Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
File:                     3ZapfPzU67oF9hUkAJ8sFco0P8U.mft (raw, json)
Hash identifier:          yoZV3jCS6KVl0yRkxkJ4kvrD4CFfpFHfUkAqpdaeAko=
Subject key identifier:   77:11:2A:D4:2B:7E:7E:B4:0D:72:71:1E:CA:A6:DD:EC:85:EC:74:B8
Authority key identifier: DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5
Certificate issuer:       /CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
Certificate serial:       019EC149A4AB639B6D37E294E508BFEEDD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
Manifest number:          01B8
Signing time:             Sat 13 Jun 2026 14:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:29 +0000
Files and hashes:         1: 1-mqYp0wbZd3hGyth9JUHZNjDZwI.roa (hash: r3TYLoZQHdWU8RlOoG6zBAduGAPckAKmqupyfEfHJFg=)
                          2: 3ZapfPzU67oF9hUkAJ8sFco0P8U.crl (hash: AwVZ85GNKRl1d0vjCaIBruOm5AdEgAuTnt7sMU7d7ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:a4:ab:63:9b:6d:37:e2:94:e5:08:bf:ee:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd96a97cfcd4ebba05f61524009f2c15ca343fc5
        Validity
            Not Before: Jun 13 14:01:29 2026 GMT
            Not After : Jun 14 14:01:29 2026 GMT
        Subject: CN=77112ad42b7e7eb40d72711ecaa6ddec85ec74b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:67:d7:09:6c:e3:18:d7:c4:c1:04:bb:2b:
                    1d:da:e5:55:0e:f9:c4:bf:1e:86:54:5e:7c:6d:71:
                    9d:5f:3f:fd:18:fd:5b:70:e8:a7:b6:19:8e:8d:6c:
                    2e:df:55:65:b8:86:01:79:e3:b8:cb:f1:86:17:7f:
                    6d:2f:07:1b:f3:56:9c:45:33:d6:4d:2b:ef:dc:b7:
                    68:e9:fa:2c:a1:e0:20:39:51:62:4c:44:62:72:dd:
                    45:a4:ad:59:5e:dd:67:42:73:70:2f:5d:b9:4e:e0:
                    17:83:23:5b:b2:e2:e9:de:f9:ef:c1:e6:10:37:2c:
                    e6:44:ac:42:e8:71:74:48:e7:ee:e5:3d:58:5e:56:
                    d7:22:11:ec:e0:a0:48:a5:00:81:5c:c0:86:35:7e:
                    f9:14:eb:4a:5c:ac:0d:53:a0:2b:52:53:e1:49:a3:
                    53:29:7c:86:82:56:b3:1b:0c:27:69:ca:a0:54:f2:
                    52:01:b1:86:cd:38:6f:ba:a9:9c:37:42:5b:6c:9f:
                    c0:d1:46:87:d2:11:23:97:e6:cb:f8:78:6f:89:a6:
                    14:82:12:0d:9f:a1:d1:27:58:b2:99:1c:3b:f1:09:
                    e6:29:59:7e:aa:04:cb:ea:ee:9e:32:e1:55:78:b3:
                    2d:66:b4:42:5b:63:db:49:9d:be:4e:f3:54:86:47:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:2A:D4:2B:7E:7E:B4:0D:72:71:1E:CA:A6:DD:EC:85:EC:74:B8
            X509v3 Authority Key Identifier:
                keyid:DD:96:A9:7C:FC:D4:EB:BA:05:F6:15:24:00:9F:2C:15:CA:34:3F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZapfPzU67oF9hUkAJ8sFco0P8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/436b10-92e1-4d1d-8efb-c1c54866b616/1/3ZapfPzU67oF9hUkAJ8sFco0P8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:8b:98:92:ad:c9:29:ae:d6:ce:91:9a:3e:99:86:8e:8a:
         c4:46:1b:27:1d:48:01:4f:c8:ca:a6:60:d2:9a:68:65:f4:6d:
         cf:94:ba:58:6b:8b:28:73:b8:e4:8f:5d:54:bd:40:43:c9:56:
         71:e4:1a:57:f7:1e:1f:79:89:05:5a:0c:2e:7b:55:5d:06:2f:
         b6:41:f9:04:78:7d:66:b0:f8:8a:32:58:cf:94:c7:25:3b:53:
         64:78:c0:0b:02:aa:ee:60:b7:45:a0:2d:1c:cb:0b:f7:46:03:
         80:76:94:08:58:f3:d0:64:32:a4:40:ee:e7:09:a7:c7:f6:8b:
         c9:d7:8e:96:fd:4a:1c:fa:f9:4a:16:5a:fb:45:5d:83:36:96:
         e9:81:4d:f9:cf:87:33:61:6b:c7:76:b8:e6:d0:8d:5c:4f:2b:
         07:60:39:4b:ba:2b:2c:09:cd:5d:63:2c:17:0d:c6:5e:53:3b:
         3d:89:5c:b0:f2:33:27:2f:af:d8:69:12:e1:d9:34:f5:21:05:
         7d:3d:07:a4:47:74:ae:4c:ad:5a:9d:cb:14:a8:11:57:28:32:
         95:21:4c:4a:ad:ae:62:68:5e:2b:7a:03:39:86:fd:83:78:bc:
         23:44:51:56:b4:e7:27:51:6a:c6:52:37:d4:14:58:3a:d9:c1:
         98:be:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:34 2026 by rpki-client