Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File:                     3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier:          FpIRtzOxxnzsg/jmJKLmXdI3y4qpzKqpjnNtmXdfJ3U=
Subject key identifier:   6D:12:80:2F:6B:AE:3A:08:30:AC:36:55:6B:23:E0:20:81:CB:BD:27
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer:       /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial:       019E1F48087B3EFB64DDE8C68F5452086B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number:          0A00
Signing time:             Wed 13 May 2026 03:01:14 +0000
Manifest this update:     Wed 13 May 2026 03:01:14 +0000
Manifest next update:     Thu 14 May 2026 03:01:14 +0000
Files and hashes:         1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: BHB0Up7Zxfp9qfAkdPr2u5NIywaX5oiiJfe11TeAN1U=)
                          2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:08:7b:3e:fb:64:dd:e8:c6:8f:54:52:08:6b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
        Validity
            Not Before: May 13 03:01:14 2026 GMT
            Not After : May 14 03:01:14 2026 GMT
        Subject: CN=6d12802f6bae3a0830ac36556b23e02081cbbd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:b9:5c:c6:d8:ff:a8:37:1d:6b:80:ee:6a:
                    84:8f:dd:b8:6e:12:a5:2d:ac:3c:3d:ee:66:47:4c:
                    72:80:4e:be:a7:64:3c:5d:50:ce:e3:f3:0f:1a:94:
                    df:22:9a:7c:ab:0f:9b:1c:39:44:54:26:6f:6e:f5:
                    9e:b0:7f:22:3f:eb:91:80:2e:af:a8:3f:a3:28:04:
                    f5:28:42:0b:61:78:da:d0:eb:ad:ad:a7:51:21:b0:
                    da:e4:a9:ba:86:4e:1c:c4:91:88:bc:d0:d8:9c:53:
                    0f:7b:10:69:33:04:73:32:5f:38:08:af:9d:db:58:
                    22:4f:79:91:a2:3b:10:39:f5:5f:e1:d9:e5:96:90:
                    63:47:04:86:73:55:4e:8a:8b:e3:e2:62:7e:b5:52:
                    69:8b:aa:19:29:01:e7:b8:7f:7a:fe:8d:d8:b0:85:
                    2c:46:50:72:a7:d0:15:0d:fd:78:a8:73:2e:8e:9b:
                    4b:dd:57:d2:8f:42:11:34:b2:4e:45:aa:4e:f1:21:
                    6c:e7:03:4b:3c:ed:48:21:28:a5:db:96:68:fa:15:
                    3a:24:c1:ac:0f:69:7b:c5:e3:83:f7:da:8f:74:10:
                    41:7d:32:da:70:12:e1:ca:84:88:f5:42:c7:12:4e:
                    4a:89:ec:39:bc:fe:74:91:3a:b0:40:a2:22:4c:a5:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:80:2F:6B:AE:3A:08:30:AC:36:55:6B:23:E0:20:81:CB:BD:27
            X509v3 Authority Key Identifier:
                keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:23:78:f5:14:1e:12:b3:4d:f2:79:00:8a:01:97:ce:f9:
         31:62:26:ec:62:aa:98:6b:a7:6a:ff:a6:a9:2d:3d:97:72:d2:
         bf:00:fe:7f:73:67:97:39:96:32:6c:ef:b0:1f:b4:84:62:0f:
         a2:33:3a:93:6b:70:11:90:a3:68:63:7a:d5:5b:4b:a3:4d:b8:
         fb:21:db:47:b5:7f:f6:0d:b2:9c:2f:31:33:b7:94:71:06:07:
         39:55:97:17:94:af:46:ed:19:b3:7e:11:6b:eb:05:5f:0a:1c:
         b5:22:92:98:0d:c3:a7:7c:db:3f:a7:b5:8f:a1:98:3f:41:87:
         c4:d1:ac:65:a1:98:3d:fd:79:29:0e:59:65:a7:11:96:b6:d9:
         40:5a:72:9b:91:ae:76:14:2e:dc:8c:58:73:25:a2:83:fd:77:
         b6:4e:c2:27:35:20:89:7c:08:e0:4e:1b:f3:d5:c0:47:1e:ca:
         f4:0f:26:33:c3:94:da:b8:1b:cd:8a:f2:16:df:7e:ea:cf:3c:
         a1:9f:a0:b2:8f:40:6a:62:3c:1d:12:01:c2:22:60:4d:a1:54:
         ee:96:16:66:74:2a:d6:30:5f:5c:1a:de:c2:c7:71:b3:db:67:
         92:2e:08:89:b6:f2:9e:9b:d2:dc:9a:e9:be:03:77:ca:26:4a:
         92:85:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:26 2026 by rpki-client