Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          qyA9YoBSBUmrnJjbj7ha8BU+B8lYohaPjC7giN+mN+4=
Subject key identifier:   9D:C1:E9:8F:64:AA:59:8D:0A:EF:91:70:FA:BE:8B:2E:7A:DF:20:0C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       019F2A00BD1C0E74B7C68E9F455BD9D6E3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          155A
Signing time:             Fri 03 Jul 2026 22:01:59 +0000
Manifest this update:     Fri 03 Jul 2026 22:01:59 +0000
Manifest next update:     Sat 04 Jul 2026 22:01:59 +0000
Files and hashes:         1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: F0P+yiCDJolM7e2+vDuGAfADw0m4VJG6XyCtI1xSreo=)
                          3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
                          4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
                          5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
                          6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
                          7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
                          8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:2a:00:bd:1c:0e:74:b7:c6:8e:9f:45:5b:d9:d6:e3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jul  3 22:01:59 2026 GMT
            Not After : Jul  4 22:01:59 2026 GMT
        Subject: CN=9dc1e98f64aa598d0aef9170fabe8b2e7adf200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:08:48:b0:95:45:e4:ad:51:17:ce:70:90:
                    b4:cf:90:0d:a0:17:57:22:68:a6:93:e4:99:7a:94:
                    23:a9:31:b5:65:6d:c3:31:ac:aa:c7:2f:1d:37:63:
                    d3:52:10:db:99:02:69:15:01:d0:96:32:a2:7f:52:
                    d1:fe:cd:ae:60:8f:18:29:ed:a2:0b:54:49:9e:f7:
                    6a:bd:61:f7:f6:26:bb:58:68:b7:98:f9:96:fc:df:
                    30:5f:4c:39:fc:59:44:a7:18:2a:d3:42:7e:de:12:
                    67:10:6b:20:2a:4c:65:eb:66:46:6b:dc:49:4c:7a:
                    b9:16:67:40:bc:c1:43:da:29:7a:60:e4:96:ea:6d:
                    18:1e:f0:23:a7:1c:87:30:da:99:29:1c:68:ed:f2:
                    9a:44:2a:1f:49:6b:0e:3b:28:4d:58:4b:10:91:47:
                    84:d6:9b:f3:9a:2d:ff:3e:65:67:5b:a6:14:7e:b1:
                    db:51:86:f4:ea:80:5f:8a:f9:a6:10:7c:3b:6b:5a:
                    32:85:15:ee:5b:02:c6:d7:89:62:15:f4:33:fe:c6:
                    8b:cc:8d:eb:ac:c8:fe:a7:dd:8c:9a:82:1a:35:5d:
                    4a:fd:95:14:e3:a4:e9:3b:9a:e6:63:4d:0f:1c:3a:
                    7a:6f:88:83:3c:64:fc:dc:5e:59:42:0e:3c:e8:a2:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:E9:8F:64:AA:59:8D:0A:EF:91:70:FA:BE:8B:2E:7A:DF:20:0C
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:87:41:56:5f:81:5c:5b:9d:b0:6f:77:f7:97:54:77:5e:14:
         5d:46:69:22:6b:82:3f:38:7c:2b:e8:2d:f6:ff:3b:af:39:ef:
         e3:35:a1:06:fb:c2:52:39:95:db:0a:b3:32:3e:e6:92:d2:58:
         4d:34:87:08:19:86:40:4a:49:ba:6c:d3:1e:06:5e:d2:3b:f7:
         33:5c:c8:6b:7b:a4:94:ab:47:7f:60:5b:d7:5c:b6:e7:af:bc:
         cf:9b:a5:0e:20:43:6f:74:5d:87:e5:08:79:e3:c8:0e:86:8f:
         8d:22:b8:16:fb:ab:b3:7d:c2:e7:e1:eb:4b:60:77:1e:fa:c5:
         a8:31:f7:d6:d9:9b:23:25:b5:93:3e:4e:5c:a1:5b:70:44:55:
         c0:3b:1a:d2:64:fe:e5:8c:5d:ff:1e:20:14:6a:b9:24:39:02:
         c9:2d:c6:fc:ad:87:6f:2d:50:4f:7f:bd:8c:6d:85:42:73:4c:
         63:59:33:1d:cb:59:1a:8f:18:f4:50:a5:64:94:8b:52:33:58:
         a1:46:4b:69:c6:8b:dd:76:7c:88:52:b5:f3:f4:16:fc:39:31:
         8c:7b:c1:f0:d2:39:a8:02:df:54:4c:3f:9f:0f:50:b6:3d:6b:
         7a:49:e6:6e:4a:e7:e7:1c:7c:80:a5:1d:67:b4:9d:1a:5b:81:
         c6:e6:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 03:36:28 2026 by rpki-client