Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File:                     3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier:          deoxaagXfQLlWySypmpvxSwqAMTDq8JdwokBT2PDb+M=
Subject key identifier:   54:09:B3:5D:D0:CB:CA:11:E4:2A:CE:3A:34:4A:FD:35:94:1B:9F:76
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer:       /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial:       019FE665F63EA95691430CCDA184D2327D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number:          6C
Signing time:             Sun 09 Aug 2026 12:01:09 +0000
Manifest this update:     Sun 09 Aug 2026 12:01:09 +0000
Manifest next update:     Mon 10 Aug 2026 12:01:09 +0000
Files and hashes:         1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
                          2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: 6hn935TqjsxT7D6JPl81LmYXCqHFBJi23KXu0QU6OEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Aug 2026 11:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e6:65:f6:3e:a9:56:91:43:0c:cd:a1:84:d2:32:7d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
        Validity
            Not Before: Aug  9 12:01:09 2026 GMT
            Not After : Aug 10 12:01:09 2026 GMT
        Subject: CN=5409b35dd0cbca11e42ace3a344afd35941b9f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:3f:55:18:6f:1f:1b:a3:83:2a:c2:ea:4e:
                    1d:2e:68:96:f7:0d:76:0f:6c:77:d3:45:c1:d0:d2:
                    d7:4b:93:22:bb:1d:c1:bb:64:32:92:c7:52:6e:53:
                    34:31:16:32:7b:f4:98:2d:67:60:f1:ea:50:12:28:
                    d1:52:77:f2:b1:5e:6d:ce:ea:71:3a:b2:f6:13:2c:
                    57:4f:88:9a:c8:d6:f0:c4:e3:cd:96:b0:b6:9b:50:
                    4e:2b:53:54:cc:1a:c5:5b:1d:42:c0:46:d3:d7:c5:
                    6d:9b:74:de:0b:df:a8:15:92:44:58:a5:f6:c5:2a:
                    55:3b:95:82:c6:34:0c:8b:9e:70:ee:0e:a6:72:89:
                    04:fa:cf:e6:f9:bc:a0:0d:17:4b:9b:43:f2:c0:40:
                    95:05:90:73:df:10:07:49:31:80:c0:94:ee:d9:51:
                    55:39:8c:61:c8:83:a9:54:9f:72:96:c0:9e:42:3b:
                    32:60:f7:68:f3:18:28:b4:2e:1e:08:2a:d6:42:33:
                    04:54:ad:b4:ca:16:0d:b3:cf:49:19:ae:8c:58:78:
                    ca:bf:48:32:c8:59:9f:92:39:9d:0e:ed:32:4b:f2:
                    0c:25:da:ce:66:85:b0:20:ef:00:81:99:ed:4f:33:
                    33:1e:3a:e4:81:3e:b2:d8:35:06:a3:92:f8:04:c1:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:B3:5D:D0:CB:CA:11:E4:2A:CE:3A:34:4A:FD:35:94:1B:9F:76
            X509v3 Authority Key Identifier:
                keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6a:94:f4:8c:df:7a:b1:38:7f:ab:9c:f2:00:91:2c:51:fd:
         21:b1:7b:c6:4a:2a:52:f6:62:6f:df:36:8b:b9:e3:5b:1d:1c:
         c6:c7:27:a8:da:48:70:9d:a4:c7:35:24:29:67:c1:49:b5:89:
         d7:06:2d:f9:52:38:a1:ae:0e:46:3c:34:a7:ca:95:3a:19:be:
         5c:3b:88:e5:b9:27:66:b7:f5:2c:89:5c:f2:94:f5:71:a1:9b:
         86:53:a6:84:5d:18:16:4e:51:9e:e0:24:5e:99:6e:f6:30:6e:
         f5:a4:75:1a:31:b2:33:54:1d:94:0b:a2:a3:be:cc:d3:be:0f:
         48:8a:ae:30:2a:59:1d:b4:46:de:52:a1:2b:cd:bf:b3:3b:e7:
         72:73:89:67:92:a5:be:11:0b:d6:04:3a:a4:09:29:ef:eb:ca:
         5f:bf:be:3a:99:1d:75:ea:9e:de:0f:56:c2:33:8e:7d:79:fb:
         29:11:95:20:d3:32:b1:b8:58:54:07:18:3d:c6:8f:dd:26:c2:
         03:6d:df:2f:c4:4f:d8:dd:97:8e:8c:b7:a1:76:8c:28:9d:9b:
         58:bc:5d:ce:d4:77:21:70:c1:69:b4:67:b8:6a:46:69:eb:41:
         dd:c0:53:28:16:2c:02:6f:b0:aa:40:6b:8d:aa:6a:41:f8:15:
         af:a9:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 14:32:05 2026 by rpki-client