Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          UqonVdod6slktyfDybmWvlh1c+XsGEBLZQx8SKVmi9Y=
Subject key identifier:   DE:FF:38:EE:59:03:5A:B8:E2:BE:44:7D:84:BA:50:C1:D0:92:DE:EE
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       019F194387DF51DD6F54443B5676B727BCD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1999
Signing time:             Tue 30 Jun 2026 16:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:23 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: CMgzVYNbqCfG/6oEx6sOXH5jTE8m22AZB4ajGVS5ZN4=)
                          2: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (hash: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=)
                          3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
                          4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
                          5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
                          6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
                          7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
                          8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
                          9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:87:df:51:dd:6f:54:44:3b:56:76:b7:27:bc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Jun 30 16:01:23 2026 GMT
            Not After : Jul  1 16:01:23 2026 GMT
        Subject: CN=deff38ee59035ab8e2be447d84ba50c1d092deee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:08:f1:f2:69:42:b5:37:e9:5b:79:b9:62:
                    33:71:97:38:c1:4c:48:da:a0:74:66:8b:ca:9b:e1:
                    08:5e:dc:7b:31:75:f7:69:34:28:94:85:b7:d1:6d:
                    ee:76:49:df:8d:c4:f7:b0:58:c7:7e:f3:6a:23:ff:
                    00:f8:54:67:93:18:89:22:d7:78:83:84:b6:d3:b1:
                    78:f1:6d:36:2c:f4:50:62:0c:6f:7d:6b:83:d1:fc:
                    b3:43:92:d2:79:22:ed:2f:0a:b0:43:2f:19:39:8e:
                    d7:fd:d2:a8:67:b1:65:f7:83:8a:21:62:cb:9f:12:
                    46:56:c8:37:02:da:cd:bf:d7:e3:7e:bb:06:8c:44:
                    c4:eb:78:62:73:e9:e9:48:ee:d5:dc:99:44:8f:af:
                    1a:50:3a:e4:6c:54:88:1c:e2:14:9e:7e:90:0b:34:
                    a4:3e:ec:93:5a:42:0e:15:ef:c1:bf:a5:67:c5:31:
                    b2:e8:e3:75:61:ee:30:4c:8f:50:c9:55:59:77:5b:
                    85:8e:59:af:37:42:14:23:9b:f2:32:34:ce:7c:66:
                    08:8f:bc:00:c7:64:6b:ae:9a:82:b2:7b:0c:01:83:
                    63:0d:e4:29:b4:8b:9f:12:0a:fb:9c:40:52:6c:73:
                    2f:ce:c8:c6:eb:68:7a:9d:a3:00:78:de:34:90:6b:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:38:EE:59:03:5A:B8:E2:BE:44:7D:84:BA:50:C1:D0:92:DE:EE
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:dd:b4:52:d2:9e:a5:02:2f:d2:e0:58:43:50:2a:aa:69:
         74:1b:a8:9b:42:d7:f3:f6:f8:1f:0f:ba:64:8a:85:99:17:90:
         ba:89:c5:32:49:7a:0d:06:63:bb:ee:0b:a8:17:92:78:4a:98:
         aa:eb:e3:a8:4a:82:ee:a7:81:c9:74:d1:d5:00:c4:3f:60:5f:
         86:d0:a4:61:46:e5:e0:0b:6a:91:dc:6d:74:84:2c:dc:fb:68:
         ce:fe:b6:ce:ed:f7:59:c9:3b:80:7a:24:2d:f7:9a:3c:ed:66:
         c5:b1:9f:32:d4:36:5d:7d:ea:48:a6:57:ed:f3:8b:05:fb:4c:
         20:25:e3:b8:e6:4f:44:c6:72:28:bc:09:03:f2:ad:fd:ca:29:
         6c:97:c5:23:b3:08:f3:45:3d:95:15:f1:9e:c9:c7:be:11:9c:
         dc:79:d2:b8:d2:00:07:7c:6b:d7:99:77:8c:a0:44:6a:bc:ad:
         8c:5e:44:b6:b4:f6:6c:7d:3b:a1:26:d4:b0:27:4d:e4:a2:f1:
         5e:99:77:9d:b7:fa:e5:f6:5e:86:9c:5d:04:1e:56:22:41:61:
         20:8c:74:73:ee:91:60:a9:e3:01:1e:f2:a0:cf:01:e9:55:d8:
         43:da:d7:ee:07:41:df:4f:e9:1c:38:b4:ad:60:d9:2d:88:0d:
         8f:8a:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:52 2026 by rpki-client