Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          oAWnqNF8b8RvPzSztGP4KUgAtE/G6//HmYoPYlhsvmI=
Subject key identifier:   A1:FB:7F:C5:6E:19:86:2D:10:58:8A:AB:6E:40:4E:41:B0:A4:7C:52
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       019E1E350642107CE76E135E01C63C68AD78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1917
Signing time:             Tue 12 May 2026 22:00:51 +0000
Manifest this update:     Tue 12 May 2026 22:00:51 +0000
Manifest next update:     Wed 13 May 2026 22:00:51 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: 08FjGCHHZ/KCl/hQQE0oy0wV9rzrmypZTPSVBgpYfjk=)
                          2: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (hash: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=)
                          3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
                          4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
                          5: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
                          6: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
                          7: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
                          8: u5cJRJ9wBpMrZ8hhLyY9W8QCvMY.roa (hash: iB97I/PNWHuFo231JJX1gPfe7U6KqJLM6Q8cz9KMcfM=)
                          9: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:06:42:10:7c:e7:6e:13:5e:01:c6:3c:68:ad:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: May 12 22:00:51 2026 GMT
            Not After : May 13 22:00:51 2026 GMT
        Subject: CN=a1fb7fc56e19862d10588aab6e404e41b0a47c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:40:e7:01:65:5c:de:08:b8:a5:28:dd:06:
                    02:0a:27:78:12:2d:cb:87:a9:71:c1:e0:a9:53:f6:
                    7e:dd:2f:70:65:3a:f2:0f:35:1c:df:2c:f5:85:1a:
                    d0:7d:50:de:24:40:75:c1:2e:a8:5f:d7:d2:d3:4c:
                    16:2e:18:a1:7f:5c:50:55:33:06:32:b5:42:30:89:
                    f6:dd:b0:ec:37:a3:bb:72:e7:f1:b3:09:7d:fd:92:
                    0a:3d:4b:59:8c:b1:77:a8:6a:3b:4d:51:1f:b7:a1:
                    7c:e6:a8:93:e6:bd:e1:81:ca:db:2a:49:d6:60:74:
                    c8:f7:8b:1a:5b:fb:16:30:8c:99:1a:0a:3d:9d:4c:
                    94:2d:8f:92:e3:89:0c:12:3d:b8:3f:ee:67:74:cd:
                    fb:a1:2e:0a:7d:ba:7a:1f:a6:77:da:b7:12:36:b4:
                    99:c9:78:8e:63:44:2a:5c:d5:5e:17:ff:c9:d2:bb:
                    14:71:41:50:07:6a:9b:6c:6b:65:b5:bb:d1:29:0d:
                    40:ee:2d:de:c1:1b:59:15:05:e2:e4:99:91:a0:70:
                    6a:f0:92:e0:c0:95:19:d1:75:6a:c2:0b:1e:bc:94:
                    6e:cd:a5:ca:61:83:b4:cd:b3:d3:85:43:a8:78:2d:
                    a0:ec:4b:d7:fc:c6:c3:a3:b6:d9:0a:37:4e:d6:54:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FB:7F:C5:6E:19:86:2D:10:58:8A:AB:6E:40:4E:41:B0:A4:7C:52
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:ba:56:73:67:28:79:2a:e5:e7:83:42:e7:a3:ca:0b:1a:
         80:0e:15:54:e6:5e:ed:26:61:6f:b5:de:7b:96:97:d9:40:a0:
         80:94:9d:06:6d:ec:e6:53:c2:13:0d:bf:f9:67:55:aa:99:d2:
         5c:ce:1e:01:ce:c3:2d:35:99:83:57:7a:7e:10:ad:90:18:8d:
         3e:74:01:5c:de:1b:a8:6f:89:b6:d9:cb:bd:92:b3:5c:b1:ff:
         ca:c1:5b:a6:2e:38:dd:29:37:7c:51:6f:bf:f5:52:f9:7a:9f:
         5f:2e:96:4e:a5:50:73:01:b1:ee:07:f7:73:71:42:20:36:95:
         81:1e:36:4e:6b:40:72:d0:e5:5b:ba:db:8b:74:8c:0c:6f:88:
         c1:3f:58:a9:a2:dd:29:b6:74:1f:4f:81:77:1b:fc:96:23:ce:
         ce:91:43:f8:c2:ba:a8:fe:62:18:6b:d5:d7:9a:44:59:dc:2c:
         77:a2:cc:a6:16:8c:bf:ec:0e:c2:07:ba:b8:ca:55:bc:d0:49:
         c6:1f:6d:f1:39:74:a4:ed:40:27:fb:c1:a2:54:a1:8c:15:39:
         d5:06:30:5b:c1:d0:b3:54:65:9e:5c:0d:8f:80:78:3d:77:6a:
         9c:e7:71:ae:49:d5:e2:66:2c:80:76:ea:0e:3a:d2:d1:32:da:
         c6:f6:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:26 2026 by rpki-client