Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File:                     3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier:          0yCSPbw7d8wq+RRj7wxbwbsBQZgjMu6RQODGfpnNjHc=
Subject key identifier:   2A:CC:79:7C:A0:C9:0D:91:CF:2C:24:AC:AA:9C:11:82:01:55:9B:7B
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer:       /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial:       019F13416DD273B53E841ED52F710A1ADF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number:          198B
Signing time:             Mon 29 Jun 2026 12:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 12:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 12:01:22 +0000
Files and hashes:         1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: kFcqEf3MP4uvTbWagAun9S5/QHJz28XWchC98iUKq1g=)
                          2: SquegwSGe9lqsOnJYD7FAGZCM9U.roa (hash: qoe24JrxhFTVLaawaWqNTYrhXkVXUWR/nCvvs1nr+yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:41:6d:d2:73:b5:3e:84:1e:d5:2f:71:0a:1a:df:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
        Validity
            Not Before: Jun 29 12:01:22 2026 GMT
            Not After : Jun 30 12:01:22 2026 GMT
        Subject: CN=2acc797ca0c90d91cf2c24acaa9c118201559b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:84:c2:81:c1:a3:1c:99:2a:f6:f8:af:e9:
                    c2:e8:a8:08:7c:a4:35:f2:dd:cd:12:13:f5:f1:fc:
                    62:bd:69:22:ee:40:42:7f:ac:74:e7:24:02:6b:c2:
                    df:b9:0f:8b:27:d0:63:ae:96:b9:c7:2e:34:db:28:
                    1d:7e:4c:5f:5f:24:bc:ea:cc:c6:2b:87:92:e0:35:
                    22:34:d4:1b:96:ef:e2:72:51:cb:4d:ed:b3:0d:bc:
                    55:b7:9f:17:cd:b8:d8:69:1d:17:8f:4a:2e:88:37:
                    0e:04:fe:ec:42:e5:5e:19:85:40:30:ee:07:1e:b4:
                    b9:23:2c:da:41:da:e8:8b:cb:4e:41:c9:c7:4b:25:
                    5b:39:ce:70:6c:54:ce:d5:49:d5:e5:9b:fe:e2:c5:
                    45:24:86:5e:21:9c:f8:b6:ee:95:07:66:a6:2e:38:
                    f8:b6:75:04:5a:13:37:32:f4:af:fb:f4:97:dd:a3:
                    e8:f1:72:6f:6c:1c:5c:95:b1:81:14:80:3e:23:df:
                    ab:e6:91:a4:83:90:15:ed:06:9f:5b:8e:df:b0:8a:
                    6f:81:1c:bb:94:75:28:9f:17:e1:29:ad:1d:dd:f5:
                    f3:7d:71:70:e4:ba:10:bf:58:15:0f:29:64:fc:57:
                    f1:58:b0:a2:2b:36:5b:10:e0:0e:c0:cc:76:4f:58:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:79:7C:A0:C9:0D:91:CF:2C:24:AC:AA:9C:11:82:01:55:9B:7B
            X509v3 Authority Key Identifier:
                keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:e5:64:d3:73:68:cd:7a:9f:41:69:63:37:15:23:0a:97:
         0c:c0:77:d7:fd:ca:21:d0:68:2d:54:93:04:4f:a3:b0:2c:f4:
         aa:0b:9b:0a:09:e0:30:4b:bc:7b:ef:c8:d6:98:f2:ba:91:06:
         29:9b:c3:e0:49:ea:dd:4c:ff:20:02:6f:ed:de:59:f7:7b:4b:
         dd:71:71:50:10:86:a4:f2:f0:d9:64:a1:be:a9:82:f8:d2:17:
         4a:c2:f6:77:d8:ad:4b:9c:c1:a0:18:b7:20:74:c5:29:2d:fc:
         4f:2b:73:d1:a4:11:75:cf:ef:68:b7:b5:5a:3a:4e:39:04:c2:
         1a:4f:67:88:e4:3d:12:8e:b8:cd:52:14:a9:dd:f2:2e:93:2a:
         12:23:fc:b2:30:cc:7b:a1:a3:12:63:f2:f6:fb:7f:9f:8e:15:
         fe:c9:b8:b8:5a:f0:ff:77:ff:bb:e4:8e:1f:f0:b9:49:96:69:
         44:2a:9b:15:ed:db:17:a0:7f:c5:d2:d4:76:93:16:7c:eb:cf:
         9d:dc:05:ce:28:f4:a8:c7:f1:72:06:df:32:1d:db:25:c5:26:
         4c:ed:8c:14:25:95:c1:57:0f:e4:cc:93:d8:64:8c:b3:a3:55:
         45:75:10:b4:40:dd:57:ad:50:1e:dc:31:42:8e:dd:d5:dc:22:
         92:8a:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:27:40 2026 by rpki-client