Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File:                     3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier:          n8GhugXw9iRO6LUZJws2cH1Kq2Hm5WnayHOJmCEunic=
Subject key identifier:   70:8E:69:80:BF:30:57:B4:6B:46:65:BA:CB:42:30:B1:88:20:6E:E0
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer:       /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial:       019E1F47F648D406C2FCC078F420BF2AEB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 03:01:10 +0000
Manifest this update:     Wed 13 May 2026 03:01:10 +0000
Manifest next update:     Thu 14 May 2026 03:01:10 +0000
Files and hashes:         1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: gwa+LB1t0ESktvEBYXPjsDPOsSsjFF7zHjCs30gLu6s=)
                          2: WGji20uEwm-qc16TI-95pZHam9M.roa (hash: bsiH0UDqVUjwGYGg21cqoyVxVRYxf5QKf4uTXeiNmjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:f6:48:d4:06:c2:fc:c0:78:f4:20:bf:2a:eb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
        Validity
            Not Before: May 13 03:01:10 2026 GMT
            Not After : May 14 03:01:10 2026 GMT
        Subject: CN=708e6980bf3057b46b4665bacb4230b188206ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:8a:56:e4:f6:d3:9b:5f:f4:66:3d:35:3e:
                    cd:7d:b4:81:95:5e:51:4e:a0:26:2a:79:3f:dc:5f:
                    51:c3:f3:7b:1a:9f:8d:29:67:78:0d:5d:74:67:2a:
                    54:bc:e1:0d:26:68:d8:48:7f:21:72:af:59:64:97:
                    e2:dc:de:6e:5f:eb:60:06:d0:71:69:3e:67:77:9e:
                    cc:9f:47:ec:b5:a3:fc:72:11:06:78:de:98:54:b6:
                    29:67:e0:75:7a:d7:d8:88:39:c8:e3:f5:5c:d5:db:
                    c0:fb:5d:09:cf:8e:e2:e4:f7:19:94:0b:07:5e:70:
                    e2:f0:3f:84:56:1c:ff:9d:57:51:88:23:9b:47:e6:
                    cb:a0:ca:ad:fd:93:ee:9d:d0:83:cd:47:ee:8f:dd:
                    e9:a9:9d:ed:34:c2:bb:1d:76:34:77:5f:b2:7a:7e:
                    ad:28:b2:f8:b6:16:42:28:c9:79:4b:a1:b9:d5:a9:
                    f9:b9:35:3e:1c:6b:0a:6c:47:a7:fb:b7:e0:69:26:
                    96:c4:f3:18:fa:2b:b6:96:d5:93:01:d8:2d:58:ad:
                    9a:ed:3c:3d:23:93:3b:de:b0:ea:40:36:d6:a9:09:
                    0c:5c:6f:90:ad:d2:98:08:0e:d8:66:92:f4:81:85:
                    5a:75:1f:72:4b:7f:46:c6:23:63:61:d8:c1:21:53:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8E:69:80:BF:30:57:B4:6B:46:65:BA:CB:42:30:B1:88:20:6E:E0
            X509v3 Authority Key Identifier:
                keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8a:a4:2e:28:67:b7:cf:ba:5c:45:2b:19:7e:d1:02:36:1d:
         2b:50:4a:13:74:df:6a:4c:9c:1d:86:7a:22:e8:a9:5b:11:f9:
         ae:f1:34:87:08:f7:68:03:4c:f8:f7:22:1c:e0:1c:0d:36:65:
         40:4d:be:23:02:6b:43:97:19:72:c8:dc:f4:26:b7:08:fc:9e:
         4a:da:bd:24:57:94:df:e6:16:84:cc:fb:ef:4e:79:f3:04:ba:
         37:64:29:36:73:b2:26:81:3f:b6:cd:08:24:4f:d7:8d:f1:e6:
         74:05:93:eb:47:a8:b7:0e:af:3e:ea:e7:0f:92:73:58:00:26:
         7d:fa:50:36:96:de:63:19:60:47:bf:71:ca:a0:cf:b6:de:51:
         8c:40:bc:bf:e6:cb:75:1f:85:6f:b1:69:d5:6e:bf:c8:ef:d5:
         80:95:7f:57:d1:eb:ae:fe:d0:a5:82:d1:5d:36:0e:88:ce:43:
         92:ec:75:71:d0:67:be:6f:9a:d6:2c:c1:49:9f:ca:a8:d4:88:
         28:30:62:97:a0:92:c7:05:d2:31:5c:ec:24:04:3e:30:c3:d3:
         8a:be:ef:b0:7d:2e:a4:73:a2:73:91:4e:2d:34:f6:b7:80:b5:
         bc:1d:78:ff:62:59:45:7c:d6:79:3c:95:39:b5:ba:b8:07:f5:
         34:e1:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:11:41 2026 by rpki-client