Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          xY3CSwXuEgu8yJcwZS+NEewhw6g3PV/qAd5nT65GlQ8=
Subject key identifier:   32:7A:DE:C9:A0:C2:94:A4:5D:5A:8C:E9:EB:59:41:F7:F1:7B:1F:18
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       019FA861E217B28D8844DEDD79AAD7B038F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 11:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:14 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: uWnUBssp0YKfIcCINKjRbXV3OUAj1bRrnYbNMDSPVUs=)
                          2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:61:e2:17:b2:8d:88:44:de:dd:79:aa:d7:b0:38:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Jul 28 11:00:14 2026 GMT
            Not After : Jul 29 11:00:14 2026 GMT
        Subject: CN=327adec9a0c294a45d5a8ce9eb5941f7f17b1f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:17:18:61:92:e9:33:1a:18:d4:22:5f:67:
                    a4:f9:f4:d2:40:79:47:22:50:38:55:47:83:ce:3d:
                    c7:ca:3e:c7:ec:da:36:ac:b4:a4:fc:4a:6d:1a:df:
                    34:19:be:9b:2f:cd:b6:1e:29:c4:a5:4a:ec:ad:57:
                    4a:50:ed:b9:c4:30:68:81:18:ce:3f:00:02:91:c2:
                    a6:ac:87:7a:46:26:1d:c1:a7:df:a4:1d:00:52:ca:
                    62:b1:b0:27:6a:90:0b:87:ab:32:a8:40:1a:79:46:
                    fb:a1:88:2e:7a:95:42:f1:b8:0a:3e:1f:93:95:e2:
                    f5:ea:f0:6c:0a:d6:b9:77:b8:7e:55:8a:0e:79:50:
                    82:e8:d8:46:c8:41:4c:63:f5:00:e5:34:02:fb:7c:
                    0d:6b:c6:3b:34:76:14:ea:f1:d4:41:71:64:30:ae:
                    bd:3f:f7:ed:13:84:b2:f9:66:9b:66:13:5c:6a:69:
                    2c:7d:a0:7f:ca:59:de:0b:20:27:4a:53:6f:38:b5:
                    98:6d:29:ab:d2:34:16:3a:6d:73:93:4d:80:a9:2d:
                    56:a8:13:99:fd:ef:2d:38:d1:e3:a1:f7:ad:d8:c1:
                    29:83:42:6e:7e:a6:3a:7a:9d:74:d3:01:0e:11:38:
                    ea:54:8a:b4:8b:1a:32:c8:81:d0:33:eb:70:cb:82:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:DE:C9:A0:C2:94:A4:5D:5A:8C:E9:EB:59:41:F7:F1:7B:1F:18
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:2e:01:36:12:22:a0:33:1a:07:e5:92:5f:b5:74:49:8b:
         8f:85:61:16:53:08:e0:b6:1d:5a:44:25:c9:2b:a1:e1:ea:f0:
         74:47:2b:d5:fc:7e:aa:bd:65:59:1f:5c:f1:cf:26:44:22:b4:
         98:f1:20:8b:3c:43:66:c1:c8:0c:ff:04:b1:f0:78:20:db:76:
         28:96:1f:38:89:96:60:cd:d7:6f:44:6e:5f:3b:fc:b3:3c:34:
         0d:d8:51:53:ca:1b:72:22:46:1a:44:dd:82:03:0f:f8:43:4f:
         bb:27:d2:79:71:5c:50:4b:11:1a:ac:2d:aa:94:10:66:22:9c:
         e1:c8:6d:39:9d:34:d1:24:39:cf:9d:14:bf:10:b6:35:dc:11:
         87:f1:a0:d6:7c:38:2f:70:fa:f3:1e:2e:da:37:a8:6e:1a:d1:
         54:8e:c7:74:7d:6b:91:e8:a0:12:91:79:57:88:8d:3e:da:3e:
         55:0d:55:4a:fb:78:d3:52:b2:57:60:73:81:6f:56:24:7f:9e:
         cc:29:80:1c:c1:57:d1:db:ea:97:1c:f2:e9:37:b3:33:7f:97:
         09:c0:11:98:2d:3c:4a:05:de:11:da:db:3d:ff:74:51:a6:93:
         ad:e8:4c:15:a5:84:66:c1:88:73:00:11:3a:78:87:10:00:2e:
         c8:f8:1e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYeIXso2IRN7dearXsDjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm
YmI4NDMwHhcNMjYwNzI4MTEwMDE0WhcNMjYwNzI5MTEwMDE0WjAzMTEwLwYDVQQD
EygzMjdhZGVjOWEwYzI5NGE0NWQ1YThjZTllYjU5NDFmN2YxN2IxZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XIXGGGS6TMaGNQiX2ek+fTSQHlH
IlA4VUeDzj3Hyj7H7No2rLSk/EptGt80Gb6bL822HinEpUrsrVdKUO25xDBogRjO
PwACkcKmrId6RiYdwaffpB0AUspisbAnapALh6syqEAaeUb7oYguepVC8bgKPh+T
leL16vBsCta5d7h+VYoOeVCC6NhGyEFMY/UA5TQC+3wNa8Y7NHYU6vHUQXFkMK69
P/ftE4Sy+WabZhNcamksfaB/ylneCyAnSlNvOLWYbSmr0jQWOm1zk02AqS1WqBOZ
/e8tONHjofet2MEpg0JufqY6ep100wEOETjqVIq0ixoyyIHQM+twy4K7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ63smgwpSkXVqM6etZQffxex8YMB8GA1UdIwQY
MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt
MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi
LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG24uATYS
IqAzGgflkl+1dEmLj4VhFlMI4LYdWkQlySuh4erwdEcr1fx+qr1lWR9c8c8mRCK0
mPEgizxDZsHIDP8EsfB4INt2KJYfOImWYM3Xb0RuXzv8szw0DdhRU8obciJGGkTd
ggMP+ENPuyfSeXFcUEsRGqwtqpQQZiKc4chtOZ000SQ5z50UvxC2NdwRh/Gg1nw4
L3D68x4u2jeobhrRVI7HdH1rkeigEpF5V4iNPto+VQ1VSvt401KyV2BzgW9WJH+e
zCmAHMFX0dvqlxzy6TezM3+XCcARmC08SgXeEdrbPf90UaaTrehMFaWEZsGIcwAR
OniHEAAuyPgezA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:44 2026 by rpki-client