Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File:                     tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier:          sEyFTuB5n8hn63lnMxi2Fmgvwf5m180nxOwcSHO2i9Q=
Subject key identifier:   F7:10:B0:F8:41:89:78:10:1C:9C:F9:AB:86:D4:DB:5C:C6:95:80:82
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer:       /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial:       019FAD5240CD9D6E5487CBF2D911FE437968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number:          1963
Signing time:             Wed 29 Jul 2026 10:01:16 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:16 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:16 +0000
Files and hashes:         1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
                          2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: 4/9UUbJcFqh38GZ1vVjfByZefRqYSiqOthNZfz89f5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:40:cd:9d:6e:54:87:cb:f2:d9:11:fe:43:79:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
        Validity
            Not Before: Jul 29 10:01:16 2026 GMT
            Not After : Jul 30 10:01:16 2026 GMT
        Subject: CN=f710b0f8418978101c9cf9ab86d4db5cc6958082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:82:d5:1f:e1:3b:ad:a1:2e:5c:07:82:e3:
                    c5:0b:8a:17:d8:dd:15:b1:bb:05:b4:44:67:93:ff:
                    39:e5:ce:a6:d7:2b:71:09:66:da:6c:af:a6:dd:44:
                    4a:e3:3d:c0:bd:c6:e7:3a:03:36:84:fa:b0:5a:7c:
                    a9:d2:3b:2b:a1:e3:58:d4:9f:70:df:2e:f0:ed:71:
                    19:58:76:f0:02:d7:0e:1e:9c:c2:76:1f:11:64:42:
                    b0:4a:34:b1:57:18:de:c5:d3:13:61:35:cd:01:74:
                    62:81:84:65:0f:3f:2c:df:f5:ef:d5:4b:ad:8f:9f:
                    45:c4:ad:ac:a9:1a:05:41:15:4e:cf:fd:df:a3:94:
                    ff:86:31:ed:1b:2f:0d:e0:db:2c:19:41:2e:71:c7:
                    ca:cf:cb:9e:4a:96:32:40:a9:2f:da:2d:85:54:4e:
                    81:f0:a3:e4:2c:16:26:c4:2e:b5:db:35:95:53:b1:
                    03:4b:77:59:cb:d9:37:2a:13:f2:2f:87:9d:71:70:
                    b0:a1:65:8f:5d:89:77:c1:95:a2:b3:26:00:00:a2:
                    f6:2f:81:44:fa:b5:7e:a7:e8:bc:77:27:f0:16:ba:
                    f9:b0:1b:fd:7e:bd:66:29:45:37:8f:29:98:8d:bd:
                    ff:b5:6c:84:73:ff:6c:c6:ca:11:0c:38:81:9b:2f:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:B0:F8:41:89:78:10:1C:9C:F9:AB:86:D4:DB:5C:C6:95:80:82
            X509v3 Authority Key Identifier:
                keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:b2:5a:f3:a1:ed:a2:ed:b4:a9:e7:41:ab:ec:74:18:69:
         36:58:f5:0f:6e:bb:bc:c3:69:51:7f:b2:88:74:b8:c1:45:02:
         b8:21:20:b3:21:bf:16:cb:8c:e7:83:3c:f6:fb:5e:27:15:17:
         b5:35:1e:b1:9b:80:96:4a:af:3e:19:20:a0:d9:9d:48:d2:c4:
         07:8c:d3:5f:df:b8:f6:1e:77:e8:64:c8:4d:d4:e2:f5:6f:f4:
         01:78:e4:92:a1:80:06:26:1e:13:be:93:a4:ae:33:ab:ce:5d:
         38:a4:cb:99:72:53:99:3b:aa:81:28:9c:8c:5e:1c:56:b2:25:
         98:54:dd:ad:58:d6:69:94:76:0a:a3:be:be:c8:f8:e2:13:09:
         d6:3c:34:51:ac:ae:bd:eb:1f:e8:c5:89:89:d1:f6:c0:f4:dc:
         ff:ac:60:ae:89:69:b7:ca:be:4c:03:a8:51:c4:1b:bc:b0:6e:
         00:4a:12:73:ac:78:f9:54:c0:03:fe:a4:72:60:58:f3:40:ce:
         8c:33:f4:66:8a:f9:23:75:3b:47:8f:87:ff:0e:ca:0a:28:2e:
         b4:0f:4d:8a:4d:c7:5d:98:3c:a9:94:6d:e7:4b:d8:ae:e5:77:
         47:86:7e:6f:fc:33:c0:72:38:80:bb:77:9e:b0:2b:9b:f0:13:
         3a:df:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:07 2026 by rpki-client