Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File:                     PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier:          GUw/rCN1jd2YasGOPU0B6+/bvTzdp4fkXe+eBYcGkZM=
Subject key identifier:   E2:B9:7B:DC:61:5E:03:8E:E9:40:8C:0C:7F:4F:F2:D2:29:DE:44:AE
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer:       /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial:       019F9248D361A6FB751A82D74F79E9A579EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number:          0B7F
Signing time:             Fri 24 Jul 2026 04:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:13 +0000
Files and hashes:         1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: XtoRU6PVdDSJto1plgoExdruGBxx/sg5j2N5AAl79bM=)
                          2: o2oMp4w_9TGCM9aisNXx6hIf0dE.roa (hash: 5zj6ry4dUTAYdyPOXRmxJv5IwbCW/zphAyYpf0E3ouc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:d3:61:a6:fb:75:1a:82:d7:4f:79:e9:a5:79:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
        Validity
            Not Before: Jul 24 04:01:13 2026 GMT
            Not After : Jul 25 04:01:13 2026 GMT
        Subject: CN=e2b97bdc615e038ee9408c0c7f4ff2d229de44ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:a1:92:ee:6c:fe:41:f9:3a:5c:e4:0b:f0:
                    c1:b6:6d:bb:95:5b:59:c4:4e:5a:5d:5e:6e:c4:cb:
                    18:b3:05:c4:aa:24:9a:55:8f:2a:fc:90:06:c7:3b:
                    e6:c5:d3:40:43:8d:87:b2:19:59:3a:65:dc:74:c7:
                    b0:77:61:8e:24:40:72:24:0d:9d:a4:b4:60:87:a2:
                    2a:d2:bb:c6:5e:03:75:40:5f:c3:78:26:dc:f8:7d:
                    06:df:b2:f6:1a:66:34:61:c5:47:a2:6a:40:a0:af:
                    54:d5:09:d9:1d:fd:6c:da:43:08:20:b2:a7:ad:5b:
                    43:bc:78:9d:8c:1a:4d:93:6a:c6:1e:27:f9:03:76:
                    f3:34:a4:39:fe:5c:c2:8e:6e:74:94:3b:26:46:82:
                    a7:32:d8:53:4b:9a:37:16:23:09:77:71:90:d9:1e:
                    62:f9:8f:15:c7:64:b9:fd:82:bd:3e:74:39:14:84:
                    f0:5e:5c:0e:a6:03:fe:58:77:08:3d:62:2b:c3:6d:
                    60:53:e2:1b:80:47:66:20:8a:6e:19:fa:92:98:e2:
                    34:24:3b:5e:0b:9e:04:9f:3c:d5:93:c0:e7:80:91:
                    0d:11:3d:8d:7b:38:40:af:32:c4:93:60:06:03:2d:
                    7d:d0:19:f7:91:77:25:5d:44:1d:9f:b3:14:36:62:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B9:7B:DC:61:5E:03:8E:E9:40:8C:0C:7F:4F:F2:D2:29:DE:44:AE
            X509v3 Authority Key Identifier:
                keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:fb:7e:62:0d:ec:22:98:57:d6:b8:c9:3a:aa:0d:bd:67:
         6f:fe:6e:bd:4d:a3:51:59:6a:b1:cc:0b:bf:b2:10:4f:de:dc:
         e3:3a:9a:59:d7:e1:eb:ce:a2:a3:4e:75:2d:b5:63:6c:25:e0:
         f0:17:35:4c:69:a8:b4:b2:a2:8d:3a:43:81:f6:74:e4:05:d7:
         56:80:1e:09:26:07:30:7f:7e:51:bf:7e:58:16:e0:b1:27:28:
         9d:db:bb:d4:8e:be:30:e4:bd:de:80:f0:91:48:81:cb:36:d1:
         35:bd:db:0e:ff:a4:56:34:05:49:48:a2:49:59:d1:0f:f2:fb:
         a4:cc:21:e3:f6:5a:a2:04:bb:b6:c9:83:6d:25:77:4d:46:40:
         6a:40:0a:9b:7d:24:68:6f:3f:8d:c4:99:cd:aa:36:d1:3e:55:
         11:b8:c9:56:7b:dc:d3:7a:76:b0:88:7a:41:83:eb:31:2a:26:
         a2:17:92:d9:03:59:a3:f4:04:c7:83:2b:a0:6d:70:00:c7:4e:
         c3:f7:09:ce:1a:7d:7b:b6:f6:da:47:6d:9d:81:6b:73:a8:ff:
         ca:85:c7:63:13:bc:6b:8f:62:a3:38:7b:d5:54:43:61:c0:77:
         69:94:34:f0:f0:54:7e:35:9c:b0:12:96:81:d8:ac:fa:8a:34:
         48:3d:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:12 2026 by rpki-client