Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          ePOwQTLpyu81OmimACHxW+wC9jg4Hcm8+6pLUPfz+qE=
Subject key identifier:   E9:A8:F3:45:26:D3:44:46:06:D9:FA:35:DF:BA:0C:2B:04:DF:5C:BC
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       019FA9E3216B1922ACCA95DFE11334505995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          19DA
Signing time:             Tue 28 Jul 2026 18:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 18:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 18:01:02 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: ZCt84Lv9MjXqpxPgSpDBwcMi4GYMhigRV2orlBA5XMU=)
                          2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
                          3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
                          4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
                          5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e3:21:6b:19:22:ac:ca:95:df:e1:13:34:50:59:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jul 28 18:01:02 2026 GMT
            Not After : Jul 29 18:01:02 2026 GMT
        Subject: CN=e9a8f34526d3444606d9fa35dfba0c2b04df5cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:a6:89:56:71:61:eb:87:49:43:80:22:89:
                    b7:d9:4d:37:d0:83:63:62:99:13:54:fd:c3:ab:93:
                    fe:65:2b:a9:30:bd:00:05:51:ad:cd:e1:bc:11:ad:
                    22:27:cb:3d:35:7c:32:9b:ce:3c:80:6f:90:e3:b3:
                    27:4b:ef:a8:82:d0:71:d9:07:75:50:dd:80:58:2c:
                    6b:40:85:6c:ae:e3:f4:62:03:3c:f7:b2:9d:f1:9a:
                    4b:06:b2:be:2d:e5:90:bd:6b:91:3f:1e:76:22:2e:
                    0b:5f:da:d4:db:23:0f:48:ee:30:41:94:48:80:b5:
                    06:b4:16:a9:c9:9b:83:ef:60:70:39:e8:a6:71:e5:
                    ff:cf:42:d1:48:08:ee:34:ae:25:c0:94:92:10:f0:
                    66:3a:56:f0:a0:59:2a:7b:9c:b1:c7:89:ca:68:dd:
                    b3:63:0d:f7:e7:54:35:e5:de:6f:f7:6f:6a:0d:22:
                    da:d2:41:62:b7:9a:fb:e7:be:34:09:cf:6e:f7:c2:
                    8f:41:ff:25:bd:e4:ab:32:c6:9a:2e:5d:eb:ed:41:
                    75:b7:e5:05:fe:1f:07:b3:1c:aa:4b:09:39:07:61:
                    c0:fd:99:5b:eb:89:38:94:5e:ed:71:7c:53:6d:a9:
                    ed:c0:98:87:4b:25:c8:03:85:d7:0c:27:28:3e:a2:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:F3:45:26:D3:44:46:06:D9:FA:35:DF:BA:0C:2B:04:DF:5C:BC
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c5:1f:b4:40:74:5a:ed:7d:4a:aa:3e:a0:77:b1:80:9f:10:
         c4:4f:cd:fb:23:f2:67:3e:15:39:52:d3:73:08:fc:3f:19:f0:
         9d:92:b2:8b:ea:8a:38:52:82:67:a2:e1:a0:63:26:df:af:5d:
         a3:a2:5c:6f:88:10:51:c5:ae:f5:87:6c:9a:b1:8c:77:55:89:
         f8:d3:c9:13:40:3b:d2:7d:49:8e:3f:ae:2a:6b:16:df:c0:ef:
         70:0b:57:5a:d1:b6:4c:9b:72:34:30:8f:60:4d:0c:5b:23:59:
         42:77:24:d2:fc:5a:df:c2:cc:95:48:d1:56:b2:0f:4e:5d:12:
         39:a9:23:31:ac:9e:cd:1c:3c:4a:f1:82:70:37:28:9b:74:10:
         b8:cc:79:88:67:e1:cc:9f:74:b3:ab:61:62:7c:7e:c9:d6:14:
         6d:97:e7:b7:ca:39:c9:cd:6a:41:12:93:ae:1f:99:d9:93:5a:
         e3:ba:78:21:16:d5:0d:80:eb:90:16:11:3c:be:58:a4:56:58:
         c0:7d:fd:39:d6:3e:64:1a:3f:08:b9:be:5c:25:c8:12:57:80:
         43:bc:b7:b1:ca:11:52:9c:b0:59:1c:99:97:94:d4:ea:9a:07:
         27:0f:17:69:58:0b:fc:2f:42:04:db:37:58:9d:4f:1d:ff:9e:
         00:c8:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:57 2026 by rpki-client