Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File:                     3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier:          7ieoZ04AYqzU0cDQ0M2OEPJkg6jF4MOTjNpExWoqDJk=
Subject key identifier:   1C:74:D9:70:9D:EF:AD:D3:EE:26:DC:C7:18:01:3B:27:45:7D:34:C1
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer:       /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial:       01A000CA3892C861CD8B374F7F9429E988E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number:          1A0A
Signing time:             Fri 14 Aug 2026 15:00:47 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:47 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:47 +0000
Files and hashes:         1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: Q6fPjuuA4GPgw3UiWD8+FtYh6grLnmUX+1nD0YaQX7E=)
                          2: XduW4CBIQXx5gf7im8c_KWeejns.roa (hash: khvq/3b+OvcvNxVFIdvoIzkoKq7bskcSfHtiGKsUD3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:38:92:c8:61:cd:8b:37:4f:7f:94:29:e9:88:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
        Validity
            Not Before: Aug 14 15:00:47 2026 GMT
            Not After : Aug 15 15:00:47 2026 GMT
        Subject: CN=1c74d9709defadd3ee26dcc718013b27457d34c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:ae:a9:b7:c8:e7:d3:b5:84:42:9f:13:94:
                    c2:e9:83:7c:c5:e8:3e:45:57:cc:45:2f:10:21:84:
                    2e:80:03:77:86:13:b5:09:78:1c:9e:eb:33:e8:30:
                    57:cd:e1:e5:5a:4e:44:b0:fb:31:82:c0:06:c5:15:
                    11:97:9a:8c:f6:a9:69:dd:e7:67:52:57:32:7d:7a:
                    3e:ca:1c:2e:4d:c3:fc:1c:1c:71:fd:ad:9a:a0:59:
                    18:14:15:49:db:a3:bc:fc:36:8c:4b:bb:7c:c8:e4:
                    30:f9:2b:ba:f8:b9:3c:97:d2:3b:9f:64:e4:be:0a:
                    74:50:c0:e9:7a:6b:e5:0c:bc:f6:ea:64:25:b7:f5:
                    ce:bc:b4:1f:4d:af:5d:11:a9:a3:25:4f:f1:19:82:
                    53:88:39:b1:f6:5d:6e:59:3e:d2:ca:b7:92:07:8f:
                    86:92:fd:8a:87:e0:86:84:3a:2e:bb:66:e9:6c:06:
                    ba:11:cf:8b:85:1e:71:b9:89:bd:e0:c7:c0:38:02:
                    e7:4d:7b:27:ea:06:a4:b9:03:06:46:d7:8c:62:6d:
                    1a:ce:1b:1d:70:1e:cf:11:48:11:96:a7:7b:84:b7:
                    50:be:01:b4:e2:b0:cc:81:ad:da:c4:3f:c9:e6:54:
                    21:a5:83:51:9d:77:3c:45:4f:8d:3f:5b:4f:a1:98:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:74:D9:70:9D:EF:AD:D3:EE:26:DC:C7:18:01:3B:27:45:7D:34:C1
            X509v3 Authority Key Identifier:
                keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:98:0f:4c:e7:bb:b5:b4:a2:3f:68:be:cf:20:a8:43:dc:
         89:ab:78:e4:e7:df:28:d3:e4:6f:a5:38:51:b7:97:41:20:8c:
         bb:9c:46:42:8f:31:28:b5:b1:f9:c2:be:ef:fc:21:47:f3:ea:
         2a:a0:8d:02:08:07:58:65:9d:c9:90:e5:04:ce:1a:36:dd:8e:
         62:ef:0f:3d:84:d0:85:b4:6e:c7:3f:6e:2c:ff:3f:b3:b6:47:
         cd:01:d7:1c:b4:20:82:f4:fd:b8:02:69:57:e6:ee:ef:97:da:
         e7:c2:30:09:c2:a3:35:df:88:34:d9:e9:3d:75:6e:c3:8a:f1:
         20:77:32:26:30:99:38:82:aa:09:3e:ba:ff:b5:a2:42:37:42:
         15:02:83:03:e1:5d:3b:e5:5b:3d:79:1d:52:8b:b3:28:1c:56:
         41:f3:6f:1d:19:a1:30:2f:df:fc:2f:b5:83:4b:bf:0a:f5:7a:
         8a:ee:8d:ca:18:cc:0e:56:81:40:ff:51:0a:3c:50:b0:42:f4:
         7f:b6:6c:d1:4e:f5:de:d7:43:78:26:2a:c4:b7:b3:a9:03:18:
         8a:38:a6:b6:1e:64:1a:6c:f8:5a:bc:5e:c4:b9:03:1a:ae:a8:
         18:bf:b7:0b:d0:7f:a5:6b:20:11:48:e1:7a:5f:67:2a:d5:63:
         aa:24:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:08 2026 by rpki-client