Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          HpFdY66Cf8tTjR1QnxRraSkMsn7fifV3f4gMEHe3gB4=
Subject key identifier:   19:8F:28:50:24:4E:A5:4D:B2:62:E9:46:F3:82:FB:18:C0:E3:02:0B
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       019F9090C3AC00CFFE0739CFFE463F4AEA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          19D7
Signing time:             Thu 23 Jul 2026 20:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:34 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: VW+YyasUK7OU7IKwc5NKwEQQqcZkXVH6cgtV0JWytXs=)
                          2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=)
                          3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=)
                          4: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=)
                          5: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (hash: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc=)
                          6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=)
                          7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c3:ac:00:cf:fe:07:39:cf:fe:46:3f:4a:ea:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Jul 23 20:00:34 2026 GMT
            Not After : Jul 24 20:00:34 2026 GMT
        Subject: CN=198f2850244ea54db262e946f382fb18c0e3020b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:bf:13:a4:1d:b7:9d:79:ec:00:f4:e4:a5:
                    7c:1b:7c:ab:c9:42:98:6a:f3:dc:13:b3:5f:d7:8d:
                    5d:cd:eb:a5:b9:37:18:53:40:9c:32:cc:0b:ad:bf:
                    73:0c:c3:e2:9d:b9:eb:cf:6c:20:57:ee:8f:fd:9c:
                    46:37:67:3e:0b:1c:94:4d:79:1a:58:a8:4b:f0:93:
                    f6:67:85:3f:a6:24:49:df:eb:67:99:9d:92:58:95:
                    b2:fc:58:1e:08:e0:f4:fd:92:b1:82:9d:c1:08:ff:
                    11:fe:2d:22:ad:11:73:bb:ef:01:06:c7:4f:5b:21:
                    16:3d:77:6f:b2:42:05:51:53:4b:0b:98:91:1d:4c:
                    8b:70:4b:2c:c0:9b:df:c8:b5:b9:13:eb:60:5c:46:
                    bb:ff:5b:d9:75:68:e7:89:c5:1d:62:66:40:ac:2b:
                    6f:b2:9b:f7:8a:84:7f:01:d7:22:7e:6d:b9:18:b9:
                    03:9a:f3:db:b0:65:9b:c0:92:48:0f:87:a8:fb:6e:
                    be:eb:63:79:c6:4a:63:fa:ae:01:b5:fa:e9:30:86:
                    9d:60:e4:6e:77:c7:e8:4c:f5:71:fe:22:08:11:b3:
                    bb:a5:e5:e7:57:0b:a3:b0:0d:44:8c:8d:ce:8a:05:
                    63:dd:25:94:ad:61:68:39:3e:86:ae:09:30:b7:9c:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:28:50:24:4E:A5:4D:B2:62:E9:46:F3:82:FB:18:C0:E3:02:0B
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cc:5e:96:94:4b:5e:af:84:63:9a:52:9b:4b:1b:c1:46:14:
         de:05:e1:86:5e:d0:eb:a2:7c:9b:f9:cf:83:b7:65:98:d3:b9:
         cf:9d:9c:d6:64:1f:66:77:55:19:49:e8:39:95:9a:13:c7:9d:
         16:24:ad:2c:85:3b:7d:58:82:91:37:c8:56:b1:be:79:c9:95:
         ad:75:68:1d:b8:22:55:fa:f3:d9:df:de:77:c0:b8:60:bc:a7:
         44:45:cd:90:6f:e4:f7:cb:32:81:56:e9:a9:6b:9a:12:a7:d9:
         b4:79:d7:c7:41:22:66:7c:44:bf:5f:ef:4e:fe:10:c7:cf:e8:
         d2:27:bc:64:d1:04:d2:54:2b:f6:d4:6c:d9:59:6b:5f:13:80:
         27:9f:78:4f:e7:5d:e5:97:ad:77:42:5d:8d:7a:b9:1c:27:6e:
         3c:ad:df:55:2f:01:13:a6:6a:c5:32:53:4c:b3:d2:1b:68:49:
         40:d7:f3:1a:40:97:0e:b7:a7:88:79:d1:73:3e:ef:b1:4c:9a:
         b6:30:56:ad:79:e7:08:5a:33:e8:cc:f5:92:50:9f:45:5a:ca:
         c5:a8:27:58:38:2d:b9:18:15:ee:a2:86:c3:17:e1:57:9d:73:
         8d:ef:37:21:9f:b2:5d:a8:d7:c9:91:fd:4a:d3:ee:2a:f9:20:
         69:48:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:57 2026 by rpki-client