Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File:                     3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier:          CJI9gq8GNUt06IOdX2ve1TBfkD75eofbPtydhlQuNeY=
Subject key identifier:   54:C8:D3:80:24:D0:3C:C8:C2:E7:BA:70:BE:90:2D:61:31:72:C8:14
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer:       /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial:       019FA7F4BD07BC852DF3302A168E18E59A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number:          0C44
Signing time:             Tue 28 Jul 2026 09:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 09:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 09:01:01 +0000
Files and hashes:         1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: PJK4kWck8+lG26tFRnmju1703PycbF5fNk7YKjU1kgg=)
                          2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:bd:07:bc:85:2d:f3:30:2a:16:8e:18:e5:9a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
        Validity
            Not Before: Jul 28 09:01:01 2026 GMT
            Not After : Jul 29 09:01:01 2026 GMT
        Subject: CN=54c8d38024d03cc8c2e7ba70be902d613172c814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:6c:d3:60:b5:75:e2:c3:7e:70:e6:e3:27:
                    31:fe:08:96:9a:85:34:dc:94:e4:3e:8f:99:2e:25:
                    cf:cf:1b:ba:c1:a1:71:8c:81:6d:84:a1:cb:b9:34:
                    e8:01:9d:d8:6b:7a:1d:a7:3a:d3:96:39:1e:34:87:
                    fe:bd:ff:a2:77:2f:f8:f8:f6:17:a8:98:df:66:70:
                    5a:20:74:e9:00:8c:5c:3a:fb:fd:97:83:2a:76:06:
                    7f:fa:77:3d:7d:7e:8f:63:8b:82:17:41:af:41:e0:
                    46:2f:a7:ca:7c:b5:8c:b7:8a:cb:24:1d:4d:bc:27:
                    dc:14:b5:dd:f8:43:d2:4a:90:06:49:64:02:73:17:
                    43:af:29:1b:dc:98:59:22:20:4b:02:d3:2f:41:0f:
                    bb:7c:be:8d:f7:b9:f7:d9:88:be:3d:3f:78:93:05:
                    de:2d:e2:09:dd:9c:ad:09:0a:29:df:7f:e4:8c:b3:
                    5d:22:b9:94:47:94:ed:50:82:14:56:4b:23:f6:6e:
                    de:29:9b:62:33:c0:55:d4:98:12:8b:c7:fc:99:35:
                    08:70:e5:e4:5e:cf:20:4d:a8:ba:4c:b3:fd:ba:55:
                    41:73:7c:6e:f7:71:5f:84:1b:65:26:66:87:e8:71:
                    02:17:35:f8:93:9c:ab:c4:1c:78:5e:c5:bd:6f:61:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:D3:80:24:D0:3C:C8:C2:E7:BA:70:BE:90:2D:61:31:72:C8:14
            X509v3 Authority Key Identifier:
                keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:06:e6:68:e5:e0:6c:16:09:09:c5:15:ee:36:37:38:44:
         2a:05:0d:8d:86:31:12:40:74:6f:31:68:0f:90:f8:38:19:40:
         d4:14:2b:a0:41:4a:ee:aa:d7:d2:36:80:1b:17:84:17:03:f8:
         b4:10:05:5d:c3:bb:63:6e:59:16:9d:54:aa:5c:15:00:26:02:
         4c:46:0d:a6:ee:e5:80:80:79:01:5c:c1:63:bd:60:4e:d9:bd:
         92:8d:cc:ca:f2:89:83:da:7b:d6:79:ec:e7:0a:92:af:97:8f:
         8f:53:f7:b8:df:df:ed:25:f1:89:30:d1:66:8a:be:7c:33:7c:
         c7:e9:26:3c:80:b2:cd:f8:c2:d9:d4:ab:43:e6:d4:11:82:26:
         f2:80:77:f0:8f:e8:b3:a1:90:a3:be:24:bd:b6:21:87:de:bc:
         b1:cd:ed:7f:e3:cc:0f:c0:56:a8:46:95:e6:b4:5d:fa:9e:76:
         2b:90:b2:77:22:ab:66:ee:ee:0e:03:dd:fe:02:09:49:13:29:
         58:70:ce:51:88:21:02:c7:bc:ff:5a:5a:f1:63:b6:a7:ca:39:
         50:68:ed:49:0b:b9:be:e7:51:ac:f7:52:b1:de:b3:f6:70:34:
         d8:c7:58:eb:21:78:25:83:73:9e:bc:31:1c:40:58:bf:b9:15:
         c3:87:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:36 2026 by rpki-client