Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          mpRLxdG94z4xW5CBHZsCn0FFh3Pcwz6sW0KgYweJVvI=
Subject key identifier:   71:9E:DD:2B:16:83:D6:7F:BF:AE:F6:75:83:CA:0A:34:8A:20:E1:27
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       019F178C2D31E4E5C796C59A3D9C83E8BB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 08:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 08:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 08:01:30 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: UYCjEu1xoUBrbf5XIb7kv3S1K/fb82Jkrbm0XV6O6s0=)
                          2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:8c:2d:31:e4:e5:c7:96:c5:9a:3d:9c:83:e8:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Jun 30 08:01:30 2026 GMT
            Not After : Jul  1 08:01:30 2026 GMT
        Subject: CN=719edd2b1683d67fbfaef67583ca0a348a20e127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:e8:d9:97:f3:6a:9f:72:14:4b:a8:de:83:
                    48:59:fc:aa:1b:98:23:c2:e4:77:53:53:1b:93:2b:
                    a4:ad:fe:a1:cd:98:5b:86:12:d7:9a:53:30:10:95:
                    af:4c:bb:01:97:c2:42:6b:e8:d7:99:a2:e6:2e:4a:
                    90:5d:d9:c9:cf:68:7d:d9:6a:f5:58:25:ca:0f:d3:
                    3b:b7:a0:86:9e:99:4c:fa:7f:64:56:7f:7b:af:9e:
                    e3:33:d3:ae:7f:62:93:25:61:ba:87:30:84:86:31:
                    d6:57:df:3f:4c:70:f7:6a:50:ea:fe:18:59:4e:1e:
                    13:14:4e:27:4f:64:00:f8:61:65:a6:fb:7e:0a:5a:
                    01:31:11:90:ec:02:a2:9b:f7:c6:51:cb:eb:73:b9:
                    2f:7d:a2:d5:cd:51:e8:da:62:df:2f:c7:ec:76:a8:
                    f1:6c:45:d2:24:b1:a8:84:fd:ac:35:6d:e2:0b:9a:
                    0c:dd:0a:e4:96:3e:5b:06:6a:f3:e0:47:a7:c0:6c:
                    7e:48:83:74:9d:5c:d2:9c:5d:ca:b6:04:d0:de:0c:
                    c6:31:d4:94:78:89:f5:9d:16:77:bb:f8:67:da:2d:
                    8e:9a:f1:3e:9d:8f:6c:1d:ce:db:71:1e:3a:55:87:
                    25:96:7c:c3:7b:df:c5:1c:d9:a0:21:66:d9:db:25:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9E:DD:2B:16:83:D6:7F:BF:AE:F6:75:83:CA:0A:34:8A:20:E1:27
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:96:69:b1:43:70:32:b9:05:25:46:5f:11:59:33:4d:7c:db:
         e3:20:dd:65:99:e2:d9:a5:bb:b0:dd:a5:44:3b:91:15:43:4f:
         68:d8:6a:c5:e7:28:df:1b:ec:8c:3c:a6:93:0e:9c:c5:2f:0e:
         f1:f7:f4:ff:c6:1c:e8:6a:fd:9e:fd:af:6e:19:aa:39:17:fe:
         d6:a6:f2:aa:ae:da:b9:97:7a:47:89:df:f7:7b:42:d5:0e:d9:
         4a:6b:2d:e6:d9:64:bc:c5:d0:28:f9:1e:8c:8a:0c:b9:75:01:
         07:77:1e:a3:89:10:33:bc:b4:65:25:8e:e3:e7:4c:31:2b:09:
         2a:0f:f6:2f:d9:16:eb:bb:14:bb:8a:fc:cf:5d:99:4b:01:aa:
         2f:14:d2:eb:49:da:65:52:8e:42:60:18:45:ac:6d:24:7c:9f:
         c9:0a:1c:8c:01:32:0f:72:15:7b:56:58:f7:74:78:48:35:ad:
         6a:a2:44:d0:44:a0:32:39:a9:d2:d5:28:10:48:c8:5a:35:cc:
         c4:42:20:85:4f:83:40:87:04:0d:ed:dd:0b:83:3e:54:49:e2:
         8a:ff:80:ae:e8:63:8a:f2:86:ee:a1:06:a1:13:4a:53:78:df:
         90:89:37:f8:a2:3a:b0:f8:ca:4e:5b:b2:d4:96:2f:68:81:91:
         c8:28:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client