Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File:                     MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier:          7LpTB7oMMVa+2dnZVSvMjASj/rLO8nMIhu3UkG/0EnY=
Subject key identifier:   7F:21:D8:1B:63:D4:70:A7:69:AC:1D:42:16:2A:E9:66:B9:B8:20:BE
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer:       /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial:       019FA9AC24228FEBE9E2A36585D0E2642164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:58 +0000
Files and hashes:         1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: vOHxJaSLusMdxy0NXw5HmhO81cxFxIkS9L78xlhj608=)
                          2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
                          3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
                          4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:24:22:8f:eb:e9:e2:a3:65:85:d0:e2:64:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
        Validity
            Not Before: Jul 28 17:00:58 2026 GMT
            Not After : Jul 29 17:00:58 2026 GMT
        Subject: CN=7f21d81b63d470a769ac1d42162ae966b9b820be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5f:60:88:0a:6a:48:e9:73:7d:16:1e:1f:54:
                    95:88:b7:9e:c1:b9:62:fc:25:96:aa:d5:23:57:4c:
                    3c:46:cf:a8:3f:39:a2:76:3c:fc:05:c3:6e:e0:c7:
                    1f:cb:18:33:f1:b0:df:42:66:e0:4b:f1:98:2e:bd:
                    59:a7:24:2b:97:76:e2:13:26:e5:4b:7f:f8:ea:5e:
                    68:3e:f7:4e:e6:c1:a4:02:4a:4a:e9:28:a6:a0:2f:
                    67:07:b2:3d:78:21:f0:67:eb:91:c6:60:e3:64:03:
                    85:a2:3e:90:e1:a7:9b:26:22:b5:2a:0f:b8:c3:40:
                    23:2e:d9:37:97:2e:54:f2:86:02:9e:d0:7b:ee:38:
                    b5:74:57:ea:cb:f3:61:81:0f:a2:27:d7:ed:e5:a0:
                    06:fa:7e:0d:90:cf:04:9c:45:ff:d6:6c:2c:e5:c6:
                    37:05:9f:4a:39:43:62:6c:d8:ca:24:9e:dd:e4:83:
                    da:74:49:6f:74:03:f2:15:56:6a:5b:8d:12:ad:03:
                    5b:65:97:11:98:d0:c0:2f:f9:75:2f:ce:06:a4:0f:
                    7a:f9:9f:f2:ea:bc:49:9b:b1:50:d3:e3:44:1d:c4:
                    da:45:27:f9:1a:d1:5b:31:80:ee:f2:72:a5:c2:61:
                    70:7e:11:e3:6d:5f:e8:e7:82:f4:27:bb:7e:81:f4:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:D8:1B:63:D4:70:A7:69:AC:1D:42:16:2A:E9:66:B9:B8:20:BE
            X509v3 Authority Key Identifier:
                keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:e1:6d:3d:05:13:23:33:15:be:d8:83:3d:93:d0:01:56:
         21:ab:0d:3d:e0:7f:36:d6:98:85:0c:85:79:53:bc:86:04:71:
         e3:f3:da:62:c8:43:bc:3e:36:63:fe:21:69:60:3d:f6:21:c7:
         05:af:0a:18:08:0b:6c:2f:3e:77:b4:80:e1:ec:e5:38:fc:43:
         e9:96:b6:84:4e:d3:a0:11:07:82:2e:8a:67:4a:bc:0f:f5:c9:
         b3:a1:28:81:1b:42:7e:88:1f:2b:d0:21:44:6d:6f:40:9c:6f:
         dc:e3:7b:fc:c2:3e:18:67:e4:d1:96:2f:c7:b1:3d:75:3a:dd:
         77:5c:7a:89:54:ca:31:2e:41:8c:d8:c1:d3:0d:39:6a:83:ba:
         32:05:e6:d0:39:0b:54:e6:26:c0:a1:37:80:e4:5f:87:29:69:
         7c:b1:d0:12:b6:ec:c4:47:af:a6:1a:cb:6d:31:fa:18:f9:9b:
         b7:61:c0:e2:1d:64:a1:3d:f9:51:fc:91:67:0f:08:23:67:cf:
         12:f3:0d:e6:5a:a9:15:53:b5:24:03:d4:3e:a3:d6:94:f3:1c:
         40:07:15:8b:3b:27:82:e2:0e:09:bb:46:83:82:ab:25:6f:3b:
         01:b6:86:be:d5:6e:92:67:c6:76:e7:7b:0b:18:4c:96:f6:50:
         61:33:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:26 2026 by rpki-client