Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          01/utmuhD+GqmorszoRdAYoQ6fz9awE9yPg+ww1Agf0=
Subject key identifier:   4C:F8:83:39:C8:BB:66:0F:D8:69:E5:11:A1:40:D4:66:A3:EE:BB:B9
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       019FAD1A7B05720F2B019BCFF03B281BD192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          0192
Signing time:             Wed 29 Jul 2026 09:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:21 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: rJ4+vwABsp0di3vkKjLjtzTWXl0rupD6WyTpM2o9ifQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:7b:05:72:0f:2b:01:9b:cf:f0:3b:28:1b:d1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Jul 29 09:00:21 2026 GMT
            Not After : Jul 30 09:00:21 2026 GMT
        Subject: CN=4cf88339c8bb660fd869e511a140d466a3eebbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:50:28:6e:22:44:e3:39:61:ee:4b:6f:e4:
                    36:09:c0:6e:36:c5:44:8e:8c:0f:1c:c6:87:f5:94:
                    2a:75:55:ae:59:5a:12:0b:9d:b4:09:b9:0b:34:bb:
                    28:a9:d3:47:e3:86:78:a7:08:ed:a2:86:63:4e:b2:
                    f2:d4:d7:68:d4:c4:1d:39:d2:da:10:63:9f:02:fb:
                    f0:c1:c6:72:9e:b2:39:61:67:45:6b:a9:c4:9c:5f:
                    4f:ac:48:92:b5:5a:0f:ff:09:a7:8e:c8:26:4a:0c:
                    c2:a6:95:6e:44:92:6b:27:bf:95:bc:77:e0:ba:66:
                    a3:ca:41:c0:41:dd:08:f3:d6:39:1f:fc:94:3c:a8:
                    fe:69:0a:a5:32:c9:bd:52:cc:0a:3b:2e:73:56:58:
                    a4:c8:5e:45:d5:bb:84:92:5d:93:6a:91:f0:ce:3e:
                    bf:3e:55:62:c3:2c:4b:29:d5:da:3f:df:4c:03:b6:
                    f0:26:b8:4c:ca:7a:cb:0a:a0:d9:83:ff:9e:96:af:
                    fc:a7:c7:98:68:e0:ed:f3:0b:b1:5b:0c:61:21:9e:
                    d4:59:76:5b:3d:cc:29:b6:5c:a4:92:07:c6:df:a3:
                    3c:36:f5:23:26:d4:69:bc:a6:70:36:aa:61:46:a9:
                    b8:20:16:4b:f0:2b:6a:fc:34:28:c1:ca:e5:89:ff:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F8:83:39:C8:BB:66:0F:D8:69:E5:11:A1:40:D4:66:A3:EE:BB:B9
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:ba:69:97:be:a6:28:5d:5d:df:10:c4:97:c6:89:63:6f:
         b4:fb:81:a2:b2:17:c8:1b:8c:a6:bf:48:36:94:65:a9:3e:3f:
         23:d4:62:ec:55:eb:3d:a1:25:60:41:01:5b:3e:26:54:d1:4f:
         ca:15:3b:79:1f:e4:b4:9c:f8:2f:fb:19:30:f1:4c:39:94:df:
         42:e6:b8:ec:4b:de:dc:ac:63:2b:ea:1c:70:36:05:09:29:17:
         04:7d:29:d1:9c:79:63:24:3c:79:af:f5:16:18:c2:ac:69:b3:
         75:52:db:af:f0:f1:2a:e2:69:c6:84:c7:12:28:bb:39:60:e5:
         6d:c0:3c:c1:2a:54:93:cb:3e:0e:d0:4a:97:5b:1a:80:3c:34:
         7f:30:a5:1a:e9:48:7d:a2:2e:5c:55:41:80:23:63:36:46:6d:
         48:19:9a:07:15:f9:dc:72:09:72:45:a5:66:a7:98:06:ff:5a:
         b7:d0:7c:13:0e:bb:72:19:99:c7:81:d0:ff:05:68:23:af:c7:
         bf:19:e3:11:47:cb:47:e2:3c:56:2b:8c:a9:f0:ff:f0:cc:e3:
         8f:ff:b6:3a:7a:ef:72:0e:b8:ea:fb:9d:2f:c3:39:0c:07:25:
         a7:7a:46:6d:59:4b:34:41:11:53:3d:c6:13:40:55:98:13:23:
         c3:dc:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:19:14 2026 by rpki-client