Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File:                     3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier:          r35EtZ5VKs0EoF8OUJHs/vSTztLrBQKNWp+XMQ8xDxA=
Subject key identifier:   69:FF:4A:54:78:07:B9:07:74:7A:19:36:02:E5:88:7C:62:FE:FE:3B
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       019D26CCA83D2D63EE4B19FC40D9F2473FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 21:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:39 +0000
Files and hashes:         1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: JJJQsL1VVDuLWfKEJu3J21B8ouQec3kkVjdzXY1j/D0=)
                          2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:a8:3d:2d:63:ee:4b:19:fc:40:d9:f2:47:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: Mar 25 21:00:39 2026 GMT
            Not After : Mar 26 21:00:39 2026 GMT
        Subject: CN=69ff4a547807b907747a193602e5887c62fefe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:15:84:c7:a6:3a:40:43:81:95:ef:f6:b9:
                    65:5f:62:37:e4:8b:5d:26:16:87:39:d1:6a:3d:dd:
                    10:3e:94:00:50:0a:f8:e5:f4:77:9b:2d:99:76:cb:
                    eb:cc:f1:d9:d5:92:6e:59:b3:5b:f2:d8:4c:5b:56:
                    3b:d2:d6:f5:70:ff:f8:57:e7:4c:2e:34:d6:e2:df:
                    f0:6f:a3:64:44:20:b9:36:27:4b:7f:d7:1e:c0:8f:
                    ec:b9:2b:7f:98:72:f9:04:04:11:d6:ad:6d:3b:42:
                    4f:ec:36:41:20:a0:89:e5:71:d2:e7:cc:e6:7c:6b:
                    c3:8e:7f:b1:9e:32:d1:7f:78:d2:42:18:58:1d:47:
                    21:03:f6:65:58:1c:2e:24:76:26:d0:07:42:5b:ff:
                    e4:c3:69:9a:e8:ed:c0:69:2d:6d:41:68:43:46:56:
                    12:ce:87:ee:4c:bd:39:da:17:e3:de:f9:ba:73:ab:
                    56:bf:87:a5:a2:50:70:65:f9:0b:60:d7:f6:21:a7:
                    f6:6f:d4:5a:9a:5c:4f:76:87:13:44:47:7c:64:89:
                    77:26:82:e9:ed:55:43:4f:7b:f2:44:27:99:d5:36:
                    ac:56:b9:e0:cf:5d:38:91:43:3d:d4:2b:3c:4b:3b:
                    e0:c4:68:e9:96:4c:79:d7:60:44:45:a1:ae:f3:b0:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:4A:54:78:07:B9:07:74:7A:19:36:02:E5:88:7C:62:FE:FE:3B
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:0a:39:b6:ca:0b:9d:05:3d:bc:2e:50:b3:02:3c:0f:16:
         6e:dd:fb:a5:f2:af:46:de:ee:64:88:d9:6a:05:fe:a0:50:ad:
         71:32:55:87:74:25:df:cf:76:47:4d:b0:0e:90:aa:dd:96:20:
         b7:f7:43:34:93:dc:7e:5c:5d:a3:2d:dc:f1:27:b2:33:9d:33:
         77:4e:cd:d0:c3:a9:c0:d3:7e:85:6e:a7:be:73:83:47:f3:a1:
         c8:34:51:86:c6:30:3c:64:0c:f3:46:c9:dc:5e:fb:7e:6e:fa:
         71:2a:56:70:41:9e:34:98:8f:15:f3:95:5b:74:88:43:5c:85:
         0b:2f:92:35:db:5d:1e:0b:41:33:4d:55:5b:9a:09:db:f0:b8:
         6d:9a:ab:7f:07:8a:27:78:8b:65:a3:b4:e9:b5:09:bb:95:35:
         22:af:56:8f:29:a3:ed:43:f6:70:7f:c5:e7:7d:d8:1d:a7:3d:
         3f:20:4f:8d:5a:99:8a:12:15:6c:6c:ee:87:f4:0a:bb:71:62:
         45:98:19:3a:fb:d3:08:53:05:51:0f:28:08:3e:46:54:75:ff:
         a2:24:6b:46:10:94:3a:bc:6a:56:ae:6c:59:17:32:e9:cc:4f:
         20:8b:57:38:e7:11:99:40:0c:db:8c:89:21:a3:40:8e:6b:91:
         19:b4:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:10 2026 by rpki-client