Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File:                     38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier:          kd6UbUXq9BM/MbxiIxSiTYo9gZ2v4zjJmVfiLrRisu0=
Subject key identifier:   3E:24:DF:07:9B:3D:F7:3B:29:D7:82:00:97:0D:26:AD:EC:94:BC:CC
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer:       /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial:       01A001703C44E59B4710231F0A27A850A17A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number:          130C
Signing time:             Fri 14 Aug 2026 18:02:07 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:07 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:07 +0000
Files and hashes:         1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: 5+ENrJ3A64j6LPr+u6gL/IjNb/OtLS4R4prs3wErTjs=)
                          2: DCqCb_mFehnRF04MWwWhiZGFy2s.roa (hash: hBwRUVH63MvIYesZ1GBehKeF1wWcH7teYvi7RaedN7w=)
                          3: fPQVF7ZndJOXR689OYjsA4HroQE.asa (hash: hPNOyWW6q8UcI5eWp2HdGBUdR6sF1OiKH8X6IdTh8PQ=)
                          4: wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa (hash: rTTIUnsFLtdqF3QLDJSJAUZc2UdnIsqTTuD5CypPI48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:3c:44:e5:9b:47:10:23:1f:0a:27:a8:50:a1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
        Validity
            Not Before: Aug 14 18:02:07 2026 GMT
            Not After : Aug 15 18:02:07 2026 GMT
        Subject: CN=3e24df079b3df73b29d78200970d26adec94bccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:0d:e2:dc:55:23:87:d1:68:68:a4:1e:14:
                    48:b6:be:f1:14:52:38:6d:f9:fc:5b:76:18:a6:f7:
                    6c:35:1d:cf:f0:6c:60:63:a2:25:14:85:46:24:4e:
                    01:da:52:d6:77:71:21:b0:3b:a1:f4:45:00:4c:3b:
                    79:f7:91:07:68:91:6a:8f:6c:72:71:fd:db:29:9b:
                    f1:ba:53:49:37:7c:8b:fa:21:c0:b6:75:b5:09:94:
                    fa:0b:c0:26:e0:1e:0e:06:c6:eb:61:f5:2c:61:d4:
                    73:56:f8:29:42:5f:5c:1c:01:68:1c:40:7a:61:02:
                    34:04:6f:09:d2:f7:8f:7e:7a:8f:6a:3c:83:2c:70:
                    3b:9e:ff:27:96:b3:02:9a:e1:be:80:a5:73:bb:3e:
                    eb:3f:ba:c7:04:6e:28:1c:51:50:87:96:a8:27:ae:
                    fe:60:26:57:28:1c:25:6d:66:ea:a4:96:ea:c2:bd:
                    91:f6:a3:b3:51:c4:68:21:5a:fa:87:1a:d0:f5:80:
                    34:20:18:ad:73:50:61:98:a8:f9:9b:50:68:8a:22:
                    be:86:4d:80:f8:44:17:76:73:51:a0:24:5c:b9:05:
                    eb:46:72:69:a0:fc:e1:d7:5b:79:40:f7:95:58:b9:
                    66:2b:9c:76:6e:f6:5f:63:e6:af:c9:f1:5b:91:3a:
                    ec:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:DF:07:9B:3D:F7:3B:29:D7:82:00:97:0D:26:AD:EC:94:BC:CC
            X509v3 Authority Key Identifier:
                keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:87:57:84:18:77:f2:c7:68:63:1f:42:4b:74:6b:3e:6a:
         1b:f0:6c:8d:bb:99:a5:f6:36:8f:93:92:82:dd:c7:34:46:44:
         1a:57:c8:ed:88:96:3c:26:7b:94:63:a8:28:fc:00:2f:5b:65:
         95:d5:90:0a:cb:70:b1:66:4b:c5:20:ab:43:ad:b0:b5:f2:2d:
         88:91:14:a8:d7:12:ec:92:50:56:08:01:40:8a:4e:65:c8:88:
         05:23:b4:ce:d5:a6:f1:31:d8:4b:5d:bc:b2:cd:be:7c:35:95:
         50:55:bc:91:e4:3c:19:4b:11:24:03:38:58:f0:94:d5:e8:a2:
         31:78:3e:4f:08:21:08:8d:9a:f4:69:57:4d:2b:c4:c0:d5:07:
         13:01:07:93:78:ed:3f:2f:e6:69:54:6f:88:e0:56:7a:c7:e7:
         f0:71:ef:2c:65:15:4d:f1:1d:ce:43:ec:9a:7a:63:86:5c:aa:
         81:15:88:66:c6:74:df:72:98:fb:5f:73:71:68:ac:ed:76:78:
         e5:5c:d1:3c:03:92:83:42:20:34:61:00:af:5a:bc:e6:82:fe:
         0b:33:d0:04:7c:64:da:6e:b7:a9:05:a0:34:e6:b8:6f:cd:5f:
         bf:6e:06:0c:e8:8b:a8:51:07:64:b4:30:70:83:99:fc:49:96:
         30:84:0a:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcDxE5ZtHECMfCieoUKF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh
ODAwYzcwHhcNMjYwODE0MTgwMjA3WhcNMjYwODE1MTgwMjA3WjAzMTEwLwYDVQQD
EygzZTI0ZGYwNzliM2RmNzNiMjlkNzgyMDA5NzBkMjZhZGVjOTRiY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbgN4txVI4fRaGikHhRItr7xFFI4
bfn8W3YYpvdsNR3P8GxgY6IlFIVGJE4B2lLWd3EhsDuh9EUATDt595EHaJFqj2xy
cf3bKZvxulNJN3yL+iHAtnW1CZT6C8Am4B4OBsbrYfUsYdRzVvgpQl9cHAFoHEB6
YQI0BG8J0vePfnqPajyDLHA7nv8nlrMCmuG+gKVzuz7rP7rHBG4oHFFQh5aoJ67+
YCZXKBwlbWbqpJbqwr2R9qOzUcRoIVr6hxrQ9YA0IBitc1BhmKj5m1BoiiK+hk2A
+EQXdnNRoCRcuQXrRnJpoPzh11t5QPeVWLlmK5x2bvZfY+avyfFbkTrswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4k3webPfc7KdeCAJcNJq3slLzMMB8GA1UdIwQY
MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt
YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5
LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMSHV4QY
d/LHaGMfQkt0az5qG/BsjbuZpfY2j5OSgt3HNEZEGlfI7YiWPCZ7lGOoKPwAL1tl
ldWQCstwsWZLxSCrQ62wtfItiJEUqNcS7JJQVggBQIpOZciIBSO0ztWm8THYS128
ss2+fDWVUFW8keQ8GUsRJAM4WPCU1eiiMXg+TwghCI2a9GlXTSvEwNUHEwEHk3jt
Py/maVRviOBWesfn8HHvLGUVTfEdzkPsmnpjhlyqgRWIZsZ033KY+19zcWis7XZ4
5VzRPAOSg0IgNGEAr1q85oL+CzPQBHxk2m63qQWgNOa4b81fv24GDOiLqFEHZLQw
cIOZ/EmWMIQKag==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:07 2026 by rpki-client