Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File:                     3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier:          tD7qZTKGMJxwjLnDctCdZmfQ1Is2tE6t/URjyTL+hR0=
Subject key identifier:   76:2E:B6:7B:E0:E9:80:0F:F2:3F:87:0B:F2:F7:44:A4:AA:82:F1:34
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer:       /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial:       019FB0F751D1790B6010BDFCA30A40C31E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number:          196A
Signing time:             Thu 30 Jul 2026 03:00:26 +0000
Manifest this update:     Thu 30 Jul 2026 03:00:26 +0000
Manifest next update:     Fri 31 Jul 2026 03:00:26 +0000
Files and hashes:         1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: ziAERludUEvMsGoUEJfsISSuy3Mfx0LaCDKnW5ZQzC0=)
                          2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b0:f7:51:d1:79:0b:60:10:bd:fc:a3:0a:40:c3:1e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
        Validity
            Not Before: Jul 30 03:00:26 2026 GMT
            Not After : Jul 31 03:00:26 2026 GMT
        Subject: CN=762eb67be0e9800ff23f870bf2f744a4aa82f134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:c6:50:2b:8d:a8:1a:c6:ea:82:83:82:7a:
                    a9:11:74:86:ac:25:17:da:eb:26:77:10:e5:29:d9:
                    28:37:33:dc:1c:ce:6c:55:ac:7d:b2:06:5e:06:eb:
                    99:02:ff:18:ca:af:3c:d9:01:5d:18:27:29:1a:0d:
                    64:25:72:85:6a:e5:56:b4:34:b4:9b:c2:46:0a:19:
                    d2:4d:57:cc:3c:6d:77:42:cf:f4:5e:15:5a:8e:9b:
                    23:ba:a0:94:03:a4:bd:75:2a:3c:fd:14:c3:c4:f2:
                    e4:83:5c:c9:d9:67:69:4b:51:e0:f3:cc:39:26:78:
                    1c:92:43:b3:e2:26:9f:ca:1b:17:36:fe:4e:33:c4:
                    af:b5:22:18:22:17:21:11:7d:57:e8:51:4f:66:ac:
                    32:62:7f:f1:0a:8f:88:26:01:83:35:bc:83:ca:9a:
                    d0:0e:5d:98:8d:32:4f:28:c3:53:31:a7:53:be:5c:
                    26:b7:a1:fa:c5:b6:39:45:28:c9:25:a8:97:bd:0f:
                    d1:6c:75:35:30:e6:b3:c4:4d:33:a7:dd:22:52:fa:
                    22:9f:9a:7b:20:66:36:ce:08:67:2f:72:28:5d:8e:
                    aa:8d:92:9d:4f:7b:5a:a6:a3:e3:d9:e7:47:1c:77:
                    74:63:2b:91:e7:7c:e3:ad:41:cf:70:76:14:45:46:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2E:B6:7B:E0:E9:80:0F:F2:3F:87:0B:F2:F7:44:A4:AA:82:F1:34
            X509v3 Authority Key Identifier:
                keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c8:49:f4:f5:7b:90:8f:fd:c1:de:81:24:3e:10:46:b0:1b:
         ab:1e:8e:59:3a:0a:bc:43:d7:b7:de:90:9a:fd:e6:0b:c6:5d:
         84:c1:4d:f3:36:e4:23:a8:a8:ca:d9:cb:06:51:21:01:83:0c:
         11:ec:6b:82:90:6c:5d:7b:30:3b:38:c2:9e:82:8c:95:4b:e2:
         b2:fb:96:df:84:9c:2b:64:2d:d5:9a:15:91:94:7c:9e:e2:81:
         f3:57:1d:95:82:d8:fa:3e:2e:83:87:e2:af:ff:d4:e9:75:af:
         a9:ea:ea:bb:ee:e1:c1:96:c6:88:70:d9:e7:03:99:1c:57:5a:
         6f:62:6e:12:01:5b:8b:f2:f6:b1:2d:96:8a:ca:fa:6b:65:04:
         41:e0:dc:39:23:ac:13:e3:e0:a7:a2:52:43:e7:77:1e:2f:b7:
         9e:53:8e:6d:c4:8f:b8:8f:94:25:d6:ea:c3:e5:e6:e2:34:69:
         d2:ee:d8:b8:62:93:5a:79:e6:29:64:ee:c7:7a:77:bd:54:51:
         56:d9:bb:6a:56:cd:99:df:c3:ad:ec:bc:ed:88:af:e4:28:cc:
         33:8f:9e:5a:72:5a:45:f2:9a:75:3c:b2:05:82:70:3c:36:25:
         1f:b5:66:ad:ef:69:11:74:7a:19:5f:2e:bb:8d:71:55:ca:af:
         0e:e4:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:15:32 2026 by rpki-client