Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File:                     B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier:          x+ka3/it77SvM4g8EvZvs4+n4pkqA+URP7LbxEYZSu8=
Subject key identifier:   D9:A3:0E:EC:1C:F8:90:5D:FF:EA:7E:6F:B8:84:70:1B:6F:8C:67:AE
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       019FA8D0A7EE07B89C5D1AF1CAFED7040E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number:          049E
Signing time:             Tue 28 Jul 2026 13:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:14 +0000
Files and hashes:         1: AQXjWDkHdLcG0AgBM0JmH82YCJ8.asa (hash: KB2aJQENkpsyC9FBJhTiCS7SCs2ZFa04cjwD/nhBfoA=)
                          2: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: oIywwS1Jgh7kHein6v9sW9wT1oS8UkihellGedqh6vY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:a7:ee:07:b8:9c:5d:1a:f1:ca:fe:d7:04:0e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Jul 28 13:01:14 2026 GMT
            Not After : Jul 29 13:01:14 2026 GMT
        Subject: CN=d9a30eec1cf8905dffea7e6fb884701b6f8c67ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:90:1f:3d:b8:8e:a9:2f:7c:9b:35:74:51:
                    2f:36:ff:02:9a:2a:a4:c0:fe:fc:d0:c0:39:e6:f7:
                    bc:b8:d5:0c:d4:39:5b:a7:2a:f8:4c:dc:f1:22:fa:
                    47:6f:d3:f6:5a:57:0a:2c:85:01:67:60:ff:aa:81:
                    cb:2a:ab:9d:93:4e:28:cb:d5:17:bb:2c:f6:98:d5:
                    b1:b2:d6:8d:9e:d8:93:b1:40:84:ed:b3:dd:e0:56:
                    ad:95:91:6f:01:4f:71:31:72:0d:28:90:38:11:ef:
                    b1:73:46:66:36:f9:da:9b:17:17:33:f8:0b:3b:b1:
                    a2:ad:36:66:e7:6d:1a:79:f9:39:df:ea:87:dc:be:
                    1e:e3:fc:bc:37:8f:dc:74:8b:8d:58:3e:31:1f:db:
                    e4:fe:10:03:38:78:b4:39:ff:6d:cf:aa:ef:2d:ac:
                    3c:27:63:c8:46:ec:74:53:0a:04:75:fb:0a:8a:11:
                    f3:68:61:a2:06:88:8f:2c:34:85:4e:3c:47:ab:fc:
                    90:b9:a7:a4:63:be:d5:f3:9d:9d:64:4c:63:fd:2f:
                    6e:0a:4d:75:7f:d5:79:70:8a:05:6d:f8:73:fd:0e:
                    55:31:d1:f2:bc:ef:57:4d:64:91:33:f1:66:cf:88:
                    1f:4d:6b:55:ce:d4:38:21:a5:63:87:9a:93:e7:0c:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A3:0E:EC:1C:F8:90:5D:FF:EA:7E:6F:B8:84:70:1B:6F:8C:67:AE
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:c4:3c:f3:92:bf:23:3f:a2:d4:69:f1:21:84:00:20:36:
         e7:3c:5b:1a:f6:80:2d:7f:da:fd:af:3f:fe:cf:d0:87:67:c5:
         55:c3:26:40:8d:29:b6:a9:a6:75:f4:57:c9:60:ea:4a:47:cf:
         06:c3:3c:0b:76:a2:83:08:60:45:06:f4:cf:80:98:78:06:a9:
         dc:2e:70:46:ab:83:2f:25:ae:56:6b:87:c3:26:45:4e:af:a2:
         94:24:7c:f9:b8:a9:03:b9:b0:05:de:03:7a:b8:6d:17:3c:8e:
         b1:e8:b2:7b:cb:d4:7d:86:71:ca:de:c9:c3:fc:54:f3:55:36:
         39:04:1a:3a:44:ec:84:97:ee:66:de:18:e8:81:c6:c8:98:de:
         04:81:1d:e8:dd:79:a1:5a:47:ff:2c:c2:18:25:f8:74:e6:6d:
         bb:c6:08:1e:f6:24:ca:26:81:36:04:8e:49:54:28:fb:1c:ed:
         52:bd:1c:87:81:3b:61:6b:ed:bd:24:da:eb:3f:b8:e8:29:bc:
         c4:f3:d7:ec:00:ec:2d:05:4f:40:3c:f1:b5:ae:47:53:0f:ca:
         73:21:39:0b:27:47:d2:7f:76:9e:f7:97:ac:f5:bd:80:f7:f9:
         9a:02:08:c5:38:c8:53:fa:c9:5b:87:a8:b0:aa:ca:5d:36:a3:
         be:af:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:52 2026 by rpki-client