Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          s/OvLOA0XW/MsIjsJCvQir4EoyECQtWqqOoVXmHw82Q=
Subject key identifier:   97:89:40:34:77:A1:43:6F:B4:2F:41:64:B2:7E:5E:73:CE:B0:26:62
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       019F18D634D145E84AD8E58F28543EE07C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          0DF2
Signing time:             Tue 30 Jun 2026 14:01:59 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:59 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:59 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: 2U4OMAvx6Leg2VRxKiSahR9voCCJqzrOmyqU1rm09G8=)
                          2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:34:d1:45:e8:4a:d8:e5:8f:28:54:3e:e0:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Jun 30 14:01:59 2026 GMT
            Not After : Jul  1 14:01:59 2026 GMT
        Subject: CN=9789403477a1436fb42f4164b27e5e73ceb02662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:9e:a2:49:cd:81:82:6a:88:1c:ea:77:56:
                    0b:0e:f8:20:43:af:90:94:7f:d8:58:93:05:97:1f:
                    64:fb:84:fb:ae:86:32:55:f7:62:c1:1e:6d:21:2f:
                    3d:51:f5:e3:be:05:3f:cb:0a:6e:51:b0:51:d0:1d:
                    ad:b8:3c:4d:3f:3d:1d:17:63:7e:ff:4b:68:87:7d:
                    70:93:0b:eb:a5:dd:5f:69:72:e4:c1:44:d3:ad:fb:
                    07:12:11:03:07:2c:73:75:ce:73:ea:31:d5:f5:be:
                    81:33:26:10:ba:f3:d8:c0:35:7d:7d:19:80:19:44:
                    4d:9b:3f:dc:89:85:bc:41:ad:90:de:e9:2e:af:f4:
                    4c:51:50:d8:8d:5c:ef:95:93:d1:a8:d7:34:21:31:
                    27:73:31:23:23:b3:d8:7b:d2:5f:b7:c4:b5:72:ee:
                    ee:c4:23:e1:f4:85:c9:e8:1f:67:2c:71:a3:fc:a0:
                    83:e3:01:d3:4f:13:f6:77:d1:30:63:91:e3:cd:df:
                    b7:23:0e:fa:29:4e:34:3b:f3:a1:2d:d7:62:a9:1e:
                    4b:3a:09:2d:cf:5f:f2:f5:f7:6c:0f:53:cf:d8:07:
                    69:38:dc:ea:af:05:c6:04:72:0b:b8:90:7b:ed:53:
                    ba:3c:cd:02:ad:55:62:aa:d6:b0:94:b6:ba:7f:f2:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:89:40:34:77:A1:43:6F:B4:2F:41:64:B2:7E:5E:73:CE:B0:26:62
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:7a:2f:e9:2d:73:29:ad:65:8b:f3:05:cc:a5:76:4e:92:
         18:31:9c:82:4b:3c:93:a4:17:d1:07:e8:1a:3b:b7:ea:17:b9:
         70:a2:70:07:c6:2c:e3:4b:27:02:80:e8:17:b1:1a:ea:25:c2:
         b0:82:61:f1:74:36:52:68:74:2e:a4:c6:3b:07:6b:1f:72:f1:
         2a:8c:81:2f:fa:99:56:08:90:9e:b2:9c:7e:df:90:28:09:7d:
         e6:e8:71:cf:46:ee:07:77:b7:8c:3d:21:95:45:d9:51:bf:8c:
         59:af:b1:83:4a:0b:5f:0a:c2:a2:00:40:f9:5a:c2:dc:19:d5:
         79:d6:be:65:4c:a5:8f:e6:a2:a5:d5:23:d0:a1:ec:1b:1b:1e:
         84:88:3a:a4:f3:14:e1:c9:bb:ad:e3:f3:a3:f0:c5:8a:2b:1c:
         8c:a0:9c:7d:da:de:fe:ce:cb:c9:46:14:0d:0e:0e:21:6c:39:
         b8:83:68:83:c0:05:13:f1:05:5f:c2:73:f6:93:23:f1:5b:c7:
         18:50:3a:ea:f3:da:1f:b4:8f:c2:59:ab:c9:13:69:00:88:3a:
         60:4e:7d:8b:01:41:d6:27:b5:66:5d:bc:ad:85:b2:ed:04:54:
         9a:94:32:e6:09:69:19:49:b9:2e:8b:30:02:de:f6:f5:dc:4b:
         74:0f:f8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:25 2026 by rpki-client