Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File:                     3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier:          gZimAukghwXWWwc9uvSm2L/8zxAwK82pB0GCGVn7fZU=
Subject key identifier:   AD:40:1B:79:6C:86:DF:E2:C0:81:3C:4C:DB:FE:74:1F:FA:10:98:BB
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer:       /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial:       019E1DC74133D616BEB472EDDF14C27FDFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 20:00:58 +0000
Manifest this update:     Tue 12 May 2026 20:00:58 +0000
Manifest next update:     Wed 13 May 2026 20:00:58 +0000
Files and hashes:         1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 2xe2F4bkiXdF1gtBk2tmFNbrPo5oLyvOLFwqGqh1Eeg=)
                          2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
                          3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:41:33:d6:16:be:b4:72:ed:df:14:c2:7f:df:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
        Validity
            Not Before: May 12 20:00:58 2026 GMT
            Not After : May 13 20:00:58 2026 GMT
        Subject: CN=ad401b796c86dfe2c0813c4cdbfe741ffa1098bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:95:92:a5:3b:c3:60:57:9a:15:3a:4c:2f:
                    7a:9e:c8:a8:cc:54:ec:bd:4a:bd:47:6c:c5:aa:08:
                    55:2c:82:4a:a5:74:e6:da:83:62:2f:f8:da:5c:25:
                    59:55:22:10:d3:ac:91:54:1e:a6:b2:4a:04:90:43:
                    4c:c8:5b:7b:af:36:02:1f:c7:1b:d7:6b:73:4a:4d:
                    77:71:78:be:78:78:60:57:f5:85:0b:e0:38:d0:0a:
                    a0:58:80:e7:4b:83:df:bb:a5:48:b8:b2:ce:ee:95:
                    ca:72:d2:11:38:24:f3:09:a7:28:22:33:77:5f:7f:
                    5a:18:b7:f8:f4:34:cd:6c:c8:15:7e:88:5e:d5:7d:
                    fb:48:25:ff:30:59:4a:a8:5a:b1:fd:81:f7:c9:bd:
                    6a:d4:8f:c4:7e:0c:ad:78:9e:f0:c9:44:ff:11:5f:
                    39:31:45:f8:75:a6:81:ed:95:a3:79:ad:e3:05:47:
                    17:48:4c:b6:d2:38:a6:48:92:74:dd:e2:be:54:c0:
                    f3:60:91:8b:9f:85:2b:06:86:53:d7:ea:31:d2:64:
                    64:53:7a:3b:41:f3:1d:81:90:88:81:d9:a0:59:35:
                    12:d7:8f:d6:4d:73:b5:6d:3f:d1:aa:7e:11:55:48:
                    b2:1a:d7:0c:3b:a4:83:b7:8e:6a:29:ca:de:4f:0a:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:40:1B:79:6C:86:DF:E2:C0:81:3C:4C:DB:FE:74:1F:FA:10:98:BB
            X509v3 Authority Key Identifier:
                keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:24:9e:bb:90:40:d5:1d:05:4e:af:bb:d3:ca:fe:98:79:
         d9:b4:d0:67:94:0d:28:9c:56:ed:ce:15:92:b6:d0:8c:52:20:
         a1:85:58:e8:98:ce:da:21:50:7f:5d:76:1b:6c:dd:ae:3c:0b:
         b9:5d:63:0d:07:27:d8:1b:18:14:35:37:f7:77:35:39:03:72:
         17:eb:db:3e:c2:f6:25:18:f4:8b:ac:43:e0:a4:7c:a2:57:80:
         01:21:cc:a6:45:79:db:a4:79:4d:8e:ee:0d:79:4e:8e:b5:72:
         79:5d:29:ed:c4:cf:15:d7:f1:44:83:33:23:74:c3:00:67:24:
         47:ab:a3:f0:d2:07:cc:77:f0:6c:3a:74:a6:b0:43:76:27:e2:
         f9:71:b4:b4:21:b3:2a:6b:d1:80:d8:49:66:fe:66:e4:c8:73:
         3e:8b:57:b6:47:38:46:f0:c9:ab:11:7c:be:8c:7b:d2:3a:6f:
         cc:ca:e8:8e:ff:5e:8f:88:f5:94:6a:67:38:36:bd:e3:dd:09:
         ed:4b:ce:1a:cf:6c:9d:55:c6:2c:5f:4d:1f:a5:05:a8:1a:6c:
         29:51:96:d2:3f:b6:9c:59:55:79:c2:e7:b0:63:2a:ff:33:4c:
         db:ff:70:c0:d3:be:27:bb:53:2d:58:bb:d2:f9:3d:2d:e3:12:
         1e:36:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:32 2026 by rpki-client