Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File:                     3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier:          4gTDxqdFT21YZkifMVLGliGlclfWzWbopU+6x51tq6M=
Subject key identifier:   C5:DD:95:E2:13:BE:C0:9D:23:DB:49:4D:E9:81:FD:D9:71:27:8D:F4
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer:       /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial:       019F10E4F87CC089CB4C1F78F2E5D0D76997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number:          7E
Signing time:             Mon 29 Jun 2026 01:01:08 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:08 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:08 +0000
Files and hashes:         1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: vywEGQ8N6ozfEMIxbOtUxBaWiPqpimE4wM+L/5B25+E=)
                          2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:f8:7c:c0:89:cb:4c:1f:78:f2:e5:d0:d7:69:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
        Validity
            Not Before: Jun 29 01:01:08 2026 GMT
            Not After : Jun 30 01:01:08 2026 GMT
        Subject: CN=c5dd95e213bec09d23db494de981fdd971278df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:bc:e4:51:13:54:ec:52:bc:e9:b0:f5:d0:
                    c7:84:94:0f:f9:a3:21:58:c9:13:d7:e9:1c:df:46:
                    c1:3c:ee:4a:a6:16:f9:a3:79:b8:f9:bd:67:02:52:
                    fd:46:67:fa:09:f7:e9:37:73:fd:33:4d:c4:e4:63:
                    0e:26:d1:76:5e:68:2f:52:0b:bd:a3:d2:83:98:90:
                    c6:5c:2b:59:64:91:a1:7a:1d:1b:75:a5:08:6d:53:
                    c4:a6:9f:09:2e:d0:15:fc:96:81:e6:a7:7c:98:80:
                    2e:63:89:2f:66:5d:13:36:9f:19:d8:61:20:dd:84:
                    75:1f:d1:80:dc:5c:06:7a:69:0c:3c:e7:6c:75:fa:
                    40:63:39:7e:c3:da:e8:48:08:12:c6:e8:05:27:d2:
                    a4:aa:e3:3b:0a:9e:b2:b7:36:61:37:88:cc:ea:76:
                    fd:2f:45:4e:c3:85:b1:ab:06:5a:8e:ac:b6:1f:3b:
                    07:28:f8:e8:74:02:f2:ca:a6:43:e5:76:61:4b:49:
                    cc:d0:48:68:7e:e5:d6:12:f3:04:bf:90:f1:f9:67:
                    7d:8b:af:9f:eb:a8:d3:0f:b0:6c:77:a7:36:74:d4:
                    84:4e:4f:37:42:13:5e:bd:41:9a:cf:a6:5d:0a:e4:
                    d7:06:6e:9f:e0:70:6e:6a:f0:62:35:ea:ee:f7:14:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DD:95:E2:13:BE:C0:9D:23:DB:49:4D:E9:81:FD:D9:71:27:8D:F4
            X509v3 Authority Key Identifier:
                keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:12:ee:d1:4a:73:a1:37:7b:17:d0:10:72:86:6f:70:51:
         69:f3:8f:cb:bf:88:30:69:b0:6f:83:5b:85:9d:65:fb:ef:75:
         e3:ab:ec:b0:fc:ca:d4:d2:6c:4d:fc:14:b7:3f:12:17:10:7f:
         dd:0f:b8:7c:af:dc:1f:0c:4c:c2:e1:35:43:c3:1b:25:64:e8:
         60:cd:3d:ab:87:39:21:d5:f8:3f:66:95:34:26:69:f7:64:f6:
         49:09:43:7f:e3:d0:66:30:96:2b:5b:c6:db:97:1a:a8:93:91:
         82:f5:34:e3:92:ba:fb:11:25:91:3e:2b:7e:e4:21:39:d7:e2:
         b9:70:15:dc:0d:f4:ed:20:ed:9f:f9:02:6d:17:9c:78:d0:2b:
         c3:fb:31:5a:79:16:96:9c:23:d6:53:4e:06:d5:6d:77:48:ff:
         34:34:90:18:40:da:93:d6:59:ac:f5:d3:d5:13:6f:5f:bb:43:
         e0:d7:54:ca:9d:96:07:2e:0e:9b:5f:e5:f8:bb:66:28:15:80:
         e3:eb:ce:a9:b9:bc:3f:62:8b:0a:64:b3:c2:9c:c9:2b:09:d0:
         02:69:b6:7b:35:e5:c4:a7:b6:a9:2f:b9:77:37:2f:63:0d:c2:
         51:ff:99:0a:8b:c9:13:a2:11:22:ce:90:98:d5:ab:fd:f8:4c:
         9c:cd:65:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5Ph8wInLTB948uXQ12mXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjRjOWM2Y2U4YTdiN2U5NTUwODQ3NTVlODUzZDRkNmFh
MTgwYzQwHhcNMjYwNjI5MDEwMTA4WhcNMjYwNjMwMDEwMTA4WjAzMTEwLwYDVQQD
EyhjNWRkOTVlMjEzYmVjMDlkMjNkYjQ5NGRlOTgxZmRkOTcxMjc4ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+85FETVOxSvOmw9dDHhJQP+aMh
WMkT1+kc30bBPO5Kphb5o3m4+b1nAlL9Rmf6CffpN3P9M03E5GMOJtF2XmgvUgu9
o9KDmJDGXCtZZJGheh0bdaUIbVPEpp8JLtAV/JaB5qd8mIAuY4kvZl0TNp8Z2GEg
3YR1H9GA3FwGemkMPOdsdfpAYzl+w9roSAgSxugFJ9KkquM7Cp6ytzZhN4jM6nb9
L0VOw4WxqwZajqy2HzsHKPjodALyyqZD5XZhS0nM0EhofuXWEvMEv5Dx+Wd9i6+f
66jTD7Bsd6c2dNSETk83QhNevUGaz6ZdCuTXBm6f4HBuavBiNeru9xReZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXdleITvsCdI9tJTemB/dlxJ430MB8GA1UdIwQY
MBaAFN1kycbOint+lVCEdV6FPU1qoYDEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dUSnhzNktlMzZWVUlSMVhvVTlUV3FoZ01RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmE5MjEtOTBjOC00NWM2LTk1ODAt
MWE1YjNlNDI4M2UxLzEvM1dUSnhzNktlMzZWVUlSMVhvVTlUV3FoZ01RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kYmE5MjEtOTBjOC00NWM2LTk1ODAtMWE1YjNlNDI4M2Ux
LzEvM1dUSnhzNktlMzZWVUlSMVhvVTlUV3FoZ01RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/IS7tFK
c6E3exfQEHKGb3BRafOPy7+IMGmwb4NbhZ1l++9146vssPzK1NJsTfwUtz8SFxB/
3Q+4fK/cHwxMwuE1Q8MbJWToYM09q4c5IdX4P2aVNCZp92T2SQlDf+PQZjCWK1vG
25caqJORgvU045K6+xElkT4rfuQhOdfiuXAV3A307SDtn/kCbReceNArw/sxWnkW
lpwj1lNOBtVtd0j/NDSQGEDak9ZZrPXT1RNvX7tD4NdUyp2WBy4Om1/l+LtmKBWA
4+vOqbm8P2KLCmSzwpzJKwnQAmm2ezXlxKe2qS+5dzcvYw3CUf+ZCovJE6IRIs6Q
mNWr/fhMnM1lSA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:26 2026 by rpki-client