Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          RDefYHlibodrJApdWZIHx7GH0PLKRLvbN8uEl16OaXk=
Subject key identifier:   08:64:E2:3A:1E:F3:FE:EA:76:C8:B7:06:F3:D2:50:F2:22:CD:C6:AC
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       019FAA19FA2A2D1432240C59F799487A5198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 19:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:56 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 5mz5R7VkkP7eBfFAKX15+KFm3uuptyJF/EAqv89e0zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:fa:2a:2d:14:32:24:0c:59:f7:99:48:7a:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Jul 28 19:00:56 2026 GMT
            Not After : Jul 29 19:00:56 2026 GMT
        Subject: CN=0864e23a1ef3feea76c8b706f3d250f222cdc6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:ae:c6:d4:d0:c1:80:de:d5:c6:13:8c:f4:
                    71:61:bd:7d:bc:44:d9:f4:d1:e2:8a:79:f6:22:0f:
                    a1:96:5d:ed:78:b3:dc:d9:90:7e:06:3e:74:6b:a6:
                    f4:44:4a:4c:c7:52:6c:5d:62:97:65:0f:5d:42:83:
                    10:7d:15:ae:5b:95:2a:8f:2d:03:44:70:d7:5c:da:
                    e4:8d:19:d1:22:b2:76:6f:58:74:9c:98:6c:3e:4b:
                    e7:1f:1a:05:df:75:de:aa:e9:1c:5f:2e:f6:09:a2:
                    35:8d:80:83:51:ca:ce:5d:b7:b0:b5:ca:99:d7:d5:
                    43:4e:0c:8c:ad:02:56:72:cf:4e:ca:3b:29:47:44:
                    c6:3b:59:92:36:b5:27:b9:80:c3:d3:b1:63:9f:1e:
                    9d:b5:5d:de:f4:b2:ca:d0:5d:af:b6:a4:81:d1:b0:
                    af:c5:76:74:12:f0:e8:7f:3d:48:fd:47:fe:eb:bf:
                    3f:e2:dd:28:ba:d4:d5:d1:b1:d9:9e:ed:db:fd:ac:
                    6c:66:8e:22:56:24:0f:cf:ba:49:f3:cf:03:da:65:
                    3e:1b:00:96:b5:04:ff:b7:fc:46:21:c7:55:43:03:
                    c7:cc:b6:39:08:75:67:e2:50:b0:4a:8c:72:e6:87:
                    be:4a:19:23:eb:58:01:b7:b8:a4:bc:12:36:e2:13:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:E2:3A:1E:F3:FE:EA:76:C8:B7:06:F3:D2:50:F2:22:CD:C6:AC
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:24:5c:8c:9a:70:53:9c:3b:42:ed:00:7b:ba:71:d8:e9:
         22:88:e5:39:62:fd:47:60:c0:09:e3:6d:b1:d8:b6:70:d5:89:
         41:8f:4c:ff:ce:a4:03:62:43:63:2b:fd:45:3e:25:33:ba:24:
         b5:d9:49:b1:08:a1:e2:2b:b7:90:86:18:c0:57:88:e2:31:69:
         73:24:4c:a9:35:a5:a3:38:13:f4:83:77:35:dd:26:b0:f4:ca:
         42:ec:5e:e4:d4:0f:c2:44:9d:68:35:06:76:7d:65:85:d7:00:
         23:4d:68:54:3d:5a:c2:8a:bc:f8:f1:29:b5:6b:21:08:dd:d8:
         aa:d2:92:f2:d3:a9:88:d1:4e:ae:92:bb:27:04:0b:6f:54:4a:
         52:a5:10:99:85:ff:27:42:d2:ea:80:58:72:0e:a4:19:5b:03:
         bb:4f:5f:74:5d:57:ce:6c:0f:d7:3d:71:9b:7b:1b:40:63:19:
         6f:c9:6e:06:be:7e:e8:92:9d:9a:66:bf:42:c2:b7:7e:23:fe:
         82:a1:bf:20:ad:31:54:e3:ee:ea:9e:19:ef:73:e5:89:9e:ef:
         22:ab:93:10:39:39:42:e2:10:f2:18:3d:55:1b:cb:28:61:0a:
         87:66:b6:9e:dd:00:d7:2c:7c:83:f5:ef:19:ba:aa:3a:04:4a:
         f6:03:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:52 2026 by rpki-client