Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          UHPZcxTRjqyyxHfibuBsqCyxxp4NI8ffNXsyTNPICYA=
Subject key identifier:   27:BD:F5:43:06:31:7B:CA:6A:1C:71:DF:3A:36:6C:9D:86:FA:6D:92
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       019FF8DA86FF4CC9B5DD1A8D101FB0E19E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          19FD
Signing time:             Thu 13 Aug 2026 02:01:38 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:38 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:38 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: SdeX5Cf4yLdFdBwGwb/0AYQ7XbHKP87i/iK8ouK9Oy0=)
                          2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
                          3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
                          4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:86:ff:4c:c9:b5:dd:1a:8d:10:1f:b0:e1:9e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: Aug 13 02:01:38 2026 GMT
            Not After : Aug 14 02:01:38 2026 GMT
        Subject: CN=27bdf54306317bca6a1c71df3a366c9d86fa6d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:4e:48:a0:35:53:94:0e:2d:6c:69:62:5c:
                    53:53:7e:2c:ae:38:8e:02:a4:d2:e1:90:7c:dd:73:
                    3f:a4:f9:f0:29:bd:b6:28:eb:04:8a:cf:97:0d:f9:
                    fc:48:d6:4b:9b:f1:ce:af:9e:24:a4:f0:1f:15:a3:
                    fe:2f:5e:46:4e:d6:00:63:1f:df:46:2a:c4:49:87:
                    68:d0:ad:a6:e6:f8:98:34:2a:fe:52:d2:ce:b6:8f:
                    e4:a2:1b:3d:9d:29:4a:18:3d:2c:e3:0a:bb:00:52:
                    5f:e9:a6:1e:bd:e5:e4:1b:24:5f:77:51:12:b6:e9:
                    a4:8f:63:29:6d:3c:d2:10:32:61:35:46:cb:2b:1f:
                    8f:d8:4d:05:60:4e:3e:2b:cc:66:0e:71:fd:ab:f7:
                    48:69:21:4e:e1:f0:40:78:fc:cb:0a:34:8c:e2:64:
                    4c:3a:1e:69:89:9c:e6:fa:54:ad:1b:52:0f:7b:03:
                    05:98:7a:77:6e:98:d0:c7:3d:3b:9c:3d:e8:be:c6:
                    48:a9:8d:32:f8:18:0e:d7:36:fe:40:28:ad:ed:60:
                    1b:3f:4b:b9:7b:c9:e6:f6:9e:78:62:2d:45:96:ee:
                    12:bd:00:ee:db:6d:b3:0b:70:77:fd:63:98:00:c6:
                    c6:b8:19:63:45:24:ee:05:f8:43:a5:74:6c:e4:cc:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:F5:43:06:31:7B:CA:6A:1C:71:DF:3A:36:6C:9D:86:FA:6D:92
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:29:76:04:11:6b:67:c3:54:79:f5:ae:9f:4d:3f:a3:0c:75:
         89:ac:84:85:fc:d0:74:23:c4:8c:d0:06:a0:84:9f:78:8c:dd:
         6a:21:7e:83:fb:cc:b2:16:06:d8:b1:b5:78:ea:57:46:96:50:
         dc:d8:01:4b:00:57:b8:56:0a:7d:65:fe:24:7f:a3:27:43:bf:
         d8:36:c2:1d:57:4c:6d:d7:bc:bf:7b:fd:be:f9:07:c3:af:55:
         3f:16:af:56:b6:ac:5b:20:db:ed:09:1a:e1:86:18:94:77:bf:
         19:d7:ea:e7:73:38:80:60:b5:06:4d:1e:d5:91:31:81:d0:89:
         4c:12:7a:16:38:c0:58:03:e7:70:22:17:87:a5:71:f7:29:b4:
         9e:0c:46:0e:55:b5:0c:f0:ac:cf:87:65:9d:c3:11:d5:53:0a:
         06:78:51:76:39:64:68:5a:6f:84:16:c2:8f:70:7f:5d:d8:26:
         a1:9f:2f:31:58:ba:0b:b7:b6:4b:16:db:49:be:54:6c:b5:51:
         0e:b0:57:6d:95:8b:6f:c8:44:c8:12:79:78:1e:c2:8c:13:a7:
         a7:ae:07:9c:7b:43:08:13:17:32:6b:3e:2f:06:f9:39:26:cb:
         99:22:ee:d3:cf:a8:c0:0a:46:cc:60:4c:c7:a6:ae:c9:9a:db:
         1c:76:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:01:15 2026 by rpki-client