Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
File:                     PiDHANmNdqnGQBc4ifk2faneiZc.mft (raw, json)
Hash identifier:          XMtyYxvFoxbz4peCgNUKvf4hZQiLcQuw54S7gwU0W6c=
Subject key identifier:   15:94:00:0B:F5:36:8D:E6:F2:4B:F5:6B:54:AF:FE:D5:01:6D:4A:3F
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Certificate issuer:       /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial:       019FAB62F65F0EEF7E84BEA720180972CADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
Manifest number:          19DE
Signing time:             Wed 29 Jul 2026 01:00:17 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:17 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:17 +0000
Files and hashes:         1: 3Y2bsvd6Ko2TakhACGAC13OxWgg.roa (hash: hop+YCd6wtmHiz87UpYcHYekpewszM4DMDY6Yajc55g=)
                          2: DEt4Y-_VZKpKHUQGndzBwGKa-hI.roa (hash: Pn+dJyctNTmeoTcdBPCYjrOipk+Ikj5vYjRfpzr/AfY=)
                          3: Fd0my4VD8yFhFNY23xVFQ5bNE7o.roa (hash: Xq0TLzzFqkURQ7QOU8lzKIy+PNOHeKXumeKowKwhe0E=)
                          4: PiDHANmNdqnGQBc4ifk2faneiZc.crl (hash: +KZbiMLp2ERXBTrqQQNeE3/YpMZzWGWzuEkby6E8pss=)
                          5: XfL7J3_lKAhMT6FV_AAy67CADLI.roa (hash: Cja0K8hb1CFlq8SDbTIyn6C1tgY/4LTLk6lQT4K0o4Q=)
                          6: uekau7rSPung7Kbe6f858ZuB0t8.roa (hash: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:62:f6:5f:0e:ef:7e:84:be:a7:20:18:09:72:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
        Validity
            Not Before: Jul 29 01:00:17 2026 GMT
            Not After : Jul 30 01:00:17 2026 GMT
        Subject: CN=1594000bf5368de6f24bf56b54affed5016d4a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:04:3c:f2:90:ce:cf:69:94:bd:da:70:33:
                    ed:93:9b:3f:28:c6:c6:07:25:54:59:c9:97:26:ab:
                    88:d0:55:f5:63:d5:d3:dd:2e:f2:f9:86:6c:b6:c5:
                    f1:a6:0f:6c:4c:a6:90:c0:b0:88:be:9f:dd:45:f2:
                    1d:ca:2f:6a:ed:08:ce:85:bd:c2:12:92:bd:80:9d:
                    f7:62:b8:6a:40:87:ea:a0:d1:7f:6c:8c:04:41:29:
                    15:f1:0a:13:d5:db:6a:ff:57:52:a3:44:0a:89:38:
                    6b:bd:37:08:f1:68:db:14:26:40:58:db:25:39:74:
                    90:ba:76:01:c1:90:37:33:e8:f3:d2:ee:0c:0c:33:
                    c0:09:32:45:31:70:65:7d:94:60:4c:75:cf:31:85:
                    15:df:38:d2:88:a6:47:a9:3e:c0:74:47:f2:b2:64:
                    a2:2f:ea:16:1f:3d:e3:75:03:cb:e0:5e:5b:93:73:
                    c7:bc:e8:16:c0:cc:a7:cf:a4:37:c2:c8:8c:0d:a1:
                    48:43:f6:80:18:1e:e3:8d:a3:5c:e8:98:6a:22:a0:
                    ce:08:ab:ab:74:18:86:08:d1:d1:83:32:5c:8e:5c:
                    97:98:08:bb:cf:9a:0d:51:04:13:9b:f2:66:02:ca:
                    f9:aa:f5:bb:90:0e:60:e5:ee:9a:4a:9e:8c:e8:a4:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:94:00:0B:F5:36:8D:E6:F2:4B:F5:6B:54:AF:FE:D5:01:6D:4A:3F
            X509v3 Authority Key Identifier:
                keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:24:56:f1:ab:07:51:48:29:4d:3e:a1:06:5f:33:d9:b7:
         a3:7e:15:a4:1a:86:2d:5e:6c:a5:16:b7:0a:a4:13:72:08:27:
         e0:75:8c:a0:e0:89:b1:d1:a0:0a:d4:22:66:3e:e1:a7:87:fd:
         e8:3f:b3:e4:a5:04:45:4d:fd:af:b9:bb:4a:8b:8b:67:f3:ec:
         b3:c4:77:3c:75:df:8a:75:ba:9d:9f:e5:c5:3c:a5:a0:4c:1d:
         46:ae:5a:dd:3c:bb:37:0e:75:3e:65:c5:5d:53:84:62:cc:23:
         7f:43:45:d0:7e:57:c1:2b:40:cb:e3:16:4c:36:71:a9:48:b2:
         c7:b8:a1:8a:aa:14:33:79:29:ca:d6:c4:9b:16:44:e4:bf:62:
         9d:8d:ee:1e:22:33:89:bc:54:57:c9:0f:b6:36:b9:77:7d:c4:
         45:f1:2e:6c:32:82:a8:ca:cb:49:7c:c8:f6:58:b7:bd:41:c3:
         0e:40:a4:e4:17:88:ac:10:c0:9a:3a:76:ed:f3:f4:44:27:76:
         88:2b:f4:57:51:e6:0d:39:76:b3:d7:a6:4a:97:64:25:34:07:
         e2:55:84:5b:97:e8:54:a5:0f:55:44:90:92:61:93:ba:92:f7:
         db:e5:b4:ed:f1:c9:8b:1f:29:4c:62:30:a7:b5:1d:46:9b:a2:
         b2:64:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:46 2026 by rpki-client