Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
File:                     3I_H9_qQqYNsGrKgzyvizXKgzN0.mft (raw, json)
Hash identifier:          WY5CY7u5gGUp6Gt7c/Ut1TTQtDMkvJW3dxMNf1cQ7UU=
Subject key identifier:   95:E5:22:0F:FC:1E:89:B2:98:41:D9:3D:EF:1A:28:60:27:EE:80:F0
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Certificate issuer:       /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial:       01A01FB035A0EB4C0F9EF74A228357A30A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
Manifest number:          F7
Signing time:             Thu 20 Aug 2026 15:00:36 +0000
Manifest this update:     Thu 20 Aug 2026 15:00:36 +0000
Manifest next update:     Fri 21 Aug 2026 15:00:36 +0000
Files and hashes:         1: 3I_H9_qQqYNsGrKgzyvizXKgzN0.crl (hash: hz9DUxJWzFSn6G2tnekta7sN09FILnrrSoney4Od6mY=)
                          2: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (hash: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=)
                          3: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (hash: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=)
                          4: RKccBzAjfAgdOH1QdushhT7AryI.roa (hash: A/QzLDENuO4yPz22/8nn+nO2J9VEx9TuDbqFSEgKIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:b0:35:a0:eb:4c:0f:9e:f7:4a:22:83:57:a3:0a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
        Validity
            Not Before: Aug 20 15:00:36 2026 GMT
            Not After : Aug 21 15:00:36 2026 GMT
        Subject: CN=95e5220ffc1e89b29841d93def1a286027ee80f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:ed:57:41:cb:d9:d6:40:e2:ca:a0:84:e6:
                    a4:f0:fe:2d:25:13:0c:fd:92:7c:05:15:19:48:65:
                    c0:5c:26:b5:5e:8b:4b:82:16:1f:05:b9:15:87:60:
                    32:f0:d9:8c:52:62:ce:97:e2:c8:09:0c:f3:3f:33:
                    1a:8b:e1:0f:23:7c:c1:e1:dc:c9:37:67:10:f1:4c:
                    a4:df:47:e9:15:bf:9e:2a:bf:72:7c:30:18:ad:ed:
                    3c:9a:2e:28:7a:a7:9f:11:d4:9b:69:01:2c:76:59:
                    f7:0b:11:72:4d:2d:12:b9:86:f8:17:44:ee:0b:29:
                    61:0c:77:21:2e:e5:08:d3:b1:f6:9a:d2:35:f0:1b:
                    76:f7:36:c8:3b:0d:65:73:6f:62:93:17:04:fa:40:
                    9a:b9:0a:2d:28:59:33:5d:e9:78:ee:d5:9d:9a:70:
                    b7:06:e6:ea:74:dc:ad:20:aa:5a:ce:ac:5e:a7:60:
                    eb:90:8e:f4:ea:fe:8c:6d:2a:03:2c:cd:f9:73:1b:
                    f2:3e:9d:05:33:da:2b:a0:3b:64:30:3e:47:83:7b:
                    7f:51:e3:03:09:40:21:07:73:c4:86:84:e2:ef:6c:
                    98:42:21:68:6e:b3:6e:c0:8f:5c:c3:d8:e2:ae:65:
                    3a:34:06:91:e1:65:05:6c:6e:1b:c1:8b:fa:93:3d:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:22:0F:FC:1E:89:B2:98:41:D9:3D:EF:1A:28:60:27:EE:80:F0
            X509v3 Authority Key Identifier:
                keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:77:88:9b:d4:ce:59:de:54:51:34:2f:dd:d9:04:20:34:cd:
         65:30:85:c6:7f:a2:06:ad:d4:d7:91:8f:dd:3b:41:ef:0b:87:
         2f:9c:50:8e:7c:fc:6e:54:4c:c0:af:81:e1:2a:a3:fd:06:b4:
         a2:fa:0c:08:f6:14:f1:04:fa:ff:5a:11:8a:a4:2f:7d:e7:46:
         0c:46:fb:fb:2c:09:67:23:6f:51:64:82:53:93:1c:17:dc:e4:
         2f:a9:17:9a:42:1b:73:30:af:48:33:59:c6:61:0e:0a:3d:0f:
         09:f7:a0:80:ba:72:43:5e:1c:ca:3b:0b:9f:51:ea:bc:2b:1a:
         2f:b2:cd:69:57:ae:06:34:dc:64:ce:d8:ff:e3:c3:a1:77:a3:
         f8:d0:63:16:b7:11:66:d8:eb:01:e0:c7:8c:5c:84:7b:b7:db:
         fd:68:9e:1e:66:7d:2a:5d:bf:3c:64:39:1b:03:72:70:e2:1f:
         a8:21:78:fd:f8:34:30:c6:ac:ec:7a:af:dc:0a:bc:c5:68:ac:
         62:65:ea:cb:f5:d1:af:c6:90:29:e7:79:57:80:40:d4:49:aa:
         16:46:a4:a8:5d:7f:5f:5e:52:73:c5:ca:3e:f8:e6:5d:e4:7c:
         b7:dd:93:44:4d:32:f9:7f:cf:e2:d1:70:7e:85:43:1a:49:08:
         57:f8:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:36 2026 by rpki-client