Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File:                     3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier:          GKeATFA3NC686zLDnqkuVoCWCq0ebdeKwXpbTsU9l+I=
Subject key identifier:   24:5B:D3:06:67:0E:C1:AF:DE:40:5A:99:D3:9A:50:39:D7:16:9F:B7
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer:       /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial:       019F197A77669FFF5F499CA96D23C2334B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number:          0AAA
Signing time:             Tue 30 Jun 2026 17:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:23 +0000
Files and hashes:         1: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: O6pzhi1IEM/CgvIiamZDVMmh/W49xxCf46Z9VBzPHmQ=)
                          2: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (hash: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:77:66:9f:ff:5f:49:9c:a9:6d:23:c2:33:4b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
        Validity
            Not Before: Jun 30 17:01:23 2026 GMT
            Not After : Jul  1 17:01:23 2026 GMT
        Subject: CN=245bd306670ec1afde405a99d39a5039d7169fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:95:c9:2b:b3:3b:e2:da:a5:e9:ac:ba:af:
                    cd:e7:6a:70:df:71:2f:6a:de:9b:75:d2:0b:12:ac:
                    89:39:60:67:19:f0:f7:2f:fc:60:bc:54:bb:13:02:
                    05:43:08:db:29:2b:45:d9:21:a4:97:db:cb:d4:5a:
                    cb:15:df:7f:9f:62:fa:77:86:55:68:11:88:a5:7c:
                    4d:68:96:dd:d0:b5:8a:79:fb:b2:4a:27:19:20:63:
                    d3:ba:d5:d4:d4:ef:29:72:30:ad:66:7a:06:a2:85:
                    f8:30:c5:a2:9f:e9:cb:21:dc:2e:3d:b0:48:ec:0a:
                    22:4c:97:b1:e7:a2:94:e0:b4:16:98:67:ec:f1:c3:
                    bd:20:4c:0d:ce:f4:33:f6:89:6c:1d:26:19:2e:d1:
                    e2:b7:3e:07:38:b0:b4:6d:22:fa:32:e6:af:e7:a7:
                    58:44:0d:25:2e:05:6d:61:18:c2:02:4a:93:02:9f:
                    76:65:90:ed:64:3f:c1:e7:83:f7:25:f1:c0:a3:3a:
                    fa:3f:41:f7:d2:ca:94:47:07:d6:3b:73:42:e6:1e:
                    0a:9d:02:b6:56:14:a2:c2:e2:03:c5:f5:6f:58:ed:
                    74:42:dd:e9:38:7a:4c:f6:16:88:b4:a7:fa:be:19:
                    b5:9b:ca:a8:5c:1e:51:74:4b:85:d1:5a:e2:3d:00:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:D3:06:67:0E:C1:AF:DE:40:5A:99:D3:9A:50:39:D7:16:9F:B7
            X509v3 Authority Key Identifier:
                keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:6e:37:73:26:0d:40:43:a1:9d:cd:17:79:b6:b1:48:6d:
         45:11:4a:40:3e:fb:0b:b9:e8:00:c2:14:3d:b8:f6:c1:b5:5e:
         08:d3:24:1e:48:82:e3:95:0f:6f:ac:3c:91:6a:6a:21:37:04:
         04:91:c6:7f:9e:c4:de:6c:44:6e:4a:d3:0f:97:11:b5:10:bc:
         1b:5e:37:03:d1:50:dd:2d:1c:f0:5c:c0:14:14:44:35:56:34:
         71:34:64:9c:1d:2f:06:09:89:9e:5c:a0:2b:a7:0e:7b:50:ae:
         4f:f8:ad:45:aa:ab:8e:d7:6a:f6:fa:f0:8b:13:48:23:33:15:
         ac:84:c6:6c:c2:d2:22:a8:e0:bb:05:4d:a2:d6:0b:b9:24:f9:
         ed:33:28:47:26:09:be:6e:48:80:d1:bd:bb:a6:02:0f:97:72:
         94:1f:13:df:a3:e2:be:b6:9d:6a:8a:bb:b6:35:a7:9a:23:9f:
         65:39:ce:b9:68:b8:e0:b1:81:ec:b8:42:7c:61:e0:90:d8:3c:
         df:d6:92:84:d6:6b:1e:b1:75:70:6d:ea:55:e0:b1:b4:f1:07:
         ee:11:da:ec:e1:ec:7a:fd:96:4d:06:5e:e5:e3:90:c4:af:8e:
         fd:57:75:3f:44:e6:bd:e3:b2:db:05:c3:33:58:6e:4a:3a:4c:
         e5:79:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:24 2026 by rpki-client