Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          hVuiP8D0JZAjEd6VPYgkRLu58j/M7LrkNpFb0ArQxZM=
Subject key identifier:   3D:71:56:67:AD:98:7F:76:76:50:72:9A:D4:D3:45:C0:4A:4A:7B:25
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       019FAD5196A41BB3B2EEC7CD5F8368E1302A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0EC7
Signing time:             Wed 29 Jul 2026 10:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:32 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: lUJ+4DVTgR+Aa6CUFWSVA3SOvyBACvbsmENbovHOJmQ=)
                          2: AjF1xzLoCmUBj3GGwZ1oDsP0HrY.roa (hash: MDPBvNx4/AU6HeMPVBxMXRo2S5XCKx7igfWllN96Xeo=)
                          3: Dla58c4NF4e-8Fh3gF-JldNSHSM.roa (hash: fUcyUatpA7Zq3P4h9Dkuq1MejOsAl/ix3+G/GiH0qeM=)
                          4: E5IX0VwfA8Hs-Nf0IDXDUl3I7QI.roa (hash: bwDLzz1chdjqp0DDaeiR10pbirM6+aG2FaIGoT/5NYs=)
                          5: PBfzv0iiF6HGojmLt5BzWIMbg9A.roa (hash: nIjIXxuKfTGMh/FzfYXRKGadZaZtFRAFEH76fiqro7Y=)
                          6: XyBwwk9Rpf2EkG4M9-abdDNCWms.roa (hash: TZxVKHtjSFLa0T3PPjVjD1cxZHhhNWMZJ+1RNn+t7lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:96:a4:1b:b3:b2:ee:c7:cd:5f:83:68:e1:30:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Jul 29 10:00:32 2026 GMT
            Not After : Jul 30 10:00:32 2026 GMT
        Subject: CN=3d715667ad987f767650729ad4d345c04a4a7b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:2d:f3:d4:50:79:01:e9:f1:d7:43:b4:d9:
                    bf:56:4d:fb:2d:79:ce:f2:ab:d4:2e:47:9d:6a:c9:
                    7b:77:12:8b:5f:23:40:8b:f6:94:f3:99:69:45:40:
                    05:f7:af:34:a9:18:0c:76:05:61:d9:6e:17:0a:96:
                    d1:8e:d6:3c:ae:d6:58:cf:ce:e4:1d:85:04:20:c8:
                    59:9b:d7:24:68:e5:12:09:c1:55:55:a8:21:da:05:
                    63:f9:c9:28:92:c8:94:c1:5d:52:eb:62:f7:29:e4:
                    e2:8d:25:ff:b1:6f:b9:b3:74:aa:b7:16:77:e1:5d:
                    c4:3b:e6:47:cc:b1:a8:fb:a9:d6:df:88:a4:11:18:
                    68:b0:41:48:32:0e:15:2e:67:07:63:05:b0:fe:2e:
                    8a:a3:04:12:dc:a0:cf:7e:6f:f9:1d:b8:be:28:a0:
                    38:5c:ae:cd:51:35:9c:f6:06:ed:c9:ad:c4:75:8b:
                    76:23:67:9c:58:23:1c:8e:89:f2:4e:b1:58:8c:6c:
                    52:43:ca:05:c5:06:b5:88:63:4f:9a:ce:b3:75:20:
                    1b:bb:a5:3d:89:85:9f:e7:da:dc:14:db:21:fe:f0:
                    0e:80:6f:11:dc:9f:28:18:c7:48:c5:7d:a9:f4:af:
                    52:99:74:42:71:c0:b3:31:51:b8:45:d1:6d:21:70:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:56:67:AD:98:7F:76:76:50:72:9A:D4:D3:45:C0:4A:4A:7B:25
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:74:50:18:b9:26:f7:d8:af:74:84:18:0a:21:df:3c:e6:
         47:b8:82:72:09:4c:64:88:ca:a5:5f:1a:b8:f7:6d:37:15:4c:
         ad:27:3f:ce:8f:6a:23:dc:93:98:3a:72:56:0f:13:13:12:7b:
         d4:49:c2:90:c6:b3:13:34:68:ee:9d:ed:ad:f0:cc:33:9f:aa:
         0c:a9:ce:6b:48:e4:67:4d:d2:07:73:f0:6b:59:b6:e7:97:03:
         d2:f2:3a:62:81:47:83:c1:33:0d:b5:dc:dc:15:ae:1d:f2:6f:
         7f:31:de:7c:57:e0:ea:d2:95:de:ff:72:08:62:16:10:2a:a0:
         68:40:30:2c:f5:7f:5c:96:5a:a9:32:77:60:e9:b9:c1:fd:40:
         39:32:cc:72:f5:41:d6:34:57:9c:bd:33:a1:9a:f5:ad:69:25:
         c1:79:77:0e:1e:8e:53:92:9b:e3:a1:36:c4:34:14:da:6f:ba:
         64:21:9c:0d:84:99:fd:fd:a8:3a:a4:91:05:16:f5:bd:bc:3a:
         81:3c:68:09:4a:1c:d3:f1:87:92:e0:0b:2d:5b:d9:e3:bb:4f:
         11:44:af:de:26:62:a2:12:e3:ad:4c:84:ea:7a:09:3e:91:42:
         56:b8:63:52:0e:4b:08:51:04:ee:76:b1:6f:4c:e9:bf:5b:2d:
         08:c0:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:02 2026 by rpki-client