Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
File:                     f3ET_r3boeBrlTCDtmSO-qAx8fU.mft (raw, json)
Hash identifier:          qPbFOtrerMtidkfAE+cWu3gefpp2L5mslF1xVT7L/kU=
Subject key identifier:   C8:19:57:DA:03:DC:C3:BD:E3:17:C4:98:D8:B1:5C:06:6E:B9:32:BE
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Certificate issuer:       /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial:       019FAC7635F23912DD0005A943553B594C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:55 +0000
Files and hashes:         1: 1-OYpxvXf01l-3v81_JO0GhTw0U8.roa (hash: maP/DOqBfThrLU296WG85Zf4viQIPPYK5NJmpNuBrGg=)
                          2: Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa (hash: cAz0BXExpLFECormHh+BtGBygCZH+t51hrNKrPat5QE=)
                          3: CH4cB5wInBV4cwxI5w3P2wuRLI0.roa (hash: 22NNWmSGS7QrfggnbNY17T1GU9k5KhX54GUORhCR+2Y=)
                          4: GcHZepKQ4jGPVr3OoRfdhaTHGeE.roa (hash: T6n6JXxwyvyhCyYpVrtVqkZOJ12HwYIjXtEa/2LOeWM=)
                          5: UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa (hash: JRmODBb7OlHw1Za55dylor0a47b0qEs89+ukqYmHts8=)
                          6: f3ET_r3boeBrlTCDtmSO-qAx8fU.crl (hash: ED48id2NSZpHJ5xLKYbxgqq3Z45bKrdoUnAM1BnQBU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:35:f2:39:12:dd:00:05:a9:43:55:3b:59:4c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
        Validity
            Not Before: Jul 29 06:00:55 2026 GMT
            Not After : Jul 30 06:00:55 2026 GMT
        Subject: CN=c81957da03dcc3bde317c498d8b15c066eb932be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:2b:83:62:94:31:5d:7f:c6:15:5c:3c:f9:
                    bc:96:db:bc:53:65:7b:e9:3d:3a:ca:84:0f:4a:09:
                    28:93:5f:70:7d:ed:86:60:6c:b5:1c:b1:46:4e:f8:
                    92:6f:23:88:32:bc:37:0d:13:0b:cd:64:4a:61:ce:
                    02:84:3b:dc:2a:92:ef:61:cd:77:00:d3:e8:2e:48:
                    1c:00:0c:2c:3b:de:58:a5:5a:bc:c5:2d:6e:03:71:
                    3f:3d:71:e4:d7:3d:74:4d:0a:62:1d:89:37:cd:f3:
                    0e:eb:ff:d2:84:af:57:57:7c:e6:c9:ab:68:bc:d0:
                    6c:61:b2:81:4a:04:13:fc:be:b8:fc:2a:dd:a5:63:
                    79:6c:ca:10:bc:52:58:c7:1c:6f:db:48:1c:52:02:
                    a6:c3:cb:6b:16:47:14:91:6b:87:66:9d:26:25:b1:
                    4f:83:41:aa:c2:cc:0f:ae:89:03:df:77:97:f5:bb:
                    b3:b7:e0:87:40:13:5e:1f:03:ad:0f:75:e4:35:6f:
                    00:8b:71:8e:2a:ae:ee:6a:22:03:5f:88:52:b5:f6:
                    d6:24:d9:63:c1:60:01:5e:a9:fa:36:18:58:bb:63:
                    59:2c:09:92:ab:23:8d:97:2b:f8:c7:a0:9b:80:61:
                    98:46:68:2b:93:ad:77:20:27:0d:2f:2b:28:68:05:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:19:57:DA:03:DC:C3:BD:E3:17:C4:98:D8:B1:5C:06:6E:B9:32:BE
            X509v3 Authority Key Identifier:
                keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:c4:12:e2:cb:13:70:92:00:37:9c:64:ca:7e:2e:4a:89:
         27:ec:a8:af:0b:62:b9:1b:a3:49:d0:a4:f7:3e:18:40:f3:c7:
         8c:ce:fa:89:d0:63:77:fe:01:1c:f8:3e:cc:39:da:56:63:ce:
         81:fe:d6:c7:d9:a4:ca:93:19:c4:9d:f8:aa:1c:9c:f6:7f:10:
         e2:40:cd:68:1b:02:04:8e:40:c3:1a:dd:70:2e:38:a1:4a:10:
         7a:27:bc:53:7e:a9:12:95:c5:37:6b:ed:71:71:e9:c8:4e:bd:
         14:d7:e3:45:86:77:09:f6:56:1d:8b:48:e5:86:fa:3f:96:b2:
         95:d6:79:c1:d0:a0:14:da:37:ff:7a:30:14:8f:35:23:28:4d:
         ba:46:61:20:b6:c6:cc:77:e8:03:fb:12:13:40:51:11:52:b5:
         58:30:ae:b5:a5:ea:7f:11:33:9a:97:c9:bc:d2:50:9f:94:6a:
         b7:1b:99:60:13:03:21:26:2a:92:64:24:37:eb:09:b4:27:8e:
         7e:3a:bb:d4:3c:5a:9a:74:a0:bb:89:89:d9:39:6a:af:48:83:
         96:fa:21:dd:2e:d9:dd:dc:24:3a:78:d4:e9:d4:96:73:8b:cd:
         3f:82:c2:41:00:59:55:16:57:25:89:bd:0b:7e:9a:4f:d7:27:
         46:0e:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:25 2026 by rpki-client