Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File:                     3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier:          zzAwgQ81P2w8YhJOtgH1/6Kto5aGGvYk67p8dZhvOtg=
Subject key identifier:   C7:06:5E:23:C4:2A:38:5C:2B:7A:77:FC:EF:76:C4:8F:A4:13:70:E7
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer:       /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial:       019F65707B35CED782A5B71EDB7AFA17BF41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number:          020D
Signing time:             Wed 15 Jul 2026 11:01:38 +0000
Manifest this update:     Wed 15 Jul 2026 11:01:38 +0000
Manifest next update:     Thu 16 Jul 2026 11:01:38 +0000
Files and hashes:         1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
                          2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: wbYsFe0IcZK9PcBZm8fCnnEPPcFu8YUvhAK0IdlNIVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:65:70:7b:35:ce:d7:82:a5:b7:1e:db:7a:fa:17:bf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
        Validity
            Not Before: Jul 15 11:01:38 2026 GMT
            Not After : Jul 16 11:01:38 2026 GMT
        Subject: CN=c7065e23c42a385c2b7a77fcef76c48fa41370e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:01:96:b1:60:0b:38:97:b4:ea:f2:33:07:
                    58:0e:42:6e:44:48:ae:12:04:b6:cd:03:34:b0:e3:
                    5d:3e:f3:f5:30:ca:e0:95:d1:9d:d1:fe:8f:f0:2e:
                    6a:39:af:7a:1d:a2:b6:62:96:0c:28:e2:2d:98:38:
                    a1:06:5c:de:60:03:8d:fa:62:9a:84:3b:e5:60:de:
                    48:df:45:ff:f5:42:0a:39:0e:77:e5:62:ec:72:42:
                    00:1e:fd:6c:1c:9b:c5:f6:33:9c:02:41:93:35:c6:
                    39:09:fd:ef:59:2c:b6:69:f4:82:bb:6c:e6:36:dc:
                    ef:e2:a7:e8:f2:52:40:f6:ed:a9:8a:ee:7b:9c:a9:
                    c0:8b:49:e8:4b:39:10:5d:dd:e4:6e:63:7f:67:16:
                    52:32:c6:2a:67:52:64:df:34:63:98:60:50:bf:1d:
                    d5:be:b6:71:49:5a:29:69:03:34:74:f7:a1:f5:87:
                    39:27:73:84:58:56:a3:7f:0e:3d:a8:1d:ab:68:cc:
                    e0:dc:f3:87:59:a1:f4:b2:1c:4e:63:51:a8:cc:15:
                    e0:3f:13:e3:aa:bb:9f:f1:e1:a5:32:43:5d:41:cb:
                    bc:df:33:37:a8:9a:e7:44:f3:68:83:34:33:00:e3:
                    a2:05:75:7b:af:4e:86:6a:2c:2d:36:8f:7b:ec:ad:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:5E:23:C4:2A:38:5C:2B:7A:77:FC:EF:76:C4:8F:A4:13:70:E7
            X509v3 Authority Key Identifier:
                keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:0e:5b:0e:ae:30:0d:ae:f7:0c:b3:2b:e0:7e:5e:6b:b6:
         9b:57:23:1e:f3:56:44:09:65:4a:2c:6d:6c:a0:12:82:86:02:
         9c:93:72:f3:7e:e1:30:92:23:4b:13:bb:79:e2:82:0f:0e:61:
         8e:7d:21:0b:17:1f:c1:bf:d6:5a:c1:7e:a9:c5:56:c8:9e:63:
         9b:3c:e4:34:ea:e1:9b:53:60:17:f1:a6:b3:6e:ea:8a:0b:2c:
         fc:6f:4f:e3:e5:91:36:bc:87:24:8f:6a:18:c8:fb:4b:3c:c0:
         0e:03:44:54:89:fd:8c:25:ed:c5:35:a6:8f:fa:4c:29:bd:45:
         2e:7f:b0:0a:4f:09:92:50:65:f0:6f:5f:ba:d2:2c:14:fd:1f:
         00:cb:c1:63:77:a6:54:15:ec:2a:2b:17:9f:87:5b:00:43:ee:
         53:38:04:60:eb:e4:a8:37:b7:91:d0:0f:2c:44:c4:01:49:de:
         e4:35:94:8e:f7:a9:85:87:b0:77:13:ad:07:a7:e2:ce:ff:f7:
         1e:d4:dd:1b:3d:c0:4c:8c:33:06:2c:07:af:78:90:08:89:a9:
         49:7f:0c:61:8a:ed:09:35:9e:f2:80:b4:13:38:10:dd:60:47:
         3b:f3:7c:a8:85:6f:2f:e4:cd:3a:c3:d0:f1:e2:e4:6f:64:23:
         1f:e1:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:33:30 2026 by rpki-client