Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          OTmoA987SEYy6yi8vfoT5du3OY0ZzybD3iuljpJhs3Y=
Subject key identifier:   D8:BC:B6:2C:16:EE:27:41:5C:59:4B:83:0C:13:4D:A4:C1:86:35:B8
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       019FAA1A1569ADB19D6D0FCC713CB81ABAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          19E4
Signing time:             Tue 28 Jul 2026 19:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:03 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: 7HNrmJ7O3S7RPPuHj5o5GQfCEYCejELBilyRzkP/fYQ=)
                          2: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (hash: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=)
                          3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
                          4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
                          5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
                          6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
                          7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
                          8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
                          9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:15:69:ad:b1:9d:6d:0f:cc:71:3c:b8:1a:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Jul 28 19:01:03 2026 GMT
            Not After : Jul 29 19:01:03 2026 GMT
        Subject: CN=d8bcb62c16ee27415c594b830c134da4c18635b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:6f:64:05:72:14:24:cf:19:8f:43:c0:d2:
                    2c:b4:f5:1b:bc:f1:aa:ee:f3:af:79:68:50:3f:42:
                    33:15:d6:e5:e9:bc:a5:68:e2:01:c5:d3:4b:0e:48:
                    3c:a7:db:07:5d:1d:98:63:7b:a9:68:43:9d:cf:f1:
                    be:36:93:13:10:c8:d0:14:b5:cf:c7:34:5a:af:a9:
                    33:a4:7c:53:0d:90:68:03:e4:d1:cb:53:b5:57:aa:
                    d2:1d:1d:ad:f9:d3:0c:5b:ad:7b:52:12:70:a6:3b:
                    cf:bf:b5:dd:0d:e8:21:9f:d3:02:2a:95:59:93:c9:
                    ee:07:21:f6:e6:77:8b:f5:c3:80:01:d8:aa:6c:d0:
                    5b:f1:ea:0f:7b:e6:37:c4:b0:46:88:12:ca:dc:a3:
                    34:48:5c:cf:74:d5:78:7c:fa:40:f8:77:9a:1c:d4:
                    52:10:2d:cb:b0:ea:67:78:14:e7:fa:55:1e:65:41:
                    fb:30:34:f9:63:50:6c:75:8e:aa:d1:d1:5b:5b:f6:
                    75:82:3f:af:8b:59:ae:c5:a9:f2:9b:e5:91:26:96:
                    0f:cb:6e:fb:79:0f:bd:a7:d4:ce:99:d6:f2:f4:2e:
                    8b:54:57:8b:c0:1a:93:50:65:57:71:c8:b0:c2:ec:
                    4f:84:cd:0c:5c:b1:5a:9e:1d:32:5b:4c:99:18:d0:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BC:B6:2C:16:EE:27:41:5C:59:4B:83:0C:13:4D:A4:C1:86:35:B8
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:09:fb:56:44:b2:e0:63:7c:61:20:82:87:be:58:70:91:
         7a:58:9b:ef:91:b0:c0:6d:2d:8c:3f:eb:e9:27:cd:e2:85:2e:
         3b:f0:4d:53:e8:2a:6c:fa:ed:59:8c:61:23:9d:ff:e2:99:c9:
         ec:f9:2d:e7:bc:65:20:bd:e6:b1:87:3e:bd:da:28:a0:91:30:
         d5:6b:6c:b3:79:d9:95:91:ac:46:ea:0d:be:5a:16:b9:0f:b2:
         d6:90:73:5b:c8:79:a7:d1:b2:97:d4:33:36:f4:ee:e1:37:f2:
         cd:62:0f:dd:68:f7:09:a7:0a:53:89:41:0e:85:f7:bd:6a:e9:
         82:b7:bf:b1:b3:be:49:76:3e:2a:54:e4:dc:af:fe:8d:e4:11:
         af:66:ef:a7:5d:cd:2a:2b:b7:ab:77:39:71:45:e1:27:39:83:
         a6:de:8f:19:2b:ba:00:aa:46:08:35:92:a7:97:98:00:74:c6:
         1c:e5:f8:a4:5b:8a:da:b6:69:ac:1f:49:32:34:35:70:56:4e:
         37:09:28:8b:6a:98:f1:c8:86:d4:b6:cc:f9:29:d3:46:0e:d8:
         46:32:a0:0b:07:fc:c2:c8:0b:1a:c1:1e:e7:09:52:38:61:76:
         57:41:cc:8b:78:17:ac:fe:68:8b:e8:eb:b8:d3:fa:5e:d2:8e:
         c5:ec:69:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:40 2026 by rpki-client