Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
File:                     3I_H9_qQqYNsGrKgzyvizXKgzN0.mft (raw, json)
Hash identifier:          PVvzAMUnsL9KAxtu6gGF5JE6TUYzo3YxhR+2/1lO9ec=
Subject key identifier:   03:30:B9:71:A6:AF:AC:1E:26:AD:B0:12:D4:E9:5B:F9:AE:7B:18:25
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Certificate issuer:       /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial:       019F37F2D5F10109FE2F390D501F23035C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
Manifest number:          7F
Signing time:             Mon 06 Jul 2026 15:01:29 +0000
Manifest this update:     Mon 06 Jul 2026 15:01:29 +0000
Manifest next update:     Tue 07 Jul 2026 15:01:29 +0000
Files and hashes:         1: 3I_H9_qQqYNsGrKgzyvizXKgzN0.crl (hash: ZeIcPMSK1Qvmzvqv+nhgVMJ68E9Dk91cmiBNKRTjSFM=)
                          2: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (hash: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=)
                          3: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (hash: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=)
                          4: RKccBzAjfAgdOH1QdushhT7AryI.roa (hash: A/QzLDENuO4yPz22/8nn+nO2J9VEx9TuDbqFSEgKIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:f2:d5:f1:01:09:fe:2f:39:0d:50:1f:23:03:5c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
        Validity
            Not Before: Jul  6 15:01:29 2026 GMT
            Not After : Jul  7 15:01:29 2026 GMT
        Subject: CN=0330b971a6afac1e26adb012d4e95bf9ae7b1825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:b9:b8:83:f6:f5:e9:7a:ef:85:fa:84:cc:
                    6a:9c:3f:7b:03:db:82:94:50:b0:27:7b:51:70:90:
                    1d:4f:e7:a7:de:a1:9a:44:2b:59:28:27:d9:a3:ea:
                    43:75:bc:71:da:49:08:f2:ae:22:e4:b9:5c:0b:0a:
                    20:5c:04:02:10:d1:1d:1b:69:d7:00:5e:d6:d9:db:
                    40:58:d9:91:24:fa:5c:9e:b7:98:9e:49:bd:46:c7:
                    79:04:cd:fb:7b:e7:c1:c2:6e:02:ce:a4:9f:7d:ad:
                    aa:37:9f:5f:13:57:30:53:c0:a1:51:f3:d1:6b:33:
                    4a:cc:29:9b:9e:02:5a:d0:44:81:45:0d:be:ad:81:
                    5c:36:3b:98:82:f4:65:22:6c:47:70:5d:af:34:f2:
                    a6:cd:ca:51:1c:ab:de:8c:0f:5e:0f:72:74:aa:69:
                    09:05:d8:d6:21:14:48:c7:e2:47:a5:10:19:de:72:
                    8e:63:bd:41:51:63:7e:cd:d5:33:c7:db:6d:b1:30:
                    5b:7c:53:53:dd:c3:5d:aa:d4:a3:04:20:15:62:16:
                    c6:23:5c:92:88:a7:77:a6:3e:ba:4a:f8:6b:38:f7:
                    cf:da:19:15:27:53:de:ee:cf:79:00:f0:78:06:73:
                    27:02:3a:d4:57:fe:1d:5e:42:d9:63:a0:a4:36:b4:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:30:B9:71:A6:AF:AC:1E:26:AD:B0:12:D4:E9:5B:F9:AE:7B:18:25
            X509v3 Authority Key Identifier:
                keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:79:21:cf:10:af:05:9c:9b:ce:bd:aa:29:f3:2e:8c:f9:
         33:40:b6:8c:12:51:a3:68:e7:61:a8:9b:3f:95:36:da:b3:c7:
         74:c2:93:06:52:7d:22:31:5a:a6:2e:bc:21:46:b9:0c:55:83:
         5f:0c:a6:5f:33:65:e0:b9:40:a2:39:57:e9:b9:58:d6:d8:0a:
         d8:65:33:7e:42:74:b2:0b:86:1f:6b:e1:f8:8c:ac:dc:7b:db:
         78:ca:ac:17:3e:34:8a:d6:11:03:1b:b9:0f:d2:8a:ff:a3:d1:
         1c:64:65:53:a5:b9:fb:54:34:e9:99:e1:84:51:8c:da:d3:d0:
         4b:14:7e:59:4a:b1:eb:0f:8c:61:85:3a:22:fa:a3:ee:ca:4f:
         d1:08:d9:96:69:86:d3:01:0f:e1:54:de:5f:83:c8:d7:59:94:
         4b:b8:68:8a:c9:1e:15:f8:e6:de:91:b5:89:0e:3f:3e:6f:49:
         6f:01:3e:27:2c:5a:c0:87:b8:71:70:90:36:20:fb:71:b5:d1:
         f8:90:7b:44:fd:1a:46:45:d6:e4:74:ef:71:0b:24:a6:70:68:
         81:9b:09:82:b8:e2:df:44:78:b2:dd:37:6c:f8:f2:d0:a0:ee:
         95:95:80:ef:72:ed:af:d7:ed:01:b4:54:c8:f6:78:97:04:e2:
         e8:31:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:52 2026 by rpki-client