Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          h4t6GlwFnMuND+eKy+2FrzoyfvPQ3mrKpQxza44/JDg=
Subject key identifier:   7C:25:D6:3F:21:07:89:BF:C9:6C:36:23:69:5E:56:0A:B7:E3:88:69
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       019EC224CF2175F5B30936DDEDD6563466D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 18:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:52 +0000
Files and hashes:         1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: 4JdD7+oTcqC/wcLF2K7eGUx/p+B6mWXTsSCvfIMAWog=)
                          2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:cf:21:75:f5:b3:09:36:dd:ed:d6:56:34:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: Jun 13 18:00:52 2026 GMT
            Not After : Jun 14 18:00:52 2026 GMT
        Subject: CN=7c25d63f210789bfc96c3623695e560ab7e38869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:91:3c:c6:03:8a:f4:23:6d:de:1c:eb:6e:
                    ce:1e:29:62:46:cf:d5:3b:6b:9f:3a:90:37:5d:59:
                    9f:13:dd:13:b0:93:f2:57:ec:b4:42:f7:7f:86:7c:
                    8f:83:c7:5b:1f:1f:36:3b:1f:20:32:8d:e3:eb:8b:
                    3e:a8:27:80:ed:a2:d4:81:48:96:a4:41:93:f7:f1:
                    66:e4:62:4d:12:2f:8c:aa:7d:0f:a7:70:68:b3:b8:
                    8a:aa:2e:27:d5:ed:af:f8:4c:80:cd:18:43:57:65:
                    95:f9:c0:a5:04:4b:a6:0b:41:34:04:84:7e:6d:ca:
                    87:c2:9a:93:83:57:75:0c:33:29:68:36:30:56:dc:
                    70:b6:d0:9c:23:52:1b:bc:72:c9:b1:1e:22:32:d1:
                    54:f7:6c:c5:dd:1d:ab:0e:80:80:4e:c2:b3:23:69:
                    c3:2f:00:8e:f8:dc:77:30:88:55:0c:21:dc:c5:31:
                    44:5e:71:c9:32:d6:94:f4:95:8a:8c:41:32:55:9f:
                    b7:8d:3f:33:ea:81:93:79:82:f4:d3:57:30:40:11:
                    a2:45:e2:63:21:26:02:f2:21:17:f7:fe:2f:29:37:
                    1c:83:87:04:35:cc:49:5c:55:2e:f7:cb:ff:b6:00:
                    d4:5e:3c:fc:7a:27:ad:5e:60:12:91:4c:c8:5c:9a:
                    65:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:D6:3F:21:07:89:BF:C9:6C:36:23:69:5E:56:0A:B7:E3:88:69
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:38:04:8d:8e:bf:49:96:2d:1c:b9:b8:c1:14:20:38:41:06:
         45:32:2f:c9:a7:a0:b5:05:92:91:75:a8:32:ef:f3:05:6c:3d:
         39:33:8e:bc:17:2c:78:84:55:ea:ba:5a:bb:46:c2:dc:66:8c:
         a2:c9:c1:68:0d:fe:b4:63:41:67:b5:32:9b:e1:2d:13:a7:bf:
         f8:9a:a2:92:47:90:0a:59:81:a8:9b:4b:fe:7c:29:55:25:1b:
         d0:75:b1:a7:99:28:10:99:5a:4d:34:e1:93:e6:d7:6e:47:6c:
         07:f0:84:0b:59:b4:9a:ee:e1:84:8d:80:db:f0:14:a8:d2:f2:
         c9:ca:e9:e7:c9:0e:c0:03:3f:8d:b7:99:0d:c8:e5:7a:81:f7:
         de:e5:cf:4d:39:52:47:41:32:11:30:03:7e:70:7d:b7:70:7d:
         80:cc:e3:70:c4:93:20:6d:ed:5b:c3:bd:20:f5:56:66:48:3c:
         e6:26:7e:3c:c0:24:e0:d4:ac:3e:15:82:3a:58:96:5d:aa:f3:
         e6:8f:58:44:64:13:5a:23:c6:4f:c7:88:51:45:2c:ec:5c:6e:
         aa:c6:47:95:e4:df:92:c7:66:45:fe:46:db:97:be:3f:0e:94:
         3b:7d:19:0f:4f:3c:57:ca:7e:fd:8b:7a:db:e1:08:b2:77:b0:
         83:da:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:19 2026 by rpki-client