Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          0qWHBXjXZ4ht7jibSlxWTGx71g00ZxjXxXcvKfwrgvA=
Subject key identifier:   BF:0F:34:FA:60:BD:AA:6B:F8:15:68:A3:8E:FC:EB:74:EE:58:1C:E5
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       019E1D22326B33A7A46777E35564788A6A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0A41
Signing time:             Tue 12 May 2026 17:00:40 +0000
Manifest this update:     Tue 12 May 2026 17:00:40 +0000
Manifest next update:     Wed 13 May 2026 17:00:40 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: yM//3ku3mMaGP6o0dJZ+bjZqNsd4rjXFa2JqxXyk+nc=)
                          2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:32:6b:33:a7:a4:67:77:e3:55:64:78:8a:6a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: May 12 17:00:40 2026 GMT
            Not After : May 13 17:00:40 2026 GMT
        Subject: CN=bf0f34fa60bdaa6bf81568a38efceb74ee581ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:33:1c:f8:d0:dd:cc:cd:af:64:82:78:59:77:
                    fe:e3:e9:8e:46:8d:7c:5e:92:07:f4:9a:48:a0:24:
                    ec:3a:8d:26:06:c6:59:76:74:0b:c5:62:36:19:94:
                    36:ec:8b:3a:ea:ee:58:c7:79:ff:3d:f8:b9:c1:f5:
                    9c:67:60:bf:d7:c2:c4:be:27:49:3e:ca:23:8c:70:
                    a1:47:8a:51:4e:4b:78:54:8b:79:06:49:52:ce:99:
                    1f:44:10:30:3c:2b:ee:2e:7d:b2:af:fe:f1:ed:1f:
                    7f:1d:fa:f9:df:a9:db:bd:73:2a:e8:3b:ca:04:8d:
                    4e:84:6d:f4:e6:63:c8:34:18:bf:8d:19:b3:42:2d:
                    96:0d:c0:47:8e:da:ca:ae:6b:85:9d:fd:1e:1e:d7:
                    23:e1:69:2a:60:5e:9c:63:4f:a8:07:8d:4a:14:81:
                    d6:47:ed:82:30:bb:96:02:08:24:98:07:6b:13:ef:
                    05:a3:0b:22:1d:c5:45:89:d6:60:01:44:ed:e3:0e:
                    1c:21:c6:eb:26:dc:a8:ff:da:af:a1:29:f3:fa:97:
                    9f:b3:2f:d5:1b:ed:16:41:ba:8d:c6:26:f0:56:55:
                    b5:9e:51:4e:13:6e:57:cc:a6:e8:26:18:51:64:4c:
                    52:5f:c5:fa:8d:21:f1:9e:29:92:cd:63:82:9f:18:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0F:34:FA:60:BD:AA:6B:F8:15:68:A3:8E:FC:EB:74:EE:58:1C:E5
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:56:2e:5d:01:8c:59:38:6a:1f:a6:a1:f2:69:4f:80:d0:67:
         13:1a:8b:87:ce:54:6c:d6:f2:a8:13:73:c0:65:3e:3b:ec:23:
         ec:86:b5:10:f3:d5:d6:81:48:4d:b0:dc:11:b5:6d:06:c3:43:
         b7:dd:ae:1a:b0:00:ad:73:6a:6d:33:d3:dd:fb:cf:75:32:75:
         15:08:95:7d:a8:8e:b2:b2:58:d3:fa:6b:bb:55:1e:58:88:07:
         92:62:9e:ac:0f:aa:c7:6f:f2:b8:19:08:fa:80:84:a5:e3:89:
         97:36:c8:86:66:e8:03:dd:b0:7e:f0:ef:ae:53:1d:9c:18:c1:
         09:f1:90:bb:f9:72:36:9f:c6:38:8f:22:c9:10:38:f4:11:01:
         db:01:88:05:31:73:8b:fa:0a:50:67:1d:df:3a:03:51:b0:48:
         4d:4f:0f:87:dc:0c:db:5f:2f:e8:48:21:3a:6f:98:4c:e9:4f:
         ea:ba:5f:85:9a:ff:af:53:8e:f5:f3:6f:39:48:03:92:be:6c:
         e7:e6:27:b2:c5:56:e4:cb:6e:b6:a6:36:f7:0c:63:91:fc:4f:
         d2:1d:35:d9:e7:af:b5:1c:79:db:c5:53:18:f1:90:ec:d8:eb:
         46:53:1f:67:64:09:27:3a:56:83:a5:01:36:32:44:0a:a9:12:
         1d:a3:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:48 2026 by rpki-client