Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File:                     3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier:          coj//tMEBVurjC8C0EuTtKsnCUIvPz/UuQQYt9jqsVM=
Subject key identifier:   07:AD:27:F5:8B:C0:12:41:DD:13:2D:AD:DF:7A:07:01:DC:43:14:14
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer:       /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial:       01A001DCE724753C3642FB151A70BFEFD6B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number:          1A07
Signing time:             Fri 14 Aug 2026 20:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:49 +0000
Files and hashes:         1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: yxEu45PI90usLMyGBQaiy01H8KeuNMcr0UgykjqbHZY=)
                          2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
                          3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
                          4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:e7:24:75:3c:36:42:fb:15:1a:70:bf:ef:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
        Validity
            Not Before: Aug 14 20:00:49 2026 GMT
            Not After : Aug 15 20:00:49 2026 GMT
        Subject: CN=07ad27f58bc01241dd132daddf7a0701dc431414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:53:55:2d:4f:bf:a4:1c:ef:c3:dc:a6:03:
                    29:00:ca:c6:7f:87:4f:0c:9d:44:e7:69:4e:5f:f0:
                    6d:c7:40:b0:25:ac:ca:1e:db:6c:a1:8d:a6:82:96:
                    c5:8b:fa:be:8b:4e:d4:15:9d:40:d9:c5:7d:72:e6:
                    cc:7d:64:0c:9b:a8:bc:34:c7:25:ee:a7:3e:b5:b2:
                    4f:fc:6b:c9:b6:10:f5:7b:58:c5:2c:f4:06:49:36:
                    00:c9:2a:d3:4e:50:e6:e8:68:33:6c:19:90:02:82:
                    1a:50:34:ff:70:8c:e2:29:15:f6:87:55:04:ad:3b:
                    1d:85:b8:29:f2:af:8d:48:0d:36:29:2d:50:98:a4:
                    01:47:99:66:3c:94:c4:9f:03:1e:4f:f7:e1:cc:96:
                    e1:40:10:66:c4:e0:f6:7b:07:01:ce:c3:a6:dd:e4:
                    71:82:3d:b0:2f:5f:0b:4b:66:d7:6d:e4:fc:49:47:
                    fb:b3:32:e1:8e:cf:a4:20:e9:32:e8:19:be:63:74:
                    c7:df:49:b6:81:d0:5b:07:6d:a9:59:9c:8a:06:62:
                    ea:3e:a7:d6:4b:31:a9:b4:e1:13:78:d1:b4:b6:9b:
                    69:1a:80:fb:64:9a:59:14:fc:65:a7:8e:9d:b1:7d:
                    d0:d2:c9:0e:de:e2:2b:f1:c6:59:ac:d8:ee:94:fc:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:27:F5:8B:C0:12:41:DD:13:2D:AD:DF:7A:07:01:DC:43:14:14
            X509v3 Authority Key Identifier:
                keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:ce:41:5b:89:b1:36:43:6d:01:71:89:4e:87:96:a0:2d:
         dc:3a:48:e7:6f:b1:ee:0c:91:9b:0c:2d:17:da:73:c8:7d:bd:
         ec:fa:1f:8c:cc:62:2d:93:07:78:2a:12:5e:65:12:6c:f2:82:
         e7:12:29:b9:56:91:ff:c7:3f:ff:b6:06:45:3f:ee:c3:c2:14:
         5f:8c:8d:29:71:69:ed:02:a9:b1:c8:64:f2:5f:01:c5:76:40:
         71:95:f4:c3:f8:93:fd:e4:5a:82:e5:c0:a8:c8:00:29:99:94:
         d4:31:46:8d:a0:15:9a:c0:98:48:fd:16:df:38:ea:ee:85:69:
         40:50:1b:29:72:b2:75:27:81:52:71:1a:ad:68:a2:0b:07:07:
         80:e0:b7:f1:88:79:51:53:08:57:48:07:24:a1:29:d8:36:61:
         56:c4:0d:bc:2a:30:91:4c:d5:82:68:a3:21:17:06:bf:a6:95:
         af:50:e7:59:48:40:0e:b1:1d:0a:8c:35:dc:da:ee:8a:b5:71:
         4f:01:0a:4e:67:c2:23:7d:4d:46:20:ad:9c:d4:c4:61:f9:0b:
         f7:f8:04:d6:c9:42:3f:60:a0:3b:3b:b4:e4:60:c6:bc:44:79:
         92:85:54:c1:f4:86:69:bc:e7:a3:a7:ce:77:49:b9:e5:c8:56:
         5d:85:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:44 2026 by rpki-client