Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File:                     3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier:          uCG+tciicuy68d7PZMY/XutBgBpzfxGuIFUULFTERT4=
Subject key identifier:   A4:AB:45:EE:C2:73:3A:EA:96:CC:7D:51:7D:1D:A4:AC:88:BF:DA:DD
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer:       /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial:       019FA975A56FA0BE49B6942B602EC4C6F790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number:          0E62
Signing time:             Tue 28 Jul 2026 16:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:27 +0000
Files and hashes:         1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: xqPZO4D1DUw2IjmG72QmABI+8J4Dw3RbFtt0YalpLU4=)
                          2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:a5:6f:a0:be:49:b6:94:2b:60:2e:c4:c6:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
        Validity
            Not Before: Jul 28 16:01:27 2026 GMT
            Not After : Jul 29 16:01:27 2026 GMT
        Subject: CN=a4ab45eec2733aea96cc7d517d1da4ac88bfdadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:31:cb:ea:60:66:ea:11:4f:6e:99:ed:4b:
                    c2:a5:c3:91:b4:7e:d3:b1:71:37:88:02:5a:a6:54:
                    bd:a2:4a:58:11:76:fc:24:f4:03:a1:22:cc:8d:c2:
                    28:40:47:8f:72:dc:f6:4f:63:b8:f8:67:f2:54:89:
                    f6:c5:bf:0b:09:0c:43:e2:8d:98:04:e1:96:67:0e:
                    b7:0b:bf:50:41:84:f2:40:c8:77:5d:e5:02:c3:0f:
                    35:1b:78:1a:e9:79:dc:7d:cc:b5:db:51:0d:cb:a1:
                    47:e2:40:ad:78:55:21:13:c8:ab:11:dc:de:20:fb:
                    09:93:c4:19:d4:4c:fd:a7:bd:be:de:47:28:bd:65:
                    db:4d:a7:29:25:79:8d:32:52:b8:96:9f:40:94:53:
                    25:a4:b6:3b:f3:62:3d:c2:60:7c:72:7b:6d:94:8b:
                    dc:eb:c2:07:0b:17:95:07:88:af:65:77:44:16:c9:
                    af:5d:25:13:8f:e9:af:14:84:cd:45:8a:eb:1e:8f:
                    e2:34:18:f1:78:45:fe:c4:d5:cc:98:f1:37:01:30:
                    84:db:fd:68:fd:c7:38:23:f0:d8:5b:e4:9d:d9:38:
                    3b:ac:f9:32:5d:6e:11:b6:b6:22:27:fc:32:06:3a:
                    1e:86:5e:f3:a0:2f:b4:eb:95:cf:33:d9:f9:37:3a:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AB:45:EE:C2:73:3A:EA:96:CC:7D:51:7D:1D:A4:AC:88:BF:DA:DD
            X509v3 Authority Key Identifier:
                keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:da:03:b6:23:0c:5c:4a:53:2c:70:0f:bc:fd:80:7c:75:
         22:3f:10:50:69:da:42:94:5e:11:a9:a2:a8:61:84:74:bc:30:
         18:ae:e6:27:69:66:98:a7:a5:9a:ea:83:c1:ac:3b:3f:67:19:
         a3:e4:3b:ef:6a:d5:a7:b6:ed:26:d8:06:42:2b:ab:0a:c6:15:
         3b:a6:6d:a5:b8:0c:f8:f5:04:b0:72:18:5f:5a:e5:c9:81:a1:
         64:e2:b2:bb:da:07:8c:cf:d3:45:99:32:78:20:8e:71:ef:b4:
         a4:f1:74:8b:ac:fe:93:e0:c0:45:8e:7e:b9:b4:f4:11:0d:08:
         9a:2d:d5:ea:ef:06:9f:fc:5b:f4:76:96:f7:19:8e:37:5e:c8:
         e5:de:28:fb:4e:af:d0:2e:4e:b3:9e:1e:fc:6d:51:cd:89:32:
         0e:f4:81:e0:86:83:ce:f6:8c:57:26:48:aa:31:35:17:1b:98:
         ab:f4:43:b0:1d:d8:62:28:73:66:c9:a9:ee:3c:55:61:32:95:
         00:29:0a:cc:7e:9a:b9:bc:89:88:1b:54:7b:58:ee:79:e7:be:
         31:33:5d:ba:a7:e1:7c:90:89:eb:a1:56:a6:96:0e:e6:d6:07:
         fa:c6:21:b4:81:21:c7:8f:27:fc:04:9e:1d:42:3d:5b:ce:14:
         2b:c6:93:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:11 2026 by rpki-client