Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft
File:                     3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft (raw, json)
Hash identifier:          MON+6PzyVGThmQUsYe4BKOxfyuKxOzrGT2dH7DmsATQ=
Subject key identifier:   F4:08:8F:DB:21:AB:9D:6C:6C:C0:E7:AF:D3:65:69:13:A2:00:F4:31
Authority key identifier: DC:7A:7A:CC:37:27:67:7C:61:F9:53:A5:6D:B6:74:22:2D:D9:DC:58
Certificate issuer:       /CN=dc7a7acc3727677c61f953a56db674222dd9dc58
Certificate serial:       019F8F7F75B8ACF0DFBD56CD0760D39FEB74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:02:02 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:02 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:02 +0000
Files and hashes:         1: 3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.crl (hash: Y+/6oXltn/1Xj0ryq9RgNyFM6pwqigHS8d2B2UH3g4Y=)
                          2: FXRcAjgkpmv9_04G_erJcj8FC0w.roa (hash: DFFl0MC0xV/5V3CPD1Y6fro75hMfwfJ9cZDj7NfhDuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:75:b8:ac:f0:df:bd:56:cd:07:60:d3:9f:eb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7a7acc3727677c61f953a56db674222dd9dc58
        Validity
            Not Before: Jul 23 15:02:02 2026 GMT
            Not After : Jul 24 15:02:02 2026 GMT
        Subject: CN=f4088fdb21ab9d6c6cc0e7afd3656913a200f431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:51:14:17:c1:03:b8:53:27:3d:52:5e:f5:
                    c1:f6:18:76:e0:d9:1d:7e:63:23:76:fa:57:c9:19:
                    2e:55:de:e0:ca:20:ac:46:01:58:47:72:d5:07:50:
                    1c:2f:4f:11:b1:40:07:25:38:9a:65:0d:3e:bb:b6:
                    b8:29:97:89:17:2f:c0:fc:32:47:dc:0d:0e:09:9a:
                    10:61:47:2d:a2:b7:46:68:67:c8:eb:3d:e1:96:f4:
                    47:fa:3e:66:38:bc:46:24:33:7d:b3:ef:9c:c0:6c:
                    1e:3a:0c:42:0a:d4:d4:3d:eb:3d:17:32:6a:d1:1f:
                    5c:96:da:71:92:7c:a5:2a:c9:a8:21:be:40:94:c2:
                    01:03:a5:c2:9a:fa:bd:91:61:a2:8b:f8:7d:c4:c8:
                    90:93:cc:c2:38:14:41:5c:48:a2:fe:e2:63:2d:0e:
                    ce:0e:dd:5b:61:61:14:7d:22:ee:83:58:86:22:01:
                    48:4c:70:f4:c8:cc:a8:35:3e:79:f2:05:42:fe:68:
                    f7:3e:41:a2:4f:8b:6d:40:62:b7:a4:de:7f:a2:fa:
                    b8:5b:ef:a5:4c:96:c0:1b:86:df:38:7c:c2:82:eb:
                    fe:6b:ff:4e:c8:9f:ac:0f:25:ad:7e:76:77:bf:21:
                    6f:c2:c2:84:3a:6f:1b:cd:cf:fb:2e:e7:cc:67:4e:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:8F:DB:21:AB:9D:6C:6C:C0:E7:AF:D3:65:69:13:A2:00:F4:31
            X509v3 Authority Key Identifier:
                keyid:DC:7A:7A:CC:37:27:67:7C:61:F9:53:A5:6D:B6:74:22:2D:D9:DC:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/3Hp6zDcnZ3xh-VOlbbZ0Ii3Z3Fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:b7:05:41:35:42:78:7d:9b:b7:65:95:46:c0:a8:6c:49:
         79:8c:12:b0:ff:ab:51:95:0d:11:d5:90:61:9e:37:a9:10:de:
         63:5c:b8:a5:c8:fc:36:1f:c1:ba:00:d5:3e:7f:2a:8c:68:69:
         75:dd:99:c2:a2:a1:53:79:06:df:96:97:0d:fe:eb:f7:cd:54:
         3c:81:d5:e9:36:5a:49:c9:72:78:7e:5b:c0:41:04:75:79:98:
         32:34:5d:de:19:32:cb:35:fa:c2:97:c6:28:63:e9:4f:26:6a:
         8e:aa:a2:05:a6:db:7b:d5:39:e1:e1:26:ad:b4:e0:54:bb:f7:
         a4:da:10:ae:ff:37:e3:31:6b:46:50:0d:5c:4f:5f:ba:1f:3d:
         4f:94:f4:24:ff:62:cd:e1:bc:94:87:51:6a:0a:7e:c5:97:d6:
         b0:ea:09:3b:85:42:e0:bd:1d:90:ae:22:9f:b6:cf:d8:77:e5:
         4c:e9:9f:fa:72:31:eb:fd:fd:7d:8e:e9:a6:d3:f6:c9:43:99:
         2b:e7:14:d4:9b:f6:c5:7b:5a:4c:e2:a0:ef:6a:90:ad:48:db:
         71:0a:bf:04:d7:ef:e1:33:89:74:fd:11:28:ed:11:43:ad:7e:
         dc:ba:db:b5:99:d4:45:75:3b:e9:8b:6b:de:04:ea:3e:e5:7b:
         81:eb:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:13 2026 by rpki-client