Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          ZFdc0RIufF+ljoJPWVBDjMkKYY2eKZ/MtBK4eLDzfV8=
Subject key identifier:   7F:35:C2:FA:7A:9B:7C:73:3F:D6:2D:53:0F:58:99:18:44:31:58:57
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019FA82BC33F1D0C2CD7BE2AFE0A27732C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          17B3
Signing time:             Tue 28 Jul 2026 10:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:08 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: xSzTD5WjCEjE6AUQsdQDx9CFfefrYZMOhx7d04hLaEs=)
                          2: PwiZTLMnTSImSJqg5YhxIc0yJ2I.roa (hash: ELKLgbhzomAOFQPzxqVUBCgPOBcTULWY1WH35OnRTFw=)
                          3: Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa (hash: hbS17xb15eoENiFqWkrh4Rg5HMl3hCu9i3t7Tn7RjEU=)
                          4: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
                          5: WwkncKL5VRC13xPV2ZE_H9se7W8.roa (hash: BknD8zU7XCC2nFHasTpI89u/51fYeUQLrTGPpyLxToE=)
                          6: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:c3:3f:1d:0c:2c:d7:be:2a:fe:0a:27:73:2c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Jul 28 10:01:08 2026 GMT
            Not After : Jul 29 10:01:08 2026 GMT
        Subject: CN=7f35c2fa7a9b7c733fd62d530f58991844315857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:78:2c:dd:1f:1b:18:03:79:34:a2:5e:d0:94:
                    c8:ed:f3:78:b7:81:83:4c:28:1b:07:0d:8a:43:1d:
                    70:e5:3b:16:99:04:2a:ad:cf:6f:76:8a:ef:78:65:
                    25:b1:80:0a:aa:77:d2:ac:e7:43:11:97:d8:9e:4b:
                    13:f8:a0:4a:04:1f:6e:4c:80:5c:4e:bd:80:b1:7a:
                    07:a4:db:d1:71:c6:da:04:23:09:4e:cf:21:2e:e0:
                    e4:1f:6f:e6:be:53:30:69:9e:f5:ea:6b:6c:ae:ce:
                    2f:1b:de:ac:b6:fa:97:51:d1:a5:65:5b:31:06:30:
                    6b:e8:35:6c:05:65:5a:1d:42:a1:e4:eb:d5:04:63:
                    5d:06:16:6e:28:d0:de:0e:df:ed:02:08:a0:e0:7d:
                    e2:cf:ee:a7:8e:e3:a6:e4:a3:82:f3:90:5d:1c:82:
                    42:9a:01:53:4d:13:50:6d:26:f6:ca:f6:a9:1f:b8:
                    0d:9f:a0:94:9b:bb:97:02:87:8f:9c:16:61:d9:4b:
                    cf:99:9a:e1:d9:91:13:1d:e1:b2:bb:99:7d:27:b6:
                    7d:89:7d:93:3a:a7:96:87:ff:a6:d3:b4:b9:0e:29:
                    54:27:ba:d0:96:8e:89:f9:f5:32:89:67:d7:01:f4:
                    27:e3:68:e1:4c:ca:e6:65:5d:bf:5f:dc:4a:c4:9c:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:35:C2:FA:7A:9B:7C:73:3F:D6:2D:53:0F:58:99:18:44:31:58:57
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:55:01:64:f7:f0:11:26:72:ff:6d:c1:91:75:cb:b6:b8:
         9b:5c:b0:ff:30:5c:9a:d6:b5:45:34:d3:59:e2:a4:27:de:62:
         94:63:ae:b9:80:d3:e9:f0:52:d2:6d:38:6c:75:a9:93:2a:20:
         81:07:25:27:53:ae:48:02:37:0f:46:00:7e:04:37:93:e0:5b:
         68:a9:22:c8:0e:f2:c4:3e:ff:27:d3:5a:15:6f:9e:1d:f7:44:
         ba:51:2d:9f:44:8f:35:df:5d:72:82:d1:7b:b8:11:7a:58:71:
         48:7e:d5:90:a4:46:eb:83:43:08:a9:c8:86:35:6e:cd:9d:30:
         60:fa:d2:5b:b0:3b:17:ba:61:63:fa:36:91:06:97:f0:e2:7b:
         b6:4c:dd:1d:ae:58:58:5b:46:25:7d:dc:db:ac:08:f8:97:72:
         c8:82:c0:92:5c:ee:26:f2:21:86:5e:81:d4:31:d7:8d:5d:de:
         0e:75:08:91:43:86:0a:58:85:80:c7:86:2c:45:49:86:14:95:
         1d:2c:52:94:a3:06:3a:fc:81:9d:67:69:0f:3c:93:c2:d7:3d:
         c4:6c:b5:1f:c1:45:d7:f8:d7:14:f0:c0:55:0c:c6:1f:c1:13:
         6e:4d:cb:25:a7:52:d1:fb:a0:da:11:10:00:73:f2:52:8a:b0:
         81:45:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:28 2026 by rpki-client