Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          Vvg3t+s1yMBeDK3+5UhOuVS5lrgC2iEzfXtKpG07sKc=
Subject key identifier:   54:B0:1F:59:0A:2F:66:51:87:FE:54:2A:CB:A1:7F:CC:08:8A:F0:31
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       019F1943C44071DCF4CD635F74E4FA24F8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          0759
Signing time:             Tue 30 Jun 2026 16:01:39 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:39 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:39 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: lUcDX28R5EZocVR2SD8ZetAeRYTeAt4M1I+RQhQ0izo=)
                          2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:c4:40:71:dc:f4:cd:63:5f:74:e4:fa:24:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: Jun 30 16:01:39 2026 GMT
            Not After : Jul  1 16:01:39 2026 GMT
        Subject: CN=54b01f590a2f665187fe542acba17fcc088af031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:b1:8c:67:12:bc:9e:63:ea:b7:b0:7f:10:
                    d8:02:db:ee:ac:11:62:7f:d8:d2:4c:00:44:3d:8b:
                    dd:41:9a:6c:13:64:33:0f:38:fe:71:de:81:8e:8d:
                    aa:dd:7e:e8:81:5e:df:33:c6:7c:aa:d6:1d:ef:ae:
                    c2:13:32:94:2a:27:f4:26:c9:6c:df:35:18:88:e3:
                    81:22:69:ef:15:c6:16:c6:8f:f5:23:d5:6b:bf:53:
                    4e:37:99:80:43:3e:b5:5a:c6:9d:28:39:fc:35:2e:
                    94:e7:05:c0:b3:55:05:e1:69:32:23:01:85:10:8a:
                    6e:3e:98:9a:f2:8e:d0:5c:72:ed:c9:1e:7a:5f:f5:
                    63:f5:e0:c5:cb:9c:59:22:57:55:d6:75:85:26:69:
                    b4:70:72:7f:e2:a0:8e:5a:56:c5:73:b9:c5:57:0a:
                    6e:bc:80:ce:33:05:f4:1a:29:af:c8:44:eb:50:f5:
                    d2:a4:0a:bf:e8:ce:a1:9c:bd:8d:d6:08:30:c5:31:
                    65:1d:c6:f8:25:34:48:4a:ec:45:b4:c2:01:2b:0a:
                    13:75:3e:5b:06:dd:36:44:c5:1a:cb:80:8e:ca:86:
                    22:ab:e6:9e:4f:b5:2e:2d:12:df:f2:e9:ac:19:71:
                    0b:ec:a3:ab:8f:ab:5d:32:62:52:13:3a:9c:06:aa:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B0:1F:59:0A:2F:66:51:87:FE:54:2A:CB:A1:7F:CC:08:8A:F0:31
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:94:08:aa:d4:ad:2c:d1:e8:7b:45:0e:d8:86:f9:23:92:
         1c:af:d2:89:8f:49:9c:08:66:dd:6f:23:c0:f7:a7:10:7a:1c:
         e7:fd:55:33:19:1c:ed:9a:9a:ef:82:0e:5e:23:1f:06:5e:c1:
         75:9d:88:d0:79:b1:a0:9b:fd:61:a6:73:fd:0b:90:09:96:f7:
         cc:21:62:f2:b0:2d:9a:ec:73:21:b0:ef:ae:90:84:39:a4:e8:
         c0:7f:a2:9d:5a:c1:88:5e:f3:35:4e:5f:0a:d1:6d:14:2b:88:
         d8:56:bb:d0:e1:3f:cb:4a:f4:17:68:41:d6:d2:2c:14:a1:54:
         9e:da:46:eb:db:18:68:1b:3f:64:a2:8d:ca:1a:08:6b:3f:78:
         d3:d0:b7:ca:a1:6d:ed:f3:ee:c7:3b:62:70:a9:ce:cf:df:13:
         f3:30:21:61:44:41:af:94:ea:b3:78:61:6f:4a:56:09:8c:72:
         ae:40:fd:b7:f3:82:06:f7:dd:98:82:77:35:66:b5:6d:92:2a:
         18:93:32:d8:1f:4b:af:09:6a:72:55:d0:94:ac:b4:63:4a:18:
         53:ec:46:af:c8:f0:48:f5:8b:3b:6d:70:09:a3:5f:db:7d:be:
         ef:b3:4a:a3:16:70:68:34:be:a9:40:be:c7:97:e5:c4:29:bd:
         1b:56:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:16 2026 by rpki-client