Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File:                     b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier:          EZKXpsw4cFU2R2XDwjC/Y68L4i785F1qbmhs1B28bp0=
Subject key identifier:   15:A0:23:4F:C5:0F:6A:63:25:AB:CF:94:AC:19:07:B3:B2:8E:95:B5
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer:       /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial:       019D2695DA76A98B3C7CD4F4F78EAB7F5ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number:          0B12
Signing time:             Wed 25 Mar 2026 20:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:47 +0000
Files and hashes:         1: CUm_1v2R955WSHielB42rYU-hDE.roa (hash: 2kYqJQ+RQ4a//Mbqbn8twoPGw/YZ8dkOXd6k1MRYSqo=)
                          2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: HFHw7W1g3chOpNaX8ycQfM+/zMv9tEbfJPoyptzOurQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:da:76:a9:8b:3c:7c:d4:f4:f7:8e:ab:7f:5e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
        Validity
            Not Before: Mar 25 20:00:47 2026 GMT
            Not After : Mar 26 20:00:47 2026 GMT
        Subject: CN=15a0234fc50f6a6325abcf94ac1907b3b28e95b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:b2:60:d9:8f:7d:c5:b6:7e:e0:23:8f:75:
                    b1:4c:fb:49:59:23:1c:7e:cb:23:75:14:40:30:cf:
                    25:cd:da:8e:20:8d:ec:80:1e:16:53:89:13:c5:75:
                    d6:20:92:6c:9f:26:c0:64:c9:af:c2:4a:1d:ae:25:
                    2f:20:99:38:55:e1:09:48:86:81:64:7c:58:6c:33:
                    a1:98:df:60:0d:6d:75:9f:e6:b1:bb:52:96:c3:ca:
                    98:8e:94:02:82:6c:23:59:64:c2:79:72:af:af:95:
                    35:2b:3e:2f:a9:0a:ba:09:8c:c7:db:c7:44:bf:8d:
                    b3:d3:25:54:0b:57:ba:9c:3c:59:7b:23:28:cf:dc:
                    5b:62:26:ad:3d:0a:c5:57:d2:6a:78:37:c0:5d:13:
                    35:48:2c:44:aa:9d:b5:9c:aa:e1:43:18:2f:56:2e:
                    2b:cc:a2:b7:92:d9:04:3a:3b:14:f2:9f:1d:74:5a:
                    39:a8:64:39:c3:dc:21:34:48:dc:4e:23:0e:20:69:
                    f6:27:23:f4:4c:5d:b4:77:e9:28:32:a5:a7:2e:72:
                    02:64:54:a5:a5:6f:53:49:da:ef:2c:1a:66:5b:48:
                    11:43:da:79:a5:d4:f8:df:6c:6d:56:a3:0e:70:70:
                    eb:cb:e1:77:bf:73:37:6b:3c:fa:42:7b:e9:c4:2d:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A0:23:4F:C5:0F:6A:63:25:AB:CF:94:AC:19:07:B3:B2:8E:95:B5
            X509v3 Authority Key Identifier:
                keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:3f:41:12:de:d7:fa:ca:9d:12:d8:93:6e:3d:25:de:11:
         04:59:e9:36:f3:92:66:03:a2:2f:96:1e:f2:86:7a:03:4d:a3:
         7b:44:48:5f:92:cf:cd:7e:bd:1f:55:6b:df:dc:54:f3:c6:37:
         c9:ad:b1:aa:a6:48:7d:78:88:17:20:88:d6:75:3f:78:c2:28:
         40:7b:56:88:54:3d:de:8c:e1:96:59:7d:a0:7b:07:72:8b:b5:
         38:81:46:15:b9:27:64:90:c1:78:a0:23:15:7f:c2:64:36:6f:
         66:62:8e:43:f2:e7:01:82:64:be:47:6a:3e:a9:1e:3a:38:83:
         d3:6b:c5:6e:b5:0e:de:5d:ee:05:40:9a:de:4e:60:4a:c5:08:
         32:cd:07:e7:c6:a9:e2:0b:a7:a6:9f:f9:3c:f1:e7:d8:9a:8e:
         90:31:6e:75:e9:12:f9:77:37:35:e9:d8:af:5c:15:c9:20:bd:
         ed:b6:c7:2d:52:11:9e:c9:c2:d0:46:90:13:43:a9:81:e4:aa:
         a3:dd:bb:32:85:85:67:fb:76:b0:8c:ab:68:24:2e:84:bc:bd:
         92:f8:e8:64:6f:04:ce:c4:6e:ec:fb:d5:f2:7f:dc:dc:0b:a9:
         a4:be:05:d3:5e:77:31:e8:e5:d0:f1:9f:f3:80:de:15:1c:40:
         6d:93:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:47 2026 by rpki-client