Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
File:                     3cHKqpDJHGKtslTJSjfVxfecXxw.mft (raw, json)
Hash identifier:          VrXsib1Vlet2ODIrSEIIJrs975b0KI7ZFsoT47q7uAM=
Subject key identifier:   8F:D4:1A:44:1F:64:D4:E1:8F:FF:4F:F8:DA:75:D5:E6:60:E6:D7:DB
Authority key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Certificate issuer:       /CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Certificate serial:       01A0035E1CD3781EFB7C49C488915460797A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:01:34 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:34 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:34 +0000
Files and hashes:         1: 3cHKqpDJHGKtslTJSjfVxfecXxw.crl (hash: M5gA563CMO/UZTmBtBtTOcfvMUJBuBAw6L7sfihHEAk=)
                          2: YN9Cw4qcHXYpLVHYm4VWqw0i0Is.roa (hash: hKz3CdgByzclOsSKFERuifJCiSNf9f2KayzZQ7/xtmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:1c:d3:78:1e:fb:7c:49:c4:88:91:54:60:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
        Validity
            Not Before: Aug 15 03:01:34 2026 GMT
            Not After : Aug 16 03:01:34 2026 GMT
        Subject: CN=8fd41a441f64d4e18fff4ff8da75d5e660e6d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:29:1b:53:66:2d:cc:db:f2:01:5a:57:d6:
                    89:8c:19:34:0a:a2:e8:a0:7a:aa:3a:cb:31:01:c5:
                    e0:22:13:3a:3c:dd:e5:fb:da:02:8e:df:bb:ed:36:
                    6d:f5:c6:0a:92:6d:dd:5c:a4:d6:f6:b3:da:4f:4c:
                    f3:9b:c8:56:f5:85:45:98:53:9c:d4:9a:49:f7:89:
                    99:ff:de:45:61:e2:f5:a7:55:7b:fc:d3:c4:9c:82:
                    7a:94:37:36:95:66:87:4b:b9:84:8b:63:ec:1d:9e:
                    4e:e3:31:7b:cc:72:8f:85:be:32:a5:1c:b3:5c:a7:
                    00:50:e7:7a:48:81:ee:72:4c:d8:16:71:08:45:de:
                    b5:43:0b:b8:ec:ac:71:62:3e:8c:de:eb:57:36:fa:
                    71:15:a7:27:f0:ba:4d:6c:b9:67:58:db:bf:fa:9e:
                    65:1d:c2:ca:9e:ff:26:d6:ad:90:7d:21:c0:d6:9a:
                    30:b1:73:b7:f9:ca:99:4b:cb:b2:c8:d3:56:3b:7d:
                    b8:77:b5:b8:21:f5:6f:23:e6:ee:c4:66:24:f9:10:
                    d2:35:55:71:62:30:e1:d8:1c:ac:ed:87:7b:05:c5:
                    2d:4a:fa:91:52:7a:dc:4d:11:65:6f:c9:7b:2b:98:
                    53:45:a8:40:5d:54:85:39:e4:a9:9a:c0:95:cd:81:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:1A:44:1F:64:D4:E1:8F:FF:4F:F8:DA:75:D5:E6:60:E6:D7:DB
            X509v3 Authority Key Identifier:
                keyid:DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:5b:1a:17:dd:26:b2:e5:fc:fd:7a:26:7f:df:6b:eb:a7:
         a0:87:4d:ce:fa:fe:7d:d1:02:d9:1d:aa:02:7a:b3:38:8f:c1:
         e3:2a:07:d1:fa:7d:a6:91:83:42:08:fc:27:29:dd:68:f2:48:
         76:82:12:4e:1d:d6:87:19:f6:d0:68:45:55:37:aa:7e:4f:0d:
         8e:29:0b:c4:01:25:d1:c2:63:b0:f2:e2:4c:7c:ae:65:95:c7:
         75:7b:f7:f3:c1:59:c2:a5:58:ea:19:aa:c8:4f:35:59:96:12:
         82:81:cb:a8:ae:6d:38:02:ba:dd:7c:0d:13:e5:a3:e7:cb:df:
         81:c1:fe:4d:86:a4:26:27:40:a4:6a:3c:01:e1:be:5e:ab:2f:
         0f:c4:ee:91:b7:16:9e:69:ba:2c:b8:0d:aa:91:42:32:85:6a:
         fd:29:05:f9:a4:7c:62:c1:ac:3d:10:b8:1e:18:2b:2e:97:ea:
         69:80:8f:af:19:26:9b:da:4c:55:54:49:92:f9:4c:db:f5:8e:
         f8:c0:5a:19:e7:fd:5b:8d:df:38:0b:df:33:ed:45:4f:52:9a:
         c9:a4:4c:8c:f5:c2:48:65:ea:bc:92:cf:75:9f:8d:32:77:56:
         6d:59:22:59:34:14:cd:58:dd:39:f5:00:6c:37:0f:fa:d0:d0:
         af:9f:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:30:07 2026 by rpki-client