Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          ofARwTangS2S4FEdKYmUM21Nm+YHPSN1yLIQERu3cts=
Subject key identifier:   32:1B:B7:CA:3C:99:4C:C8:7D:8F:1C:82:9C:1E:52:FE:D0:9A:7A:87
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       019FA9ABFECA1B1AA61BF33FC255A10D2CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          1475
Signing time:             Tue 28 Jul 2026 17:00:49 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:49 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:49 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 2Kv4oydIdIA4/FWLMoiDsvnTKfpbaKfxSjzyykQKD8A=)
                          2: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=)
                          3: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=)
                          4: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=)
                          5: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:fe:ca:1b:1a:a6:1b:f3:3f:c2:55:a1:0d:2c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Jul 28 17:00:49 2026 GMT
            Not After : Jul 29 17:00:49 2026 GMT
        Subject: CN=321bb7ca3c994cc87d8f1c829c1e52fed09a7a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:3d:5a:30:25:02:f2:ea:05:f2:87:36:89:
                    21:f8:b6:63:a8:45:81:32:1b:4d:f3:f0:0e:a5:e9:
                    06:fd:33:19:69:64:70:4d:c7:fd:ef:61:b9:53:55:
                    85:f7:e9:28:e8:3a:f5:f9:f7:67:09:23:30:22:f3:
                    17:9e:20:a5:9d:a1:f5:da:88:3c:ad:4a:6e:fa:71:
                    21:c7:57:90:6b:a5:47:62:ae:8d:04:ee:d2:fc:ca:
                    06:84:37:23:0d:9b:7c:78:47:6b:36:03:2c:27:41:
                    f4:38:c9:3d:ed:d7:4a:30:a6:7f:16:9a:51:67:ec:
                    6e:b0:91:6d:2f:18:bf:d4:09:b6:13:78:0a:d3:1d:
                    ef:00:9c:ca:d1:8e:28:30:1e:d7:d8:43:7b:64:e9:
                    68:a6:1d:39:69:e6:3d:0b:18:06:57:35:92:1d:e9:
                    b5:82:95:55:6d:f3:1e:08:0c:b2:1e:de:8b:fd:97:
                    21:f8:c1:22:9b:3a:63:a8:d5:6b:e3:c8:94:5b:2a:
                    98:e0:79:f1:98:01:fb:c8:86:a6:48:d3:15:12:4b:
                    cf:6b:36:c0:d2:f5:04:d8:b7:a6:9e:dc:cb:e2:90:
                    7f:dd:e0:23:0c:b9:b7:c6:c5:aa:e5:ce:36:09:39:
                    4d:ad:61:80:96:1a:4c:13:4d:be:e6:0e:52:c6:1f:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:B7:CA:3C:99:4C:C8:7D:8F:1C:82:9C:1E:52:FE:D0:9A:7A:87
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:73:8f:3f:a7:2b:83:02:19:34:37:17:35:33:0f:d2:35:
         4d:80:de:d9:83:7b:5c:14:eb:cd:21:93:f0:e1:37:c8:2f:36:
         3e:3e:4c:eb:cc:b9:e1:e8:25:94:7f:e8:4c:5c:4f:84:44:7b:
         5f:ba:2d:14:04:7d:15:12:61:6a:7a:f5:7b:c8:b2:20:d5:ed:
         87:5f:5f:03:63:37:89:53:02:57:34:98:e6:b3:1f:6a:23:a9:
         51:86:ef:d5:ea:75:c2:17:66:b4:03:58:e2:df:6c:ba:93:32:
         b6:e5:d5:18:58:9f:c4:ac:92:5c:fe:95:32:51:ec:a1:a4:3a:
         64:28:f9:54:cb:93:f9:18:c4:76:14:5c:f7:29:1e:1f:02:df:
         c0:21:d7:59:23:e2:7d:24:39:ee:8c:7c:6c:c0:ef:64:06:5b:
         22:95:4b:44:50:89:db:e2:ae:07:09:f7:f1:a3:0c:2e:2f:e3:
         a3:bc:93:5d:6b:a7:f1:9a:25:76:a6:b7:3c:54:ce:2e:2f:11:
         ef:13:68:d1:b8:21:27:48:bb:f9:14:57:6f:58:39:83:9c:c2:
         77:e7:a3:a5:dd:1c:d3:2f:a6:3a:aa:3c:f9:c3:cf:b9:16:b1:
         27:ce:59:e1:ae:45:91:14:9e:4a:ed:81:4d:d5:77:78:87:31:
         c8:30:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:41 2026 by rpki-client