Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          SlHPD0jzJV8E5+wE86FYlZ6FIgyMt+cwVID9EjZ86mc=
Subject key identifier:   C0:1F:B5:D6:20:D9:88:06:89:10:9B:79:61:CC:36:DB:19:B5:E0:F8
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       019FA1F2C4EED9F985C8A84D98843FEDBEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          19E0
Signing time:             Mon 27 Jul 2026 05:01:09 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:09 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:09 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: W6tbAUleypsRKEyPI2gCXFCkfD1DhpnaJaXSqu+iCpI=)
                          2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
                          3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
                          4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:c4:ee:d9:f9:85:c8:a8:4d:98:84:3f:ed:be:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Jul 27 05:01:09 2026 GMT
            Not After : Jul 28 05:01:09 2026 GMT
        Subject: CN=c01fb5d620d9880689109b7961cc36db19b5e0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:5a:76:95:52:e0:74:01:b0:c2:59:43:74:
                    3c:a2:84:79:1d:3c:71:a5:1f:df:44:78:27:1a:49:
                    36:3f:76:fc:bf:70:72:83:59:ed:27:03:4e:80:d1:
                    15:ac:7c:b6:ff:27:f6:ee:d6:39:93:de:1c:b9:72:
                    f0:d1:13:84:ec:06:56:63:aa:70:88:94:4c:ad:e5:
                    7a:aa:67:b9:90:b1:26:53:6f:97:7b:25:9f:99:25:
                    be:18:b3:58:01:2c:30:00:79:cf:d0:cc:68:db:4e:
                    d6:71:8e:c8:55:99:2c:18:6d:2d:bb:60:a5:0c:a7:
                    d4:81:ab:6a:8e:e8:0a:aa:a1:b1:bb:59:64:d9:31:
                    4e:38:f5:9b:fc:b4:c0:e6:72:3e:f7:42:7d:31:b4:
                    78:9f:93:60:2b:48:1d:72:98:04:21:19:6f:42:ae:
                    7c:5f:60:20:26:e6:64:68:f8:42:67:30:4e:7a:bc:
                    e3:0f:7e:ad:60:4f:04:22:01:0f:e9:79:02:6b:16:
                    67:75:08:33:20:3b:30:56:b7:14:1b:c6:d0:40:a7:
                    eb:d3:ba:48:3f:4e:40:db:8b:a0:56:20:e8:6f:01:
                    6e:04:f3:9a:40:c1:11:4a:e3:82:d0:0b:c3:58:3e:
                    9e:aa:64:6c:9b:42:7b:5a:a5:c3:23:a0:b8:22:b8:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:B5:D6:20:D9:88:06:89:10:9B:79:61:CC:36:DB:19:B5:E0:F8
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:17:d0:a0:25:f9:1b:e4:cb:e1:c9:bb:7b:17:3c:24:7e:
         6d:b8:42:83:0c:61:25:cf:85:fc:aa:a9:35:32:f8:51:54:a9:
         28:d0:ed:39:99:e2:bd:e8:dc:0a:3d:8f:c1:1d:d4:d4:9d:e2:
         30:f9:48:1a:55:a5:4e:ed:0a:46:9b:87:1f:d5:dd:83:40:21:
         8b:3c:a5:bc:e3:20:81:56:33:51:14:c9:4c:54:d5:23:02:dd:
         a2:ad:53:44:13:4b:48:ae:d9:30:82:9f:14:08:a0:a5:0e:38:
         59:8a:71:81:5e:51:7b:a2:4e:fe:69:76:72:64:0f:53:9b:09:
         70:b2:0c:0d:60:4f:16:41:74:dd:62:04:46:0e:6a:d3:c1:05:
         e6:71:3b:3c:9f:02:33:6a:d0:10:9d:11:a7:14:9a:5b:58:9c:
         04:d9:7c:bc:d9:78:2d:da:ec:d1:e0:32:20:4d:86:60:bc:f5:
         91:ba:e6:90:8d:cc:d7:0c:6d:3e:ad:2f:e8:5a:f4:ff:c2:4a:
         49:a6:a7:d1:95:ef:2b:fc:b3:b7:20:14:98:eb:9d:ae:44:7c:
         d5:52:4a:f1:d7:71:3d:d4:38:d8:a8:bb:e0:af:66:9e:4b:f9:
         10:2b:60:b8:e7:ef:51:66:5b:99:fe:fd:73:54:02:d4:4a:b4:
         9c:c0:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:07 2026 by rpki-client