Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File:                     3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier:          vepXrd6Lsu6pnweClu6ntIVlB1T0KwYE9nlaQGV5/Ug=
Subject key identifier:   2E:33:CA:6E:70:F1:AD:DB:C6:34:95:7E:9B:5F:C2:C5:AF:6F:13:AF
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer:       /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial:       019E1DFE6711E1F4F01649545BB0B7732B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number:          0F61
Signing time:             Tue 12 May 2026 21:01:12 +0000
Manifest this update:     Tue 12 May 2026 21:01:12 +0000
Manifest next update:     Wed 13 May 2026 21:01:12 +0000
Files and hashes:         1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: 3vLipu/BStcGF0IbGlXwFHchqWMAx6BcacM87p422qg=)
                          2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:67:11:e1:f4:f0:16:49:54:5b:b0:b7:73:2b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
        Validity
            Not Before: May 12 21:01:12 2026 GMT
            Not After : May 13 21:01:12 2026 GMT
        Subject: CN=2e33ca6e70f1addbc634957e9b5fc2c5af6f13af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:58:05:b5:08:a7:c2:d0:53:ee:eb:25:b1:
                    a0:ca:4a:ea:0e:07:28:3a:43:b1:63:24:43:88:d5:
                    42:76:47:ef:4c:26:f7:bd:10:2e:81:bd:5f:24:60:
                    62:7f:8d:2e:a4:12:ef:86:e5:85:25:f2:a9:92:41:
                    14:21:d6:2f:07:bc:94:2e:fa:66:0d:2e:50:4a:31:
                    3f:b4:d7:96:f3:dc:3e:70:7c:c4:5f:c2:9d:4d:e4:
                    70:41:ae:9b:17:6d:ef:3c:60:fe:a7:55:f3:3e:f1:
                    c7:73:cb:c6:ba:38:0a:8f:06:3b:63:4f:bf:72:75:
                    50:40:2f:c2:29:81:6d:35:2a:a6:ae:28:ce:86:bb:
                    91:cb:12:6e:48:65:6f:a4:11:1c:2d:27:66:97:28:
                    f6:56:d1:31:f7:8e:af:2d:c4:52:79:d8:2e:23:51:
                    b5:65:9c:f1:f0:b9:66:94:11:63:70:35:d5:23:4f:
                    9f:4f:58:91:40:fb:cf:cd:a0:de:ee:ae:62:cf:40:
                    f8:ef:7d:83:0f:8c:46:56:e0:83:a0:6b:b5:9f:a4:
                    01:fb:da:e3:f6:d1:31:01:3f:d9:80:1b:15:43:f3:
                    dc:15:01:80:6f:3a:e4:3a:3d:91:30:c2:cc:9b:41:
                    99:67:b2:77:91:32:87:1c:cf:13:f2:72:00:4c:85:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:CA:6E:70:F1:AD:DB:C6:34:95:7E:9B:5F:C2:C5:AF:6F:13:AF
            X509v3 Authority Key Identifier:
                keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:5e:fd:de:5b:c0:ee:67:72:8a:49:5d:7c:85:e1:11:69:
         72:23:16:d4:c8:4a:ec:8b:9f:72:ba:3c:ff:79:17:db:b5:b5:
         f0:b7:45:7a:f7:c8:b3:7b:2b:45:c7:c7:2f:e7:db:ea:1e:90:
         88:b7:ad:b3:81:4f:a3:d8:58:6b:e9:53:00:d5:d5:7b:b0:c7:
         7f:b7:07:7d:f6:24:4e:7b:f9:dc:89:a1:10:ab:11:6b:c2:f9:
         58:4a:e5:93:b2:e4:31:2e:10:a6:f3:79:ab:e1:be:df:33:60:
         04:b9:e9:e1:08:3f:00:13:f7:6f:9b:b3:4d:61:a5:14:39:2a:
         a8:f9:d0:4e:b0:d3:fd:f3:23:3a:09:41:5c:32:00:3d:bf:85:
         52:85:f4:dd:04:c2:f5:44:84:95:d3:2a:22:26:7c:60:50:7c:
         42:01:8d:94:8d:92:64:eb:6a:cd:9f:22:34:5e:b2:e6:6c:7c:
         1f:ea:56:39:1d:a4:9e:1f:7c:f6:2c:55:42:9a:3b:be:fc:e0:
         f2:4a:2a:ff:04:61:cd:0b:dc:4a:41:43:33:3a:d4:4a:30:94:
         6e:97:a3:b6:6f:83:3d:1d:a4:a2:fb:86:48:c2:3d:e6:fe:94:
         0d:2f:48:3a:c3:66:ab:91:61:58:8a:31:cf:4d:d3:b4:0e:ff:
         27:d0:94:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/mcR4fTwFklUW7C3cyteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWVlNjViYTM2OGFkNzRkOWEwM2ZmMjgyNDQwYzg1Nzdh
MjE1OTYwHhcNMjYwNTEyMjEwMTEyWhcNMjYwNTEzMjEwMTEyWjAzMTEwLwYDVQQD
EygyZTMzY2E2ZTcwZjFhZGRiYzYzNDk1N2U5YjVmYzJjNWFmNmYxM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh5YBbUIp8LQU+7rJbGgykrqDgco
OkOxYyRDiNVCdkfvTCb3vRAugb1fJGBif40upBLvhuWFJfKpkkEUIdYvB7yULvpm
DS5QSjE/tNeW89w+cHzEX8KdTeRwQa6bF23vPGD+p1XzPvHHc8vGujgKjwY7Y0+/
cnVQQC/CKYFtNSqmrijOhruRyxJuSGVvpBEcLSdmlyj2VtEx946vLcRSedguI1G1
ZZzx8LlmlBFjcDXVI0+fT1iRQPvPzaDe7q5iz0D4732DD4xGVuCDoGu1n6QB+9rj
9tExAT/ZgBsVQ/PcFQGAbzrkOj2RMMLMm0GZZ7J3kTKHHM8T8nIATIX0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4zym5w8a3bxjSVfptfwsWvbxOvMB8GA1UdIwQY
MBaAFN1e5lujaK102aA/8oJEDIV3ohWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQt
ZWJkNzNiMTllYWU0LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kYzY4ZGQtMWRjOC00ODg4LWEzZWQtZWJkNzNiMTllYWU0
LzEvM1Y3bVc2Tm9yWFRab0RfeWdrUU1oWGVpRlpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPVe/d5b
wO5ncopJXXyF4RFpciMW1MhK7Iufcro8/3kX27W18LdFevfIs3srRcfHL+fb6h6Q
iLets4FPo9hYa+lTANXVe7DHf7cHffYkTnv53ImhEKsRa8L5WErlk7LkMS4QpvN5
q+G+3zNgBLnp4Qg/ABP3b5uzTWGlFDkqqPnQTrDT/fMjOglBXDIAPb+FUoX03QTC
9USEldMqIiZ8YFB8QgGNlI2SZOtqzZ8iNF6y5mx8H+pWOR2knh989ixVQpo7vvzg
8koq/wRhzQvcSkFDMzrUSjCUbpejtm+DPR2kovuGSMI95v6UDS9IOsNmq5FhWIox
z03TtA7/J9CUjw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:33 2026 by rpki-client