Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
File:                     90-38fOtVK0sWao0kkVpj_QHNBg.mft (raw, json)
Hash identifier:          xGdnIr3WrxPH7o73S70vPuHlUxOOEJ/PLXsL6zbmgDc=
Subject key identifier:   6B:DA:88:5F:B4:2A:CB:4A:25:EB:61:23:02:53:C4:9E:50:1D:EC:48
Authority key identifier: F7:4F:B7:F1:F3:AD:54:AD:2C:59:AA:34:92:45:69:8F:F4:07:34:18
Certificate issuer:       /CN=f74fb7f1f3ad54ad2c59aa349245698ff4073418
Certificate serial:       019F8F7E24C21A76774FB77BF62506A83C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:36 +0000
Files and hashes:         1: 90-38fOtVK0sWao0kkVpj_QHNBg.crl (hash: JkJAp3tme+iyjfhXekC5B5AOY1SM9KDQytE00aP24n4=)
                          2: OkOk-j0-bh0idb2MTuVUkDe6RSk.roa (hash: nng+tq68ZftNWYIkaMIONAJZIrYod8lUFAHJdmJKUQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:24:c2:1a:76:77:4f:b7:7b:f6:25:06:a8:3c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74fb7f1f3ad54ad2c59aa349245698ff4073418
        Validity
            Not Before: Jul 23 15:00:36 2026 GMT
            Not After : Jul 24 15:00:36 2026 GMT
        Subject: CN=6bda885fb42acb4a25eb61230253c49e501dec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:92:72:e2:90:a0:8e:bf:42:90:f3:a0:b2:
                    5c:ba:eb:e8:46:57:af:5b:27:8a:54:4d:ed:aa:b0:
                    e3:94:2f:88:8b:48:aa:aa:47:23:a7:32:a2:93:11:
                    25:f4:cc:a6:73:52:5f:05:bd:40:e8:09:7f:5a:7b:
                    9a:ff:b9:dc:5e:31:5a:ca:5c:c9:82:43:b4:8d:aa:
                    42:1c:7e:99:d5:2b:51:4b:75:2f:87:b4:4e:4f:e0:
                    9d:dd:d0:ed:7d:08:fc:ff:fa:42:a3:e1:86:51:0b:
                    24:08:df:0d:ab:84:03:8a:17:3c:57:e1:63:17:6c:
                    a8:3b:2c:f8:eb:4c:28:5f:b2:3e:ed:45:bc:32:1a:
                    f1:01:bc:e7:2a:c7:6e:17:63:aa:57:16:63:8b:e9:
                    34:eb:3b:6d:af:2e:d9:af:7e:50:30:88:d9:d9:39:
                    15:d0:f7:4d:32:37:2b:eb:4e:3b:0d:82:25:b0:97:
                    ad:9a:a9:8b:5f:a8:5c:5f:06:c6:6a:24:f0:e8:64:
                    66:05:4a:7c:0d:ab:dd:a4:ce:2e:06:6b:6e:fa:de:
                    41:c8:48:d2:8a:f1:90:6d:c5:a4:bf:1e:27:62:a3:
                    0b:c8:2d:d0:5d:bd:66:53:7c:f1:50:a0:52:d0:47:
                    32:9a:cd:db:db:4a:dd:df:07:8d:c0:34:2e:a8:e6:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:88:5F:B4:2A:CB:4A:25:EB:61:23:02:53:C4:9E:50:1D:EC:48
            X509v3 Authority Key Identifier:
                keyid:F7:4F:B7:F1:F3:AD:54:AD:2C:59:AA:34:92:45:69:8F:F4:07:34:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90-38fOtVK0sWao0kkVpj_QHNBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/90-38fOtVK0sWao0kkVpj_QHNBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:c5:db:6a:3b:5c:99:e1:1a:dd:76:3e:7a:75:4e:bf:16:
         f4:43:06:60:9c:f7:03:47:57:d4:68:a6:80:0a:53:c9:e0:56:
         5f:cb:cb:32:af:b9:09:da:b8:5c:d5:f3:a7:01:8f:7c:47:3e:
         4a:6e:c2:54:9b:f3:f6:ec:16:bf:b9:04:4a:f8:00:15:d6:7f:
         52:b6:91:69:d7:4b:26:99:f2:da:ed:13:e6:16:c6:3e:15:d7:
         05:41:12:2c:14:a9:97:af:24:eb:b9:b2:ea:e9:3c:e6:ed:34:
         ef:ce:ff:14:74:0f:5d:95:f0:31:78:48:5f:fa:7f:55:0f:10:
         33:7b:dd:45:c3:cc:e9:2b:a2:50:32:d6:66:c2:70:34:a7:78:
         87:aa:21:72:c4:8d:53:88:a2:85:bb:86:4d:f4:57:53:1d:8e:
         d1:36:72:1a:f3:47:46:23:08:19:ae:4b:d7:12:8c:a8:36:8c:
         49:8a:86:88:15:cd:e7:b8:81:0c:b9:55:cf:ea:e9:45:60:04:
         7e:59:d5:c6:79:b0:ef:96:44:d5:5d:43:38:99:da:65:44:5f:
         83:48:9f:fb:bc:42:7d:a4:21:e1:01:b4:a4:87:1b:b4:7d:7f:
         b8:fa:e0:51:57:47:26:9b:f3:32:b4:e5:17:af:e6:74:a9:0c:
         6e:8a:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:14 2026 by rpki-client