Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
File:                     3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft (raw, json)
Hash identifier:          m+OibZmL0s05yrsomRz5vh+C959tBXDyd/1EG+wUwQQ=
Subject key identifier:   4F:4B:18:3E:3C:18:E4:07:1F:A7:AB:D3:FD:42:39:D8:63:90:F2:6F
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Certificate issuer:       /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial:       019FAC759834B8A32E1E65F06021D4C91CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:15 +0000
Files and hashes:         1: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl (hash: kHH6OSg3abh46Yeq5bIt7/ZDH+EL37BIH2O9Ro56WIg=)
                          2: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (hash: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:98:34:b8:a3:2e:1e:65:f0:60:21:d4:c9:1c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
        Validity
            Not Before: Jul 29 06:00:15 2026 GMT
            Not After : Jul 30 06:00:15 2026 GMT
        Subject: CN=4f4b183e3c18e4071fa7abd3fd4239d86390f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:ee:67:13:b4:08:1d:f7:28:37:85:b7:e0:
                    5a:50:21:4e:fc:84:dd:48:46:41:ca:76:f1:3e:bd:
                    eb:59:6d:84:ff:bf:5b:ab:4d:bb:e2:dd:6c:d6:5e:
                    32:b4:8b:00:58:1b:42:b1:cd:e1:ba:19:de:99:54:
                    44:53:b8:9f:a1:36:19:3c:1c:33:84:f2:23:7b:6b:
                    01:a2:27:40:83:2f:a4:b5:ad:1d:e0:94:0a:25:43:
                    32:ca:9e:38:03:f2:6f:9b:b2:88:72:93:81:e5:ad:
                    9d:b3:a6:19:17:53:9c:15:c8:0f:ea:2b:8d:77:1d:
                    c7:3f:5c:cc:07:82:fb:bf:90:91:5c:0a:dc:e2:3b:
                    99:a4:be:5d:ac:2e:aa:76:73:83:ae:41:35:e7:0b:
                    96:93:bc:de:91:4b:bf:e0:b3:a6:85:9e:54:8f:9a:
                    43:4f:6c:ba:fe:6c:00:5e:4e:a9:f6:d1:7e:9e:d0:
                    38:f5:82:20:47:d1:da:58:c0:97:8b:e8:dc:d4:69:
                    a1:f9:5e:f6:17:40:85:0a:db:1d:60:76:10:18:8d:
                    bf:d6:d8:48:e7:33:67:1e:c3:4d:bc:3a:f3:2a:05:
                    e7:e0:35:6c:fc:72:1d:e1:c0:88:8f:f1:45:c0:a4:
                    07:87:06:db:32:24:6f:32:f7:c7:8a:8f:44:0d:d3:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:18:3E:3C:18:E4:07:1F:A7:AB:D3:FD:42:39:D8:63:90:F2:6F
            X509v3 Authority Key Identifier:
                keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4e:a9:1d:64:7c:67:15:5f:39:ef:b8:38:04:4f:4e:a9:02:
         fc:dc:30:e0:85:b8:e1:85:17:8c:59:24:88:d6:e3:48:09:f5:
         55:1a:45:97:53:05:ea:d3:9f:c5:7d:2e:8b:5b:24:9d:67:52:
         f1:b1:b6:a8:69:3b:b3:94:f8:4c:c1:2d:9b:93:40:54:50:5c:
         fb:40:48:dc:ca:29:72:27:51:2e:85:4d:04:03:b6:26:d7:05:
         0f:94:5d:24:26:7a:fe:44:ba:9a:3f:40:6c:f5:d5:22:29:30:
         80:5f:bf:b3:f1:2c:51:07:b7:4d:b5:44:c5:ba:63:d2:38:0f:
         46:5a:a5:30:6d:d8:3d:41:25:f1:72:24:b0:0f:43:7f:40:16:
         8c:3d:e7:f3:34:98:53:2b:11:ee:f4:c5:6f:44:ed:b1:6f:de:
         18:c9:1a:7d:f2:91:33:4d:e6:87:3f:ae:cb:cf:0b:2b:10:dc:
         e2:1e:e7:27:76:72:02:89:db:52:2d:26:cf:cd:05:06:25:24:
         cb:cb:7c:fc:6d:61:94:30:08:46:c7:f2:6b:c2:7e:eb:c0:b5:
         78:fb:89:3b:43:23:fa:90:a2:3c:35:ff:ba:e8:22:43:f1:7e:
         52:5f:f9:20:80:1c:36:73:f8:40:41:8d:e8:a1:9c:1a:09:8c:
         3d:ca:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:59 2026 by rpki-client