Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File:                     3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier:          tgf00RyAmoBv4xAOykuENAMWMqD+WYgZeSXaU9RHln8=
Subject key identifier:   7E:74:15:B5:93:2F:27:DE:88:48:64:A6:11:35:86:2C:A1:01:01:0F
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer:       /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial:       019F8F7E823AB6223016F8D81571D4FBE007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number:          18E7
Signing time:             Thu 23 Jul 2026 15:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:00 +0000
Files and hashes:         1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: hpFyHb0MRYksBRXbjFbw31V8w92iyRjRp6G3DF6eiwA=)
                          2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:82:3a:b6:22:30:16:f8:d8:15:71:d4:fb:e0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
        Validity
            Not Before: Jul 23 15:01:00 2026 GMT
            Not After : Jul 24 15:01:00 2026 GMT
        Subject: CN=7e7415b5932f27de884864a61135862ca101010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:54:53:cb:a3:52:bb:83:81:8b:63:9b:4a:
                    09:35:fa:c6:c4:f3:88:56:77:c2:5f:6d:77:1b:6c:
                    2d:6a:12:c5:72:8b:7e:58:67:8b:87:12:d5:5d:bf:
                    25:63:2e:1a:55:f9:bd:0f:ef:2e:66:0f:fb:b4:97:
                    d6:6c:f9:a5:af:9b:f3:15:24:d7:f4:4c:33:df:15:
                    6b:e2:b5:0c:40:2a:7f:9b:66:ab:e9:9f:b1:34:65:
                    10:2a:67:1c:4b:e3:57:79:e9:f5:0e:aa:e9:1f:d9:
                    7c:01:32:80:93:cf:61:90:ac:67:e4:77:31:7b:24:
                    02:5f:3a:27:77:ef:88:db:a9:35:df:bf:35:c9:59:
                    c3:90:9d:30:43:1d:d8:8f:51:40:25:59:61:26:10:
                    34:40:62:b7:98:91:d2:02:88:da:cc:8a:25:7a:be:
                    75:65:78:a9:d6:25:b1:60:86:26:ef:00:ea:63:60:
                    df:79:f3:e6:a9:29:f7:64:58:20:63:47:de:06:b1:
                    e4:5a:3e:91:d6:40:93:3d:23:5c:62:2e:77:ad:f2:
                    68:c7:e7:a8:d0:78:3d:78:be:a3:fd:89:5f:3e:76:
                    1a:97:92:f6:bd:ee:fd:38:30:9c:1e:02:53:3c:01:
                    1f:a2:bf:31:83:4e:4e:50:ba:2d:f0:87:31:53:8c:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:74:15:B5:93:2F:27:DE:88:48:64:A6:11:35:86:2C:A1:01:01:0F
            X509v3 Authority Key Identifier:
                keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:84:bc:42:3d:0f:39:86:0f:6c:7b:1f:b0:5a:8a:73:d5:
         7a:72:b3:8e:51:5a:67:39:7f:0a:bc:3d:be:99:bf:ef:bf:b1:
         91:38:8d:ee:0f:bf:ae:9f:d1:53:f3:7e:32:1d:90:be:d7:c7:
         d4:23:81:81:b9:6b:d1:56:ad:50:89:d3:10:97:35:8e:1a:53:
         1a:f1:c4:77:08:83:1c:0a:f9:ad:bc:d3:1a:d7:93:09:a9:21:
         a3:a8:d7:3d:da:a4:30:6e:86:4a:12:e7:f1:ca:d2:0f:54:2f:
         17:b2:81:1d:66:c7:16:2c:ec:03:15:10:ab:a3:35:75:b1:2e:
         d1:15:e1:25:46:ed:56:78:9a:18:ac:1d:51:cc:7d:9a:2c:22:
         e5:b6:6d:98:ab:ab:b3:b7:12:4e:87:a6:08:ce:1d:d0:50:0e:
         e8:17:4c:2d:87:84:c8:fa:66:f6:e3:bf:de:ed:38:a7:c0:4c:
         c0:4e:29:a7:05:52:ee:4e:ef:0b:12:7e:4f:87:b5:6b:2e:0a:
         18:0d:a2:ce:9c:57:1a:52:b0:83:3d:4a:d4:df:5a:81:3d:bb:
         31:0c:67:fd:62:c5:f6:8c:57:08:d5:1a:8a:0a:cd:29:bf:ce:
         cf:71:f3:3c:23:ff:04:9d:82:ee:5d:63:8a:98:b5:b8:c2:be:
         58:c7:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:39 2026 by rpki-client