Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
File:                     f3ET_r3boeBrlTCDtmSO-qAx8fU.mft (raw, json)
Hash identifier:          rS/qW0UtwK2EuIgPWpz0co/nVyF27axbND254uZx4EA=
Subject key identifier:   2A:6E:A1:0D:88:5C:38:1E:2E:DF:1B:F7:70:3D:CB:D3:DF:10:46:A0
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Certificate issuer:       /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial:       019FA0E06F5A3DE996FC408F6B98BDE19BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:30 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:30 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:30 +0000
Files and hashes:         1: 1-OYpxvXf01l-3v81_JO0GhTw0U8.roa (hash: maP/DOqBfThrLU296WG85Zf4viQIPPYK5NJmpNuBrGg=)
                          2: Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa (hash: cAz0BXExpLFECormHh+BtGBygCZH+t51hrNKrPat5QE=)
                          3: CH4cB5wInBV4cwxI5w3P2wuRLI0.roa (hash: 22NNWmSGS7QrfggnbNY17T1GU9k5KhX54GUORhCR+2Y=)
                          4: GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa (hash: T6n6JXxwyvyhCyYpVrtVqkZOJ12HwYIjXtEa/2LOeWM=)
                          5: UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa (hash: JRmODBb7OlHw1Za55dylor0a47b0qEs89+ukqYmHts8=)
                          6: f3ET_r3boeBrlTCDtmSO-qAx8fU.crl (hash: 370WU+G0WKfeOnY8h5widOZw9RkmU/BIuh+hX/rstuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:6f:5a:3d:e9:96:fc:40:8f:6b:98:bd:e1:9b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
        Validity
            Not Before: Jul 27 00:01:30 2026 GMT
            Not After : Jul 28 00:01:30 2026 GMT
        Subject: CN=2a6ea10d885c381e2edf1bf7703dcbd3df1046a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:5f:c5:3d:7b:87:5c:04:ee:54:9e:6f:da:
                    51:2e:ba:c8:19:5d:5d:54:a6:53:ef:e6:66:2b:6e:
                    0a:4c:81:f9:e3:4f:e5:b6:a7:92:e0:6a:7b:19:56:
                    25:4d:67:49:98:03:38:26:e1:a8:4b:6f:39:7c:d8:
                    a6:cf:ef:53:60:c5:a6:50:b5:9f:2b:e8:a0:6a:c4:
                    97:e9:36:b7:32:a7:46:bc:64:7f:48:34:b4:a6:8f:
                    a2:ed:71:aa:09:ed:7d:50:31:eb:ff:e7:b3:0e:dd:
                    f4:f7:62:fe:bd:0d:d7:33:49:12:7b:bc:4a:84:f9:
                    f5:5a:a5:28:3d:d7:53:25:69:61:82:0c:d4:c5:ff:
                    04:6d:1b:31:9c:0e:9a:66:00:9f:30:e6:0f:9c:82:
                    df:3d:6b:5e:ec:bd:cf:cf:94:6e:c6:16:95:d6:df:
                    23:59:b8:9a:fa:d9:82:c7:e7:78:a2:4b:fd:0a:d1:
                    73:63:37:fa:da:a0:c0:26:19:93:f5:ec:94:de:6a:
                    35:96:0c:c6:13:64:a0:83:91:9e:7c:c5:d4:0e:bd:
                    b6:e7:ae:4a:37:b3:4f:df:fd:81:ae:9c:42:99:a8:
                    5f:40:f0:ee:b3:50:f4:2e:34:9f:c4:b6:03:2e:ed:
                    9f:51:36:7d:4a:fe:8e:33:ea:fa:b3:f0:32:af:ba:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:A1:0D:88:5C:38:1E:2E:DF:1B:F7:70:3D:CB:D3:DF:10:46:A0
            X509v3 Authority Key Identifier:
                keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:32:fd:2e:13:51:0d:f7:c1:05:f0:3b:2c:08:ea:87:68:2a:
         e8:8b:93:e3:fe:0e:f2:88:58:f8:ae:04:10:d3:ca:31:e9:d4:
         be:d7:8e:66:43:f5:ff:d2:37:61:80:80:a8:19:48:9a:7b:8f:
         4e:7d:32:ba:f8:4d:5f:3c:41:be:66:22:ac:95:ae:fe:b0:8e:
         fb:95:3a:56:d5:a9:8c:28:6a:5f:32:6e:20:9f:5c:ed:66:ee:
         ce:d3:7d:b0:a9:1f:aa:3b:96:74:0b:f3:62:bb:10:f3:b8:b2:
         50:e5:49:f8:90:56:96:91:5f:da:15:26:e0:a0:ea:c7:a0:79:
         93:72:d2:c4:55:11:68:41:9b:a5:62:33:b6:ec:ea:8f:68:2b:
         d2:2e:ad:e6:72:2f:45:98:6b:fc:23:4c:ea:ce:f3:a4:9f:fa:
         1b:29:60:9a:39:35:ae:6f:e9:0b:01:e5:b1:37:66:6a:43:a8:
         24:2d:5a:63:b6:50:d6:52:01:67:e1:9b:d1:49:2f:31:ac:78:
         3c:c7:18:e6:70:5c:7c:34:62:94:b5:38:0f:0a:6d:04:f8:76:
         42:e8:91:7a:21:c8:ec:e7:16:7a:84:2e:62:17:4f:03:32:7a:
         19:ee:79:09:18:21:ba:dc:71:6a:8b:71:00:f1:f4:54:47:2f:
         75:f0:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:54:10 2026 by rpki-client