Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File:                     0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier:          XZn42AozzhFm7tUd6AKutVM/vFjFd1JwCfi771ZciZo=
Subject key identifier:   80:08:70:F3:9B:76:35:33:00:E8:74:67:72:55:74:31:8C:30:DC:53
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer:       /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial:       019F8F7ECE754CCF5056599F7E1F9FAC624B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:19 +0000
Files and hashes:         1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: YrDRV/OQA9c8zEceGSfWttD2VZvYYl7tRkIoAx2aWCI=)
                          2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:ce:75:4c:cf:50:56:59:9f:7e:1f:9f:ac:62:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
        Validity
            Not Before: Jul 23 15:01:19 2026 GMT
            Not After : Jul 24 15:01:19 2026 GMT
        Subject: CN=800870f39b76353300e87467725574318c30dc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:3b:77:59:bf:8b:36:bf:a8:df:76:b0:18:
                    74:91:ac:2e:15:0a:b0:be:bc:1a:1a:7f:26:f9:b6:
                    04:77:8e:d0:17:5e:f8:f0:42:f6:e6:53:51:6f:ca:
                    72:31:03:81:40:a7:d0:7b:d0:dd:20:1b:b8:34:37:
                    cf:b7:55:f3:98:06:44:25:a9:4e:78:c2:80:5a:24:
                    e9:9c:65:98:8f:0d:dc:c4:4a:f5:b4:a3:fb:ac:44:
                    08:22:be:78:80:49:6c:8e:1b:aa:b6:c2:6f:b8:58:
                    7c:52:f4:08:02:90:ba:89:05:15:3d:df:22:e6:4b:
                    4c:1d:1c:d3:1b:a9:e1:e9:f9:c2:b5:d7:37:e0:b8:
                    df:10:35:37:bd:78:c1:04:1e:58:d9:1b:de:e0:99:
                    19:4e:38:8f:d1:4d:bf:71:50:0c:8d:a3:6a:d2:ae:
                    3f:c9:1e:7f:86:d3:1b:0e:45:71:1f:84:0f:78:ac:
                    5c:a0:7e:b6:8c:1e:a4:71:55:65:9e:c6:e4:a2:a2:
                    9e:40:49:e1:5c:c6:89:aa:53:ec:01:66:7d:db:84:
                    a3:99:db:4f:8a:cc:c3:fe:bf:e0:75:77:ea:3c:09:
                    aa:5f:5c:a6:c3:6f:73:d2:ea:0f:79:32:45:e4:26:
                    9c:a1:98:8f:0f:40:8f:6b:58:96:34:df:f4:07:e2:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:70:F3:9B:76:35:33:00:E8:74:67:72:55:74:31:8C:30:DC:53
            X509v3 Authority Key Identifier:
                keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:23:1d:a6:5e:b1:56:65:e8:23:38:45:3a:41:be:fd:8d:7e:
         4c:33:8d:9e:4f:58:53:cf:5c:b1:ac:fc:11:34:de:34:7b:e1:
         ec:bf:7e:6b:87:d1:15:b6:05:86:47:db:9d:04:a0:61:6c:3d:
         15:cb:12:c4:b1:1c:80:f8:62:10:6e:98:2e:e5:b7:fc:59:39:
         07:59:ea:d5:b9:a4:bb:6f:79:33:7e:51:d5:5a:90:28:f5:ea:
         8b:99:6e:8e:cf:66:12:51:87:39:a8:2f:b3:b4:8a:04:43:a9:
         60:b5:7d:31:d3:fe:ef:28:d5:c7:fb:0e:60:96:57:5d:f2:4f:
         49:06:e4:dc:22:23:10:31:d8:e5:dc:e0:62:da:3b:8c:c6:c4:
         4c:19:5a:38:f5:40:84:a9:5d:37:16:ea:2f:13:49:5a:5c:c4:
         f4:4f:2e:60:dd:8a:0a:08:07:b0:9d:3f:37:7e:df:07:9d:8d:
         1c:33:88:57:b0:9f:5b:b0:47:62:9b:46:77:9b:dc:2e:85:8e:
         08:50:be:a1:99:37:6b:72:cc:88:bb:22:05:a4:e5:4d:16:46:
         a4:78:89:f4:f1:9f:00:e0:9c:a6:7e:16:bd:68:3e:4a:97:e5:
         d7:3c:08:e7:1e:5e:87:0e:24:7f:50:e3:04:83:3d:26:d0:d5:
         65:7d:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:51 2026 by rpki-client