aa:71:fb:a1:ca:99:8a:8f:43:e1:54:ac:
                    79:f0:80:ba:37:79:47:f6:d7:ff:5d:b3:66:64:f3:
                    dd:3f:0e:8c:57:85:83:ce:3e:c4:12:ea:d1:93:66:
                    09:c1:46:22:87:c9:4e:25:06:0b:71:c4:4a:54:1d:
                    69:ef:e5:6e:30:b6:37:d6:57:8c:36:88:b4:ef:80:
                    11:27:a1:cb:eb:0e:75:a1:56:b5:41:0b:86:a0:d4:
                    37:cd:8c:0e:00:fe:61:54:3e:6b:1c:02:f9:13:6b:
                    87:51:1b:a0:d7:c5:4e:b1:bc:b4:bf:b0:77:db:80:
                    48:af:4e:99:34:46:fa:c9:0a:59:a4:07:c1:58:dc:
                    b7:5c:d6:2e:32:24:6d:af:da:01:f7:ec:ef:8f:36:
                    4a:a4:d5:c4:4e:53:d6:56:d1:65:35:43:11:5d:6c:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D0:4B:18:48:A9:53:DC:2C:D8:82:88:EF:BE:25:5F:EC:EC:BD:07
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:95:e3:1e:d8:1c:a4:9a:d3:b2:05:71:52:72:1d:a6:01:f3:
         50:36:b4:1d:43:f3:69:09:d6:67:8c:69:76:a6:f8:55:a8:d8:
         1d:f3:74:bb:5a:62:2e:19:3e:df:d2:f3:de:1d:a7:2d:d3:1b:
         3d:9f:84:7e:b1:b5:a8:75:0a:4f:26:85:27:c1:1d:02:af:cd:
         e6:cc:20:08:91:83:9d:a6:7c:bd:3a:55:67:be:cb:7a:13:85:
         91:81:6b:46:c8:da:06:f0:b7:6f:90:5e:f4:c2:93:ff:11:7e:
         20:91:ba:8f:7d:11:36:dc:16:b8:ea:8d:71:89:af:25:3f:00:
         03:c3:ff:52:89:ab:f3:55:3e:19:ac:4e:3f:73:f3:dc:e7:94:
         10:c6:3a:58:4f:35:41:09:91:85:9f:26:b8:cc:6e:cb:b8:4f:
         64:a1:ef:01:1c:5c:dc:b5:5b:5f:c6:6f:05:b7:51:25:58:72:
         a0:de:2e:63:8e:22:86:15:18:8a:ef:cb:68:d8:18:fc:ac:c3:
         c6:e6:71:ab:67:ec:60:2e:82:46:01:ed:76:c7:fd:08:fc:ee:
         d3:22:ad:6b:2b:f3:6f:1f:9c:04:14:e9:c6:c3:02:dd:83:fb:
         6a:11:89:6f:61:3e:b1:3b:8e:6b:e3:9f:25:e4:9b:9c:f7:e6:
         2b:70:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:19:56 2026 by rpki-client