Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          f1cfFzGvP9PGM6UOr6aWBn2SnwefUG8WgJrnWFlTtZQ=
Subject key identifier:   32:05:AC:D7:4A:6F:7C:B0:E0:4C:6E:47:E4:B9:4C:52:FA:76:F7:BB
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019FA8992A06B0B8A12AC85C920750295543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 12:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:37 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: 15IkDr0YIublth2p6STVMiOlhhP1TGuTEqNRUxzUIbA=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:2a:06:b0:b8:a1:2a:c8:5c:92:07:50:29:55:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jul 28 12:00:37 2026 GMT
            Not After : Jul 29 12:00:37 2026 GMT
        Subject: CN=3205acd74a6f7cb0e04c6e47e4b94c52fa76f7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:36:80:0f:3e:8b:0d:86:7e:f3:9e:2f:49:
                    a1:22:fa:bb:6f:59:5e:ee:fd:9d:18:81:e3:f4:6a:
                    b0:ea:f0:0b:06:cb:65:04:6e:67:09:c1:ee:dd:5d:
                    5e:ef:bc:45:64:11:a3:dd:1b:b5:95:4e:50:67:1d:
                    0b:21:80:05:09:d4:4c:2b:26:86:86:de:5e:e4:d9:
                    f3:7a:91:40:82:04:d4:25:08:54:86:a7:9e:6a:18:
                    fd:28:94:a3:35:1a:2c:b3:22:bd:dd:b8:02:60:e2:
                    03:57:63:7a:54:36:65:e5:cd:89:d1:13:ca:5f:38:
                    5c:a3:7a:ee:b0:4b:f4:db:5c:07:98:2c:7f:c9:8a:
                    e7:f4:ae:90:c8:8b:d2:f4:d3:8e:8e:98:f5:ac:13:
                    a7:50:19:7e:ac:ac:42:17:72:6a:2c:5c:56:e0:34:
                    5e:44:1d:5b:38:3f:49:f0:6c:3d:36:99:96:4b:90:
                    a2:80:4c:98:b5:9d:89:bb:6d:3f:bf:0a:f6:74:ae:
                    66:02:5c:33:dd:fb:59:d0:76:85:c2:53:f1:3c:84:
                    e3:bd:6b:58:42:15:83:72:cd:4e:c4:ee:8d:5c:e8:
                    e1:47:cc:10:ba:81:1e:e0:19:3c:c7:82:22:3c:90:
                    80:69:33:1d:42:39:09:78:71:b5:08:e3:f1:ab:a9:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:05:AC:D7:4A:6F:7C:B0:E0:4C:6E:47:E4:B9:4C:52:FA:76:F7:BB
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:67:05:4e:ea:40:42:31:3d:86:d7:7d:d9:62:34:d4:59:8f:
         b1:17:2e:57:98:bd:1c:61:fa:47:09:d8:5a:70:2e:80:70:ba:
         64:1c:6c:6b:67:8a:ac:8e:74:4d:c0:2e:17:5a:02:99:ec:09:
         15:14:75:44:04:b7:cb:66:d3:20:93:86:45:e1:f9:c2:f3:a3:
         f8:7f:aa:ed:d3:b1:96:fa:b2:fc:b9:6e:ef:2a:b1:82:66:ec:
         30:13:ac:cd:8c:fa:db:00:6f:02:a4:b2:cb:b9:c7:d8:da:9d:
         7a:df:20:fa:92:82:f7:41:95:cb:0f:9e:7b:cc:d1:0b:e7:a9:
         7b:f0:4e:33:b2:07:3e:14:ba:a0:7d:4b:8d:99:e4:55:36:0a:
         cf:cc:58:eb:9a:f6:21:3d:29:27:8e:df:41:b1:2e:8f:05:c2:
         00:6b:70:23:72:92:00:5b:17:03:20:ea:1c:f8:d4:3d:55:9a:
         05:db:91:4b:d3:08:18:07:13:a7:7a:5e:16:ea:c4:7a:be:8a:
         43:b6:45:aa:19:aa:0d:f7:52:f3:1a:df:e6:0c:3b:fe:c1:fc:
         5e:d2:39:d4:3d:b3:37:ee:12:fb:4c:ab:53:ce:a2:3e:5f:d2:
         b5:fe:ed:4c:41:5e:3c:4a:c4:fe:66:19:2b:7b:9e:79:7b:1e:
         e8:f6:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client