Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          OU0K9VG05U7JsVXhSLvMglMnExVwhEkP9xgf0UibWZ8=
Subject key identifier:   40:86:AF:95:83:25:29:23:02:D2:E0:48:DF:3E:AF:4A:80:CD:7A:F1
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       019FAB63CE0011089EA8961654A3A7621E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 01:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:12 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: pmjdgJitwhmfcLNr0Fn8HTeXWcU280DlKJIObW2Tpf8=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:ce:00:11:08:9e:a8:96:16:54:a3:a7:62:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Jul 29 01:01:12 2026 GMT
            Not After : Jul 30 01:01:12 2026 GMT
        Subject: CN=4086af958325292302d2e048df3eaf4a80cd7af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:c5:4f:a0:d5:51:29:14:30:ab:f0:ad:ca:
                    df:8d:d5:e8:8d:a7:92:09:25:d7:a1:50:e9:d6:23:
                    c0:7d:a3:a3:d5:29:dc:12:26:58:03:88:51:1a:86:
                    0c:df:e8:d1:76:a9:9d:fa:3a:2e:7c:03:f9:0a:c9:
                    d2:6c:b5:a4:21:0b:30:42:34:d9:e9:b6:00:ea:39:
                    6e:63:32:e0:86:1f:ef:08:81:57:40:a0:76:26:75:
                    08:e4:1b:81:80:8f:a1:7c:83:e4:f7:10:63:bc:ae:
                    96:00:ad:12:4c:86:ad:0f:67:1e:90:86:ef:65:09:
                    98:bd:ca:76:ce:05:f8:2c:8c:9c:95:9b:6d:b3:57:
                    99:8c:86:9b:94:34:d9:80:f4:01:e3:93:7f:7d:a1:
                    ec:28:b7:7d:b4:ce:2b:d7:50:94:7d:47:6c:6a:56:
                    21:1a:30:3c:c3:52:83:e4:da:3c:51:51:d8:35:7d:
                    52:20:66:94:47:28:ef:9a:e8:25:1e:a6:44:66:59:
                    70:df:e4:a0:2c:a7:0e:97:06:02:2f:bb:11:6f:12:
                    b9:91:23:06:b6:67:a8:66:7c:0f:d5:dc:f4:aa:e7:
                    c1:98:a2:df:b9:81:27:6a:70:d4:2e:4b:44:02:bd:
                    9f:e1:80:0b:61:4e:a1:7d:d2:18:f4:7e:66:56:fd:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:86:AF:95:83:25:29:23:02:D2:E0:48:DF:3E:AF:4A:80:CD:7A:F1
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:b1:54:d4:30:e9:20:3a:f2:a7:96:d3:e3:fc:61:06:a0:
         11:b9:69:67:f8:fa:a6:90:de:2a:50:59:ab:3c:3c:2e:31:99:
         52:f5:39:de:01:96:d1:38:cd:56:89:42:a2:32:6a:53:cc:92:
         f3:ff:7d:85:db:46:5c:39:b8:66:1e:7f:a0:99:84:49:ec:10:
         47:99:ca:8e:f1:28:61:0e:75:a5:fa:db:aa:e5:52:66:aa:55:
         d5:fe:06:b1:67:84:7a:58:99:11:99:05:07:e4:73:c5:71:91:
         b3:70:23:7c:3b:03:0b:ca:c5:de:78:8d:ff:5f:7b:91:91:e5:
         c0:c0:72:4c:ea:1c:14:e4:c4:07:1c:79:ec:f4:64:a3:b1:fe:
         fa:c7:e7:49:15:54:80:5e:66:da:c8:97:08:80:c5:e6:9a:b4:
         91:d6:bf:84:9e:9f:3f:db:47:12:73:3d:37:78:0c:9b:8e:5e:
         c4:8e:81:8a:1b:20:39:5f:ac:fa:c0:c4:4a:b1:e3:04:ae:b8:
         78:7d:bc:2d:f0:27:58:09:c0:c8:50:e4:9f:0d:50:df:27:39:
         df:8d:76:ab:88:76:66:0e:00:0d:6e:db:5c:53:98:03:24:97:
         75:b8:fa:1d:dc:ab:79:14:87:56:02:76:25:e8:df:68:93:1b:
         60:42:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:18 2026 by rpki-client