Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File:                     3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier:          m82HkLnrvy5HjWJ4gZlF7AFf/D+3+WmBrtF8RSwIWEE=
Subject key identifier:   DC:8F:83:36:9D:73:24:A1:F3:15:7F:48:60:A1:A5:C4:9E:D9:8C:7A
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer:       /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial:       019F8F7FA6B40EA5E4323CBF572A118A3C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:02:15 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:15 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:15 +0000
Files and hashes:         1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: pAuh+waVe5NBD5V4TqDjK/ieqBxzQUzGlKQQKNNUbJU=)
                          2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:a6:b4:0e:a5:e4:32:3c:bf:57:2a:11:8a:3c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
        Validity
            Not Before: Jul 23 15:02:15 2026 GMT
            Not After : Jul 24 15:02:15 2026 GMT
        Subject: CN=dc8f83369d7324a1f3157f4860a1a5c49ed98c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:51:14:58:f1:c4:2d:33:f9:c3:89:a0:7b:e8:
                    fb:dd:ce:79:6e:76:8e:dd:90:03:a6:51:03:b3:bf:
                    b1:11:dd:0d:a4:08:32:38:61:41:b4:d8:79:5a:8e:
                    1d:70:6a:41:cd:ef:29:48:4a:00:ba:a6:8a:d9:a2:
                    de:5a:cf:b3:fd:dd:58:3d:7a:89:fa:de:aa:88:00:
                    13:4a:05:58:f0:5d:8f:74:f2:8c:99:92:3a:4c:3c:
                    6a:b5:bd:b4:50:e2:53:e9:91:98:f4:a4:1d:57:e5:
                    24:60:72:52:63:8a:17:e6:54:ec:fa:19:43:68:f2:
                    63:60:6c:b8:cb:9d:8a:be:b6:dc:98:c7:80:70:f1:
                    26:3b:a6:6b:66:23:e3:b6:aa:a5:83:bf:a7:64:e7:
                    79:ff:b6:e6:5c:1c:0f:8b:07:6f:f0:7c:2a:c2:65:
                    fb:36:39:11:c1:8c:a6:9b:38:d3:ef:13:6f:14:c1:
                    a8:28:75:8f:28:90:4a:df:fb:7c:d7:0f:a6:6a:02:
                    1f:35:db:e0:bc:a0:d1:40:36:05:0c:3b:fc:67:6a:
                    12:0d:d3:e9:27:05:ef:e8:81:bd:96:3d:b3:a3:b5:
                    ed:bb:ed:e6:59:98:77:41:e8:05:05:ea:ac:b0:f3:
                    28:2c:46:b1:84:6c:bc:e7:19:2c:77:90:49:d7:e8:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8F:83:36:9D:73:24:A1:F3:15:7F:48:60:A1:A5:C4:9E:D9:8C:7A
            X509v3 Authority Key Identifier:
                keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:cc:39:21:0e:3d:02:34:ba:46:d4:14:39:74:fd:69:5a:
         ef:af:51:22:03:69:70:45:b5:70:c6:5e:fd:2f:2c:b4:ba:cc:
         9e:d6:c3:46:30:2a:d5:5c:98:09:4f:ff:1c:79:68:0a:f4:18:
         8b:7a:8d:52:f9:51:16:07:d3:25:6b:0b:19:49:e5:94:a0:ed:
         4d:7c:ac:3c:94:23:ec:d5:a4:0d:0a:b2:40:ca:03:68:16:21:
         ff:17:26:91:c8:49:0c:b7:6f:2e:14:35:75:ba:7d:7e:b9:19:
         ed:71:98:5d:fd:60:b2:75:9b:38:06:d4:7a:ee:7a:02:00:76:
         fa:c9:55:ba:75:ee:62:d3:dd:68:e9:ac:02:f0:e9:d5:aa:f0:
         1c:2b:58:be:c8:ff:94:71:31:8f:f7:05:bb:30:08:56:61:6b:
         7a:74:65:ff:8f:a6:97:a9:c4:9e:7a:9d:ac:c1:9b:71:b1:13:
         2b:75:9d:d7:8e:32:a8:0d:8b:d8:37:a0:b3:fe:c5:1b:7c:85:
         ce:a4:93:5c:b7:79:68:ca:8f:d5:1f:7d:94:ff:bb:37:ff:1e:
         6c:1e:25:31:d0:0f:8d:46:e5:c9:f1:0c:a4:d8:d6:1e:6c:b5:
         64:39:83:d3:10:ff:b2:0b:f9:62:dc:b7:9e:fd:1c:75:17:61:
         e0:2c:0a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:39 2026 by rpki-client