Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          iRz+lhxay00ADG8rfnyX6TogHfr445EIvZrlRLGMun8=
Subject key identifier:   C3:F8:21:33:87:84:04:3D:AE:3E:19:A6:DE:F6:1C:E1:6B:43:CE:F2
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019FA03B4DC59C35941CF214AEEF32E1CF2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          19D5
Signing time:             Sun 26 Jul 2026 21:01:08 +0000
Manifest this update:     Sun 26 Jul 2026 21:01:08 +0000
Manifest next update:     Mon 27 Jul 2026 21:01:08 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: 4WTwcy/mPcqD/SG906kOw3bThz9fv9Uo/MX8CNYP4q8=)
                          2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
                          3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
                          4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
                          5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3b:4d:c5:9c:35:94:1c:f2:14:ae:ef:32:e1:cf:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jul 26 21:01:08 2026 GMT
            Not After : Jul 27 21:01:08 2026 GMT
        Subject: CN=c3f821338784043dae3e19a6def61ce16b43cef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:9f:af:53:e4:2b:9d:3e:25:31:8c:61:ec:
                    2e:b4:ee:e3:fb:40:93:ad:0e:ed:09:b3:fd:e9:05:
                    1b:a9:4c:9a:96:97:91:ef:c2:7a:86:e8:77:81:26:
                    3b:9b:07:b1:57:a4:81:13:d3:14:89:c6:f2:9e:50:
                    a4:65:73:05:f3:df:27:78:65:e9:5c:f0:45:1d:82:
                    85:fd:43:c0:ab:8b:96:ab:bf:3a:46:a9:26:74:c3:
                    06:b0:f2:0e:4e:0a:48:80:83:41:44:50:6e:88:85:
                    d0:d3:61:c6:ba:57:81:e5:65:72:3a:9a:f8:55:ff:
                    1e:b1:af:32:d7:96:48:0d:76:6b:c4:cf:3b:9a:95:
                    e7:67:77:16:cc:74:45:aa:f7:28:1f:ba:18:a1:ac:
                    99:47:a7:40:8c:ec:00:d3:e4:d4:71:e3:79:d5:16:
                    33:c6:d7:ee:99:f7:3d:8b:5c:d9:ae:47:ca:1f:1c:
                    d7:96:6e:a4:04:69:06:ea:5b:bf:22:fa:c8:3e:ec:
                    53:1b:57:0e:0f:fa:6a:9b:e6:6d:50:12:e4:9c:96:
                    89:cf:9c:4b:91:19:9b:d8:c0:17:65:14:a7:4a:e4:
                    ba:ea:c8:d6:d0:2f:d2:d4:2c:32:93:d6:6f:ca:b5:
                    df:25:86:31:ca:6e:ce:68:51:25:ad:d2:d5:31:c8:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:21:33:87:84:04:3D:AE:3E:19:A6:DE:F6:1C:E1:6B:43:CE:F2
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:83:6d:ae:d3:0f:d4:d7:87:cc:7a:74:13:00:ef:9f:b3:45:
         b4:b0:25:31:ed:b3:2e:ec:d1:5d:02:55:39:8b:cd:f7:b3:e2:
         53:e1:fd:8c:0a:51:80:e1:2a:d3:ce:56:5c:8e:36:08:50:a5:
         56:3a:d2:bb:52:6f:a1:96:d2:ad:d6:2f:07:74:f9:aa:e6:10:
         9d:f8:3c:fd:a3:06:54:ea:14:9a:6d:df:a3:ee:1e:34:c6:1b:
         75:16:ed:6e:e6:da:77:44:e9:26:df:ff:78:7b:46:18:b7:31:
         9b:7b:03:65:96:c9:be:a8:3e:6e:f6:f2:25:e3:1a:8b:97:07:
         fa:cb:24:40:cf:08:10:0a:a6:0a:08:29:28:85:70:5a:36:13:
         6d:c6:02:c4:ea:89:72:f8:11:74:4d:ef:6f:8a:71:64:6e:7c:
         67:73:59:01:3c:4a:1e:ef:29:b4:8e:bd:db:c0:da:d5:eb:a7:
         6f:08:4b:8a:ef:11:96:fe:62:be:6e:dd:11:26:1e:04:48:02:
         6a:a9:95:7f:6f:d8:1a:27:69:71:cc:48:ea:66:02:55:cc:d1:
         0a:68:98:eb:76:b6:97:d4:ab:1f:42:60:14:fe:84:b7:62:2a:
         cc:5f:45:21:ae:6f:85:4e:19:69:38:be:76:53:bb:14:50:67:
         48:a6:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:32:44 2026 by rpki-client