Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          +VRRbRCh7/i0hLgFFRwkuDgzkddS0KRU+64N4M/wSMQ=
Subject key identifier:   C5:01:DC:BD:38:D1:04:67:8B:54:27:A2:FA:48:AF:AC:7C:90:7D:E5
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       019E1D22FA6676E3E077F9711294F9DA24C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          0F34
Signing time:             Tue 12 May 2026 17:01:31 +0000
Manifest this update:     Tue 12 May 2026 17:01:31 +0000
Manifest next update:     Wed 13 May 2026 17:01:31 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: Oyn12x3sbPvUrM/zd9u48GuPlsXXvnm2MRlPwOWvlI8=)
                          2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
                          3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
                          4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=)
                          5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
                          6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
                          7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
                          8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
                          9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
                          10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:fa:66:76:e3:e0:77:f9:71:12:94:f9:da:24:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: May 12 17:01:31 2026 GMT
            Not After : May 13 17:01:31 2026 GMT
        Subject: CN=c501dcbd38d104678b5427a2fa48afac7c907de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:93:d4:dc:9e:52:cf:e3:f1:80:0a:fa:e2:
                    75:8f:fa:d3:52:0c:aa:c2:65:ba:8c:a4:43:67:a1:
                    e5:ae:59:62:7d:ff:64:01:5e:ba:81:d3:ba:19:b8:
                    5f:de:b8:1d:6d:88:4e:77:cf:06:05:16:01:c4:57:
                    fe:6f:05:77:61:6a:38:36:2e:52:3c:de:30:ff:03:
                    d5:85:3b:a1:d4:85:81:01:b3:57:64:05:79:68:2b:
                    9a:cb:af:fa:31:42:88:05:47:25:de:10:c0:59:b3:
                    a1:3d:8d:fe:be:cc:40:ec:45:4b:f4:04:7f:73:01:
                    d0:6c:d9:92:b7:18:74:08:e4:a0:81:f8:9e:0f:bf:
                    06:c3:5c:19:d7:8f:8e:8c:18:5f:6b:29:09:50:fe:
                    c2:f2:ab:e1:80:6c:82:7a:7b:fb:c8:4f:ac:a0:68:
                    21:96:45:53:a7:10:d6:e4:c4:93:05:37:61:c9:03:
                    58:84:a2:22:69:cf:59:8c:0a:a5:57:51:87:98:19:
                    1f:f7:9f:f3:21:08:f0:84:7a:f5:e3:a2:0b:a1:92:
                    f2:80:a7:57:b2:5b:f5:e6:b6:32:ec:a2:b3:54:af:
                    cb:9b:b4:44:0a:77:de:8f:de:a8:d5:a4:5d:31:9a:
                    70:8b:1a:63:c8:7c:14:96:01:b8:2a:b6:e5:55:9c:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:DC:BD:38:D1:04:67:8B:54:27:A2:FA:48:AF:AC:7C:90:7D:E5
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:88:1e:16:23:4a:99:5e:68:02:90:e5:59:f9:49:7b:b0:
         57:a4:8c:18:38:67:d6:22:93:96:a5:38:5e:16:83:c6:05:d8:
         ae:ba:67:79:7f:fb:38:27:eb:ca:a2:18:53:5f:ce:78:27:d2:
         43:52:72:4f:d5:45:17:79:2f:37:73:2a:d7:88:ed:28:37:12:
         d8:98:f8:e8:3e:57:bb:49:20:b3:dc:79:93:b4:bc:dc:a4:a4:
         10:6a:d0:a6:17:e0:29:3b:2f:dc:4d:36:bf:b1:eb:af:7f:6a:
         6d:d3:34:74:a0:37:b0:f3:c7:88:98:4b:d3:fc:94:81:ce:a2:
         d1:13:4d:48:5f:52:91:1e:61:99:ef:bc:e5:7e:dc:01:4c:3c:
         61:e5:b3:ac:10:3b:b4:b3:4d:7d:78:4f:04:4c:58:f7:93:48:
         33:c5:07:af:55:1f:2a:66:49:f0:dd:be:8b:de:f9:0f:b8:d8:
         7b:b1:e9:3e:d5:8e:2c:10:f8:47:be:6d:cf:15:ef:40:4f:3d:
         81:63:76:3b:94:27:73:91:67:70:86:1f:84:a1:d5:63:0c:92:
         8b:4e:e2:1a:56:c7:ae:cf:4b:07:43:88:01:ab:94:16:f5:16:
         49:22:de:af:dd:52:71:34:7d:3b:03:4b:e4:6a:3f:71:a4:50:
         db:2e:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:42 2026 by rpki-client