Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File:                     3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier:          t0/EEuVdTgmGR7PbVGpLAem+9HdMBVz5YEnNJbwO78g=
Subject key identifier:   C7:86:23:6B:37:EF:45:61:32:F2:ED:1E:D9:48:8F:82:2D:E2:C3:30
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       019FA8995C2FA1CEA6CA5CC9A21EE719EB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number:          110E
Signing time:             Tue 28 Jul 2026 12:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:50 +0000
Files and hashes:         1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: 8Y77ari3lTM/yQcTglGoWOtu84sDUHFyBL9K4wFa71o=)
                          2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
                          3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:5c:2f:a1:ce:a6:ca:5c:c9:a2:1e:e7:19:eb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: Jul 28 12:00:50 2026 GMT
            Not After : Jul 29 12:00:50 2026 GMT
        Subject: CN=c786236b37ef456132f2ed1ed9488f822de2c330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:12:47:8c:49:d4:39:16:07:1f:5d:82:c4:a4:
                    44:1e:bc:b7:cc:c3:9c:58:dc:b3:af:f5:23:db:d9:
                    9f:a0:d6:cb:59:7e:fd:03:44:50:e7:a0:ba:6c:dd:
                    50:44:4c:e2:77:2e:c5:06:0f:76:71:ca:37:e2:22:
                    bd:3c:19:ba:d0:c7:4b:50:be:ad:b5:a4:69:13:28:
                    fc:e7:a5:45:d1:cb:10:38:e4:03:a3:9f:0e:e8:9d:
                    32:5d:64:de:69:6a:cc:d2:7e:0d:ea:fd:c8:76:55:
                    bd:c1:e2:55:d8:c7:cd:b9:e0:cb:ae:56:b4:ee:6b:
                    f3:76:fb:99:e2:c4:40:e7:6f:71:28:58:bc:b3:27:
                    e5:09:4c:0e:3c:7f:f7:3c:2b:ca:43:df:59:1b:77:
                    6d:c5:a5:e3:29:a0:22:3f:fa:43:0f:1b:e1:cc:66:
                    2a:a2:ab:25:32:16:0b:1d:aa:73:74:55:3f:74:18:
                    d7:56:f5:df:55:aa:be:d9:3d:77:e8:c7:df:34:9a:
                    b6:ca:8d:b0:d2:9d:64:f2:a2:3e:7e:29:41:d4:07:
                    e8:c1:bb:2b:14:00:4d:31:77:d4:d8:82:f4:25:2b:
                    79:c4:38:08:23:39:2d:a6:9f:f1:6c:ca:ce:34:67:
                    0c:1b:98:14:e9:2e:49:2e:96:58:35:95:86:a1:e3:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:23:6B:37:EF:45:61:32:F2:ED:1E:D9:48:8F:82:2D:E2:C3:30
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:35:ac:47:01:69:15:83:61:18:d6:b0:e4:87:49:e2:d1:8c:
         ab:a1:36:d1:fe:02:fd:b3:10:4c:23:86:ef:bd:01:b8:6a:5c:
         76:03:da:33:92:0f:78:2a:d2:c0:14:d0:3a:e1:9e:58:34:37:
         de:6d:cb:a6:95:65:3c:de:95:38:fc:1b:ac:a7:64:a3:14:6c:
         67:4e:36:13:31:57:b5:0d:7f:d0:b1:92:92:a8:25:02:82:e4:
         ab:3d:8b:37:ef:34:01:91:e6:ad:c0:2b:67:c6:59:a4:84:fc:
         38:fa:6c:fe:be:33:7b:19:08:b9:3b:1c:7f:74:58:9f:2c:14:
         f1:da:0c:98:86:03:21:b1:c1:d9:d5:fc:38:46:d7:fb:4f:d1:
         bb:26:c0:3a:fa:05:4a:58:11:34:2a:75:dc:1a:34:c7:76:63:
         5e:71:63:a1:b1:64:2b:9e:88:e1:0a:3a:3c:0b:65:1d:50:98:
         08:a6:3a:f8:8d:05:48:79:7c:2b:c6:50:69:4f:1b:85:cf:3e:
         9c:f6:15:8d:2f:ea:e8:7d:bc:e1:6e:2b:06:47:e3:02:a1:ef:
         49:16:7f:c6:d2:2d:ac:c4:32:fa:5c:6f:9b:b8:2e:c7:ac:6e:
         f6:9e:05:27:b2:8f:33:fb:c2:06:d5:7b:5a:7e:2c:6b:12:f3:
         f0:ea:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:42 2026 by rpki-client