Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
File:                     071kNvoORRSIST9pLHbb_fZUo9U.mft (raw, json)
Hash identifier:          oo8h/7UAw4EAHw3vIJXCaSMx8eMFcR7a3xaq2A69bwM=
Subject key identifier:   59:15:8B:09:6C:FC:71:ED:3B:B0:89:25:ED:81:9D:54:1F:86:50:7A
Authority key identifier: D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5
Certificate issuer:       /CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
Certificate serial:       019F90915DB38396DFEE93B132254BAE885E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 20:01:13 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:13 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:13 +0000
Files and hashes:         1: 071kNvoORRSIST9pLHbb_fZUo9U.crl (hash: xlHft79sechw06S+iUVwIdJthf3QeY9vNRAW9J66MpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:5d:b3:83:96:df:ee:93:b1:32:25:4b:ae:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
        Validity
            Not Before: Jul 23 20:01:13 2026 GMT
            Not After : Jul 24 20:01:13 2026 GMT
        Subject: CN=59158b096cfc71ed3bb08925ed819d541f86507a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:c2:55:d7:c2:4d:0c:e9:89:c0:dc:47:f8:
                    dc:14:67:dc:e6:ea:21:2e:94:0f:97:4b:83:08:e0:
                    35:37:46:64:62:37:ee:a4:88:ad:79:df:cb:fc:29:
                    d0:3e:03:b2:80:d8:81:06:7e:92:ae:a9:bc:8a:cb:
                    3c:1f:7b:b9:b8:68:7e:d1:37:6f:b9:e7:6a:b9:60:
                    a0:89:c1:a4:4f:f6:de:e4:95:9e:fd:bc:f8:a8:ef:
                    05:40:23:fb:7f:2b:b8:55:77:62:c4:34:43:5e:18:
                    9b:fd:56:91:50:5b:37:e1:0f:de:24:1b:70:64:23:
                    fa:4e:54:61:89:33:1f:f2:78:37:24:68:80:26:e6:
                    2d:a0:79:9c:74:c8:5e:86:f1:d4:c1:80:ed:27:59:
                    97:12:f8:1d:48:ab:82:66:21:ce:8e:7c:2d:66:81:
                    d3:67:35:97:2d:16:01:98:60:5a:96:2a:87:ff:92:
                    6d:66:ba:da:db:c4:da:7f:06:60:e1:8d:55:a4:15:
                    16:61:c2:7d:46:42:ef:1e:af:fc:a7:96:ac:20:b6:
                    f3:b9:0e:e0:33:c4:0c:82:f6:66:da:d1:74:a9:ee:
                    ac:76:8f:8a:81:cf:26:60:95:70:e9:48:8f:a9:65:
                    cc:c6:db:5e:e2:1f:c5:2d:05:ed:c9:d8:7f:40:17:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:15:8B:09:6C:FC:71:ED:3B:B0:89:25:ED:81:9D:54:1F:86:50:7A
            X509v3 Authority Key Identifier:
                keyid:D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:a7:67:e5:80:23:81:d6:ef:88:f9:2d:68:18:a2:3e:3d:
         3d:8a:f7:ed:88:a3:ad:9d:53:15:f7:23:e8:45:87:3c:a9:d2:
         47:55:ba:15:96:bf:c6:c2:5d:30:35:7b:ac:fb:a0:5b:33:c3:
         44:21:55:91:c6:3c:dc:ac:0e:01:a8:38:82:92:77:8d:22:c0:
         4c:7f:2d:7c:7c:c3:a2:26:9c:3d:54:7f:17:6e:fc:23:46:b0:
         23:e4:e3:df:f8:c0:9c:a2:c2:f6:48:8c:ac:ca:dd:20:c8:09:
         8f:b8:56:c4:a9:05:e1:96:2d:a3:d9:5c:99:1f:50:5a:09:8e:
         0f:8a:cc:0c:b7:16:33:13:d4:0c:7f:fe:dd:86:bf:d4:ab:36:
         35:60:63:c9:b0:f9:c5:83:f0:c1:6e:2e:87:fa:1c:79:27:00:
         7b:2c:3f:6c:51:9a:ce:75:a3:34:a2:2e:2c:29:9a:fc:9d:54:
         24:e0:46:65:c5:a2:bc:fe:db:75:1a:28:e7:75:55:a3:2f:58:
         a5:27:8e:48:ef:97:60:8f:5c:33:b9:c7:44:fc:65:95:c1:66:
         de:dd:be:b2:d9:33:11:e7:26:47:75:55:25:b6:83:83:fb:2b:
         5c:21:7b:e0:a1:af:da:ba:09:5f:fe:ea:29:f3:8c:47:83:c8:
         db:72:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----