Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
File:                     3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft (raw, json)
Hash identifier:          WDAWqWUQZXPGHHD6cwLbfXqOmZ1GV329Er7sC9BVTyU=
Subject key identifier:   C9:95:A4:75:E8:1F:4B:70:70:6A:19:73:97:63:E4:20:F8:97:80:7F
Authority key identifier: DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
Certificate issuer:       /CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Certificate serial:       019FCE945DB15E1C36A0CD8D70141500944E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
Manifest number:          2E
Signing time:             Tue 04 Aug 2026 21:00:57 +0000
Manifest this update:     Tue 04 Aug 2026 21:00:57 +0000
Manifest next update:     Wed 05 Aug 2026 21:00:57 +0000
Files and hashes:         1: 3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl (hash: 0ypfOgg1fXFez1H/vykyX+xFoVMd8QwUp3D05W+SJ4o=)
                          2: YSaufGYoBysG3Rq1JUwdvPVJmZs.roa (hash: 2pr9ejGkAE15sKcxVgGTcGKhYKEWqsjrG3vEI1IlltQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ce:94:5d:b1:5e:1c:36:a0:cd:8d:70:14:15:00:94:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
        Validity
            Not Before: Aug  4 21:00:57 2026 GMT
            Not After : Aug  5 21:00:57 2026 GMT
        Subject: CN=c995a475e81f4b70706a19739763e420f897807f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ae:e3:7d:fe:0e:f3:44:9c:d5:40:f0:5c:9a:
                    9c:c5:e0:cb:48:1e:35:03:77:7b:ce:b6:b0:36:d8:
                    16:3a:36:4d:a6:70:20:3a:1c:8f:e4:74:68:93:ef:
                    60:d8:3e:d0:70:99:ac:54:bc:e6:b8:32:f6:fb:89:
                    67:06:5c:f2:36:a4:f3:e9:67:24:24:8a:6c:0b:f7:
                    c8:8b:0c:96:57:a5:f9:22:95:9b:81:01:81:94:14:
                    81:34:0c:f3:67:21:46:13:39:6a:be:4c:54:26:59:
                    1a:2a:ce:b1:ce:dd:29:b2:52:44:21:38:6a:3f:23:
                    e0:91:29:9a:9c:d8:4c:8e:de:6c:12:83:1f:a2:ba:
                    91:93:2a:19:8e:db:2c:8c:70:d3:0c:22:d0:86:28:
                    f7:ae:a8:ab:2b:08:d3:52:9d:78:1d:a8:3b:dc:4d:
                    f8:4a:a3:71:42:39:ba:cb:48:56:f7:2f:ad:54:5a:
                    6b:bc:fa:e2:9e:61:c9:12:3c:12:bf:2a:a8:b6:cb:
                    f2:30:c3:25:18:15:5e:9f:33:60:63:ac:5a:6c:d9:
                    c0:c9:bf:b2:65:1c:b1:ee:a3:15:78:3d:a9:b1:6c:
                    38:c6:f0:ab:c7:9b:73:a9:6f:2e:41:10:9b:90:f4:
                    12:2f:9f:ad:cd:ac:b8:f0:a5:ab:40:2a:f6:ad:95:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:A4:75:E8:1F:4B:70:70:6A:19:73:97:63:E4:20:F8:97:80:7F
            X509v3 Authority Key Identifier:
                keyid:DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:d9:bb:d5:53:b6:d6:8b:d2:7a:e1:17:b5:c8:fc:f9:61:
         e5:08:fe:c6:d6:00:cf:03:3d:51:f4:72:76:7f:52:98:8f:33:
         f3:61:b8:cf:f1:e5:c1:8d:29:97:47:4f:3c:9d:38:94:ad:c7:
         ce:8d:47:57:5d:16:15:c1:aa:8d:36:85:31:99:5a:64:b3:e7:
         11:74:0c:d7:8c:87:e4:85:fb:93:76:10:f9:6b:76:6e:cc:cc:
         6b:2b:f8:e2:b8:8a:ce:e1:65:f0:f8:9f:91:3d:2a:01:66:91:
         c0:b0:91:e9:45:5d:ef:56:32:7f:9d:f0:da:75:4f:75:d9:d7:
         ea:08:a8:69:68:54:9d:f3:63:5b:88:bf:c0:d7:cf:c1:c4:89:
         eb:e5:af:d7:68:a3:75:99:f3:30:b3:16:da:ed:45:8c:c1:a8:
         ad:49:77:9a:e0:f7:a3:9c:10:15:f9:97:7a:24:dd:a8:d0:ba:
         62:39:7e:c5:8c:9b:53:a6:b3:19:bf:03:8a:3b:b2:d6:cf:58:
         0e:aa:2d:fa:d1:56:70:c1:d6:a7:a6:30:81:2d:d2:ca:7e:52:
         41:6f:2b:3d:5c:88:ef:cc:7a:1f:4c:e4:22:8b:f1:0b:5c:08:
         a3:c2:6d:0b:f6:2c:20:01:19:52:ed:c2:82:63:09:2a:d1:0e:
         da:40:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:30:46 2026 by rpki-client