Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File:                     3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier:          W1vnQG7fCk7rb7ib6nzy0A92wyCq7XAGTbNMKBJzErA=
Subject key identifier:   1C:8F:2D:30:72:C6:95:71:6A:D9:1A:52:B5:3F:68:B5:BF:A2:E9:1D
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer:       /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial:       01A0024B0B07B0D448E209A935000274F40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number:          06F3
Signing time:             Fri 14 Aug 2026 22:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:07 +0000
Files and hashes:         1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: x+1rYuXqFCRJ+RGVarmIsvrCI+NAT2n3bUZS0cY5MlQ=)
                          2: PWpDsLMHEz8TOyrA-SyzsSx50x4.roa (hash: 3QKMuAcr+JgQ4o/2LQdy62QLuMBtccj8bJckjR3bodQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:0b:07:b0:d4:48:e2:09:a9:35:00:02:74:f4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
        Validity
            Not Before: Aug 14 22:01:07 2026 GMT
            Not After : Aug 15 22:01:07 2026 GMT
        Subject: CN=1c8f2d3072c695716ad91a52b53f68b5bfa2e91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:7f:d3:67:97:b6:ea:56:f2:ae:d6:bd:08:
                    7a:80:da:2f:86:f6:ff:e0:f7:54:27:99:da:68:35:
                    ea:ff:2f:22:50:5b:45:da:f5:ca:aa:34:a2:93:03:
                    84:2f:5b:ef:c7:b5:db:94:84:59:0c:62:97:ef:5b:
                    8b:6f:a2:29:b8:dd:b3:47:83:13:24:bf:b6:4c:21:
                    80:6f:23:c3:49:3e:c9:6d:aa:a9:95:54:c1:0a:15:
                    aa:bb:90:8e:f5:06:8c:f1:c7:71:ca:82:d3:2c:a8:
                    c9:11:ee:1b:11:c7:6d:72:e6:0c:c9:fb:11:29:89:
                    f7:d2:82:c8:83:c5:44:dc:06:18:94:6e:65:06:e8:
                    56:60:43:a0:25:3d:99:30:f6:59:7f:bc:01:f7:0d:
                    cc:53:e8:b8:30:5c:64:c9:e1:41:74:25:05:f4:b5:
                    dc:a3:61:48:43:76:1b:27:54:83:66:5c:d6:42:3a:
                    40:b1:75:8f:d0:04:8f:2f:d0:75:d9:4c:9b:c2:2c:
                    3c:4f:24:d4:0c:73:97:34:b4:61:50:65:b6:db:d4:
                    11:b7:d8:22:4b:47:ae:ff:d8:83:cb:4c:81:58:d8:
                    7d:d4:79:b1:d3:02:3e:29:f3:1c:42:7e:15:87:89:
                    22:05:e4:9b:55:8f:a9:01:b3:61:e9:27:a0:e5:61:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:2D:30:72:C6:95:71:6A:D9:1A:52:B5:3F:68:B5:BF:A2:E9:1D
            X509v3 Authority Key Identifier:
                keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:17:89:91:58:69:37:9d:f5:59:10:37:b7:96:fe:50:9a:
         7e:17:5b:87:32:83:44:8d:9e:ae:ef:75:98:9a:17:a1:af:74:
         89:72:d2:54:17:7e:4d:08:e3:67:3f:a8:b2:15:7d:0c:dc:49:
         73:f4:48:52:36:24:ae:0d:11:5b:11:3e:f1:03:7f:1e:37:cd:
         e7:f6:f1:2a:65:4e:ef:8e:73:7c:65:e1:64:1a:ba:ba:60:d7:
         21:8d:f8:46:db:2f:bb:5e:05:54:13:63:71:2f:0c:d3:d5:19:
         b6:7e:4d:fc:92:6a:c4:e0:eb:ad:d4:e4:d6:1d:c3:bc:c9:b1:
         f8:e8:c1:ec:9f:18:d2:b5:65:16:56:67:3a:15:10:66:8e:62:
         55:94:7b:7b:22:f9:2c:d0:9b:2e:67:47:6b:c1:aa:54:da:af:
         a9:8f:64:0d:18:fe:c0:62:c9:1d:c8:53:86:b7:10:9c:61:92:
         b2:06:d9:96:89:0b:8c:d9:fb:f2:c1:6c:f3:b8:56:18:41:9b:
         dc:ed:16:e4:b3:d1:fb:96:ce:a7:82:69:9f:60:02:fa:34:a9:
         2b:ac:30:61:3b:1d:0e:6b:56:ae:7c:a5:33:a3:f7:af:26:d1:
         a1:28:30:21:53:70:df:07:65:e6:de:03:b4:49:62:7f:2d:1d:
         63:8f:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:05 2026 by rpki-client