Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          w5BZLemmQDjXtUXbMGN63XZH90iT8AowgH7SwHbG/TE=
Subject key identifier:   A6:CE:00:A3:8E:C1:23:5D:48:30:88:1D:9D:88:FA:74:6F:FF:DC:47
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       019F17F9638AC77155211E9D138EF20F1374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          1994
Signing time:             Tue 30 Jun 2026 10:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:47 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: GoS0tIuHcNP41+DFWwsiLxh8uOWehj+ZriDmOtm5oCk=)
                          2: C6zjpcBdZcRudxtmosvZuextZiI.roa (hash: zfnjDDGxVh2c7H/SnJCHldm/s9nx6Q4NSeuXoVoEuIA=)
                          3: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (hash: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk=)
                          4: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (hash: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8=)
                          5: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (hash: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8=)
                          6: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (hash: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:63:8a:c7:71:55:21:1e:9d:13:8e:f2:0f:13:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Jun 30 10:00:47 2026 GMT
            Not After : Jul  1 10:00:47 2026 GMT
        Subject: CN=a6ce00a38ec1235d4830881d9d88fa746fffdc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:22:a5:58:93:8f:62:a1:e9:bd:ad:90:60:
                    dc:9c:b5:78:9e:63:c7:a4:02:bd:c7:4b:5c:16:5c:
                    1d:4e:97:61:e2:10:f0:f0:76:be:69:2b:8c:e8:f5:
                    35:0a:57:17:9f:07:25:a2:6b:29:51:5e:22:2e:6c:
                    3f:68:f4:a6:fa:92:2f:7a:38:2f:f0:0b:a7:3b:3e:
                    d7:a1:93:6c:d5:4d:53:73:95:be:0f:76:86:6f:c1:
                    33:dd:e4:be:88:2b:62:c4:cd:4d:62:da:4c:45:8a:
                    d6:6a:de:f1:ad:f8:ba:98:51:ec:2c:51:2b:68:2d:
                    82:e6:8c:72:7c:bd:c7:30:b7:3d:d6:e6:bc:30:44:
                    ee:0f:0f:91:ad:59:8c:cb:74:10:77:00:44:10:ad:
                    49:27:4a:b9:5b:71:69:c5:b8:db:ec:b0:a5:80:65:
                    e9:7c:fb:77:50:54:2c:c3:56:20:68:32:b2:e8:83:
                    8c:b9:ca:5a:8d:82:bd:bd:62:8b:5d:27:36:9f:a4:
                    f3:e4:f6:fc:d6:e7:47:85:91:ba:8d:a3:f5:1b:72:
                    10:d7:28:20:ac:4a:34:ce:be:49:2f:e4:50:16:67:
                    88:e8:a9:dc:e1:56:90:44:df:01:b2:78:79:50:80:
                    57:ac:f0:e8:4e:fe:96:1d:9c:26:7e:f6:df:ef:71:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CE:00:A3:8E:C1:23:5D:48:30:88:1D:9D:88:FA:74:6F:FF:DC:47
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:d6:cf:1a:3d:89:47:50:36:23:99:ca:57:a9:b6:3a:fc:
         b5:3f:5d:a3:03:fa:10:ce:2e:b3:19:a8:c8:b5:61:28:dd:b6:
         05:57:41:c7:98:68:79:a2:cc:d2:43:b7:ae:52:82:2c:60:17:
         62:58:10:68:38:00:01:f3:9f:59:76:f0:fa:70:7d:22:74:38:
         33:1a:0e:70:37:0a:01:df:a4:5f:23:7a:a4:9d:7c:74:20:ae:
         d1:63:b5:7b:f7:33:c7:5e:39:76:9f:b2:2a:c6:d9:56:f2:70:
         cd:bf:c1:f1:ec:71:dc:03:c6:7f:ab:24:49:ad:b5:7b:02:c7:
         ad:ad:6d:ba:28:5a:a1:69:3b:25:d2:d0:d7:5b:13:e8:dc:41:
         58:47:14:8e:fe:50:43:54:c1:bb:82:78:84:5b:bb:14:8c:30:
         38:09:9e:cb:e0:44:33:e2:2e:71:64:0b:7b:7c:06:c0:e3:fa:
         b1:cb:37:18:22:2e:8e:a7:f9:e7:8e:26:b6:66:7e:8c:c7:5b:
         8f:0f:7f:cf:e0:e9:fd:bd:76:6a:e5:3f:84:3e:da:f6:40:d7:
         8f:c9:2f:03:21:a5:19:92:ce:88:d3:7f:68:5b:ed:2a:b4:e4:
         bd:5b:24:0b:4f:38:30:0d:59:ad:71:7b:8e:51:aa:74:91:25:
         23:dc:7f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:24:27 2026 by rpki-client