Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          PQfqbr3dF2acemyhZDCKW3cj95/jaKzLVSdPyc4UTIU=
Subject key identifier:   1E:3F:E9:42:35:6D:9D:7E:7D:F1:E8:70:4D:33:55:2E:3C:15:8C:1A
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       019F16AFD7D8FCF231139B5543B02956F279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0E79
Signing time:             Tue 30 Jun 2026 04:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 04:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 04:00:50 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: smVPPqXtl+MXFQZKyYF3kYMiMuTBxU6DlA34qUhew/A=)
                          2: AjF1xzLoCmUBj3GGwZ1oDsP0HrY.roa (hash: MDPBvNx4/AU6HeMPVBxMXRo2S5XCKx7igfWllN96Xeo=)
                          3: Dla58c4NF4e-8Fh3gF-JldNSHSM.roa (hash: fUcyUatpA7Zq3P4h9Dkuq1MejOsAl/ix3+G/GiH0qeM=)
                          4: E5IX0VwfA8Hs-Nf0IDXDUl3I7QI.roa (hash: bwDLzz1chdjqp0DDaeiR10pbirM6+aG2FaIGoT/5NYs=)
                          5: PBfzv0iiF6HGojmLt5BzWIMbg9A.roa (hash: nIjIXxuKfTGMh/FzfYXRKGadZaZtFRAFEH76fiqro7Y=)
                          6: XyBwwk9Rpf2EkG4M9-abdDNCWms.roa (hash: TZxVKHtjSFLa0T3PPjVjD1cxZHhhNWMZJ+1RNn+t7lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:16:af:d7:d8:fc:f2:31:13:9b:55:43:b0:29:56:f2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Jun 30 04:00:50 2026 GMT
            Not After : Jul  1 04:00:50 2026 GMT
        Subject: CN=1e3fe942356d9d7e7df1e8704d33552e3c158c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:77:5a:dc:b1:c9:06:97:b6:2c:83:de:a4:
                    fd:9b:5b:de:ac:b9:34:7a:83:1c:93:9f:0a:2c:f6:
                    10:2c:1c:5c:49:fa:5c:e0:2a:cb:cb:89:c5:bc:ae:
                    ae:1f:6b:d6:8a:93:e5:60:61:30:80:06:9f:fb:67:
                    ac:e5:e3:26:eb:1b:17:a1:24:36:f2:f6:65:16:35:
                    ff:4a:13:ab:96:cc:ca:8c:3e:43:85:0d:1b:ec:dd:
                    34:85:0d:c8:5e:8f:67:56:b5:00:35:52:e1:eb:61:
                    92:ee:d7:81:27:b8:db:57:22:67:d2:d1:9e:f7:96:
                    80:00:1e:8e:48:26:24:71:99:60:52:e7:1d:ed:3a:
                    84:9f:4b:6e:17:d3:56:08:d1:be:d6:ac:37:9b:ac:
                    2e:15:37:29:cc:f3:19:28:c8:43:ce:c8:4f:e0:6f:
                    93:95:88:63:3a:8c:2c:fc:7b:09:cb:63:f2:92:b4:
                    31:88:ef:40:57:03:bc:71:d6:79:0a:01:3b:52:af:
                    21:05:89:ad:1b:95:11:d9:59:80:a1:4f:15:fd:8b:
                    b9:a2:eb:d2:19:9d:de:3c:a3:ea:1d:70:e7:6c:fa:
                    23:ce:1b:56:cf:3d:30:00:59:93:a4:81:d0:97:d4:
                    c4:3d:bf:77:87:78:e3:a5:0b:01:26:11:03:94:0a:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3F:E9:42:35:6D:9D:7E:7D:F1:E8:70:4D:33:55:2E:3C:15:8C:1A
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:4e:27:0a:62:31:69:a6:8f:29:03:05:88:e3:4d:97:35:
         0a:3a:27:ab:9e:eb:07:73:11:48:61:23:04:61:79:28:4f:49:
         73:71:47:20:75:7f:d0:c7:d5:40:97:bd:07:70:e3:91:15:54:
         08:df:1c:34:30:34:f7:76:13:a3:5f:34:71:9a:57:af:17:1c:
         c6:69:2d:22:c6:12:f6:12:ca:2a:10:18:29:e3:e0:1f:97:9b:
         90:64:ef:aa:24:03:00:77:b1:77:ca:4c:76:32:89:19:6f:bf:
         6c:6f:64:5a:74:95:4b:25:7b:e9:a0:37:94:d6:78:10:b4:4f:
         c4:5e:ad:b9:24:fe:d1:72:00:b8:c1:f4:9a:64:b2:da:fd:11:
         74:7d:e5:03:8b:69:d6:e8:55:fb:97:28:08:f7:5c:6d:78:d1:
         27:45:4b:2a:12:23:f2:bf:ff:19:3d:0b:85:2e:17:f9:b1:54:
         d7:f5:ae:6a:0a:74:22:ea:51:9e:94:0d:51:9b:9d:11:e5:f6:
         60:a0:13:62:00:16:27:ef:08:9d:13:85:34:7b:ea:96:47:1c:
         6c:b9:29:53:cd:15:ee:e0:c2:52:20:00:cb:64:4e:b2:af:90:
         c0:0a:08:51:23:a9:0c:4c:57:70:17:bf:36:6d:fe:59:a1:ec:
         89:96:e8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Wr9fY/PIxE5tVQ7ApVvJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjYwNjMwMDQwMDUwWhcNMjYwNzAxMDQwMDUwWjAzMTEwLwYDVQQD
EygxZTNmZTk0MjM1NmQ5ZDdlN2RmMWU4NzA0ZDMzNTUyZTNjMTU4YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oh3WtyxyQaXtiyD3qT9m1verLk0
eoMck58KLPYQLBxcSfpc4CrLy4nFvK6uH2vWipPlYGEwgAaf+2es5eMm6xsXoSQ2
8vZlFjX/ShOrlszKjD5DhQ0b7N00hQ3IXo9nVrUANVLh62GS7teBJ7jbVyJn0tGe
95aAAB6OSCYkcZlgUucd7TqEn0tuF9NWCNG+1qw3m6wuFTcpzPMZKMhDzshP4G+T
lYhjOows/HsJy2PykrQxiO9AVwO8cdZ5CgE7Uq8hBYmtG5UR2VmAoU8V/Yu5ouvS
GZ3ePKPqHXDnbPojzhtWzz0wAFmTpIHQl9TEPb93h3jjpQsBJhEDlArdxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4/6UI1bZ1+ffHocE0zVS48FYwaMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqtOJwpi
MWmmjykDBYjjTZc1Cjonq57rB3MRSGEjBGF5KE9Jc3FHIHV/0MfVQJe9B3DjkRVU
CN8cNDA093YTo180cZpXrxccxmktIsYS9hLKKhAYKePgH5ebkGTvqiQDAHexd8pM
djKJGW+/bG9kWnSVSyV76aA3lNZ4ELRPxF6tuST+0XIAuMH0mmSy2v0RdH3lA4tp
1uhV+5coCPdcbXjRJ0VLKhIj8r//GT0LhS4X+bFU1/Wuagp0IupRnpQNUZudEeX2
YKATYgAWJ+8InROFNHvqlkccbLkpU80V7uDCUiAAy2ROsq+QwAoIUSOpDExXcBe/
Nm3+WaHsiZbo8w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 08:28:48 2026 by rpki-client