Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          ghYFPmD8VYkY6eHI3F8LtTkd3oe2cvjVyM3fHXDl2Dw=
Subject key identifier:   0D:B9:C2:DE:08:90:6A:B1:A1:0D:CD:C4:C7:B3:DE:86:AC:94:A4:FC
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       019FA8D08CD0D9F0F855BC88EBC21EF06E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 13:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:07 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: PjPHeOqd9baYds5GUZr+pkvgVBvJ0AP9abVqNoFWAYI=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:8c:d0:d9:f0:f8:55:bc:88:eb:c2:1e:f0:6e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Jul 28 13:01:07 2026 GMT
            Not After : Jul 29 13:01:07 2026 GMT
        Subject: CN=0db9c2de08906ab1a10dcdc4c7b3de86ac94a4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:d9:e1:de:0a:ef:c0:db:c0:85:d7:19:d5:
                    d0:de:ca:08:30:f8:56:10:7e:5e:64:8b:27:02:aa:
                    a8:c0:76:eb:f1:e0:ab:83:86:3a:d0:4e:63:6e:cb:
                    bc:33:3b:2e:b3:3d:01:b9:32:f4:7e:0f:4d:c3:f2:
                    90:b2:a7:cc:fd:73:db:72:ae:ac:0e:98:a9:4b:75:
                    15:01:98:56:b5:6e:65:4f:49:ca:b5:a3:9f:d3:c4:
                    9e:94:ed:97:03:d1:64:0e:4c:ab:16:02:79:36:57:
                    e4:f3:f1:9f:ac:ed:af:1c:14:e4:d1:3f:a7:fd:ed:
                    34:7e:19:4f:40:0e:70:e8:b2:f4:b5:56:b0:e7:fb:
                    94:2a:d5:29:81:27:39:81:fe:e3:75:7a:04:f4:8c:
                    63:3b:e7:23:c2:d3:63:e0:d3:51:e4:46:b8:5a:f2:
                    92:e1:78:e3:f9:17:69:05:4f:cf:40:9d:67:24:99:
                    fd:51:7d:7f:04:cd:b0:94:2f:11:77:5d:85:62:df:
                    5b:a3:12:a3:f3:d7:b5:70:31:24:27:70:3a:92:5f:
                    00:79:d9:15:5a:cc:ee:52:fb:06:bd:19:ac:17:d5:
                    8e:5f:fa:52:c8:49:5d:e0:58:4a:c6:3d:4c:3d:67:
                    85:fb:8f:c0:4c:60:54:dc:81:95:64:f0:0b:99:e9:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:C2:DE:08:90:6A:B1:A1:0D:CD:C4:C7:B3:DE:86:AC:94:A4:FC
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:d9:dc:35:4e:19:81:19:7f:8b:96:3a:20:30:e2:aa:22:
         bd:4b:99:31:b8:07:60:9a:87:fe:01:98:e8:b8:28:07:f5:dd:
         a8:c1:d3:0c:3c:29:0d:1e:f8:30:3a:1d:37:38:65:2f:2d:22:
         e9:28:5c:32:81:f8:72:11:43:82:40:4a:20:13:5a:52:0b:01:
         93:42:50:e0:f2:c4:10:be:58:39:35:c6:8c:be:e8:62:00:ed:
         00:63:73:13:56:67:2b:26:58:90:f8:57:66:6a:d7:eb:54:7a:
         fb:fc:09:bd:2f:87:7d:71:ef:f8:fb:a2:ca:52:48:ea:4a:ae:
         d0:ac:87:4b:4e:08:fb:8a:bc:a8:80:90:70:34:f4:dd:19:78:
         81:9f:f9:b8:b7:f1:78:f3:20:a4:f8:bc:2b:0f:65:7c:63:72:
         aa:3f:70:14:76:58:33:3c:bc:83:5e:6c:b4:05:65:02:82:de:
         e4:5e:a9:38:b6:01:76:1d:00:14:bd:fc:10:24:e5:ba:7c:d0:
         51:88:1d:1f:59:96:f3:d5:d4:43:ac:23:22:b2:b5:74:fa:41:
         3d:56:4c:e0:94:36:67:f5:ec:8d:f5:b3:33:d4:a6:4a:47:fa:
         0a:8b:23:e3:15:e7:ba:ac:de:b5:33:f1:51:9c:e7:98:3f:15:
         4a:5b:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:47 2026 by rpki-client