Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File:                     3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier:          F1cz688FdpaC0aCU8paSGj2Dex/GTr69BxaogJddpWw=
Subject key identifier:   85:03:CE:E3:26:F4:23:3F:3C:62:27:34:2B:21:22:2F:89:7E:2E:E2
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer:       /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial:       019D2816F1E8D3297927F9B14320D49ECF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number:          0F4B
Signing time:             Thu 26 Mar 2026 03:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:25 +0000
Files and hashes:         1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: 0v1LpyOXKTAgjXAOfKdHBpu0fFlOm49KQ/G1GFyjlUM=)
                          2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=)
                          3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=)
                          4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=)
                          5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=)
                          6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=)
                          7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=)
                          8: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:f1:e8:d3:29:79:27:f9:b1:43:20:d4:9e:cf:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
        Validity
            Not Before: Mar 26 03:01:25 2026 GMT
            Not After : Mar 27 03:01:25 2026 GMT
        Subject: CN=8503cee326f4233f3c6227342b21222f897e2ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:da:ab:c3:1c:de:d9:2f:28:fb:ab:35:a1:
                    dd:09:36:09:24:5a:a3:da:e2:e5:15:aa:21:ad:d5:
                    f5:5a:69:a2:68:19:7e:4b:f5:4b:20:d2:fe:26:d0:
                    c1:12:5e:44:77:8a:de:35:36:84:1f:e0:6c:e4:8e:
                    97:73:c2:1b:f0:ba:09:ee:b3:b1:9f:3a:2e:6c:75:
                    3f:b2:8a:23:30:22:64:81:37:0b:52:94:d7:46:d4:
                    eb:ee:c6:51:ea:0b:bf:0d:b8:cf:62:26:26:f1:80:
                    05:fa:88:36:2c:7e:9e:bf:5c:2f:dd:ac:2f:d9:6c:
                    e9:d4:9b:39:6c:2a:44:ef:76:b8:0f:76:13:e5:96:
                    8e:43:45:2f:d3:f6:02:e4:e2:c5:fd:03:97:b0:1c:
                    c0:e8:2f:7d:bc:19:ad:07:b1:c3:dc:ed:c9:db:86:
                    17:ab:b7:b2:bb:18:8d:94:d9:b2:0c:f2:84:3e:be:
                    3a:57:cf:89:a7:07:53:3b:49:1a:76:6b:ce:ff:3e:
                    e1:e8:64:b2:e7:6e:ad:e8:2e:7a:de:dd:25:6e:69:
                    ce:b6:86:b7:7d:14:75:5c:6d:0a:98:7c:71:f3:0a:
                    07:08:72:c3:45:f6:5e:63:ff:57:b0:40:be:dc:e8:
                    95:12:fc:71:86:af:cc:9d:1b:37:18:2c:9a:51:49:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:03:CE:E3:26:F4:23:3F:3C:62:27:34:2B:21:22:2F:89:7E:2E:E2
            X509v3 Authority Key Identifier:
                keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:6f:ac:59:2c:94:91:e2:dc:2d:96:0b:99:be:e6:64:9f:
         ff:80:e8:43:5e:ec:89:40:02:ba:ac:7b:42:ee:81:e6:8b:e2:
         83:78:9e:d3:97:4d:ee:36:01:06:19:a0:c3:b0:ed:4e:a6:0b:
         ef:52:62:15:d3:35:6e:8d:38:37:1c:08:6f:9e:7b:ea:3f:83:
         f3:28:51:75:c2:8f:09:4a:e4:47:90:5d:bd:e5:a8:3a:62:d6:
         49:b9:79:6b:46:90:07:8f:f9:d6:65:42:47:46:b8:b7:c2:a7:
         9d:b2:ca:3a:ad:8e:39:7b:7a:92:bf:d7:d7:b9:04:2c:8c:ec:
         8a:85:dd:53:a8:33:7d:1f:bf:e2:00:5d:3e:db:6a:68:c5:b0:
         32:7e:1b:71:f6:11:d2:e6:76:65:33:08:7b:45:2e:f6:6d:d3:
         af:a5:4e:aa:98:85:d7:7a:be:00:e9:fb:fc:fb:48:e6:92:da:
         21:71:a0:7c:49:0b:8b:15:f5:14:d7:84:53:ee:27:20:7b:e2:
         bf:91:2c:2c:28:dd:1b:18:77:f9:f8:c9:57:fb:21:a6:a1:6e:
         c0:cd:2c:80:63:80:67:af:76:3e:10:e0:0d:3b:2c:f1:d9:b1:
         84:5d:bc:14:44:1c:80:35:e5:4c:0f:dc:f2:aa:58:90:2e:34:
         4d:86:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:28 2026 by rpki-client