Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File:                     3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier:          2YBdcIQdyP5Iwlz8mObToR99Q3zsSzsdbKtYImBBTmc=
Subject key identifier:   78:D2:ED:5D:BB:30:11:6A:29:A2:4C:8B:FC:58:3A:E9:27:E1:1C:FD
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer:       /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial:       019E1CEBE1BB09C8DD3B49BF5B6052BF1DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number:          15AA
Signing time:             Tue 12 May 2026 16:01:21 +0000
Manifest this update:     Tue 12 May 2026 16:01:21 +0000
Manifest next update:     Wed 13 May 2026 16:01:21 +0000
Files and hashes:         1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: xG4F4ilpsPrmB/0aH8cchoj063yKUxF5UYMaBz7Gkkc=)
                          2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:e1:bb:09:c8:dd:3b:49:bf:5b:60:52:bf:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
        Validity
            Not Before: May 12 16:01:21 2026 GMT
            Not After : May 13 16:01:21 2026 GMT
        Subject: CN=78d2ed5dbb30116a29a24c8bfc583ae927e11cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:1f:7c:28:07:1c:8e:b5:45:fa:7e:74:cd:
                    30:3b:6d:cc:a5:2d:ee:1b:b2:86:e8:e3:ef:98:64:
                    9f:5b:64:2f:bf:4c:63:af:d0:af:97:6a:7a:ad:16:
                    94:a0:59:5a:c8:af:62:e2:d6:e1:7f:27:9b:80:7c:
                    36:29:5f:ab:7b:59:f3:b3:e7:ad:ad:0d:2a:ea:76:
                    5a:cf:8f:82:1a:d7:df:19:fc:0e:98:e2:bd:e3:81:
                    e1:d9:65:4e:82:4b:0b:d4:fa:e9:02:f0:3b:8b:f3:
                    68:d2:d4:e8:64:1e:45:51:a6:06:76:e3:c9:53:53:
                    6d:d2:29:a4:57:af:ca:ba:dc:96:28:75:d1:6f:e7:
                    c2:8b:ee:2b:c7:06:1b:ab:61:17:4e:f0:ba:f7:b8:
                    da:7b:ac:9d:93:cf:f9:d1:90:8f:4c:e0:cf:9b:3d:
                    88:14:42:84:d8:b6:21:33:e0:99:1e:82:2d:ba:6e:
                    87:0e:06:21:26:09:0e:57:ab:6e:0f:72:56:b8:8c:
                    c8:81:e9:7f:ef:19:89:0d:eb:cb:3d:57:e7:0a:90:
                    b7:ed:5a:b7:ad:25:07:ad:60:f5:c6:f4:96:c9:b6:
                    5e:97:bf:45:b0:a6:b2:2d:6b:dc:80:65:2b:9d:43:
                    be:12:52:48:5e:af:d9:26:43:21:b4:26:a5:ae:41:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:ED:5D:BB:30:11:6A:29:A2:4C:8B:FC:58:3A:E9:27:E1:1C:FD
            X509v3 Authority Key Identifier:
                keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:68:6e:4d:66:d2:1c:3f:28:a6:cb:4f:86:c1:f5:85:74:
         74:84:13:b5:64:12:06:8d:4a:b2:6c:19:71:b9:90:7b:43:66:
         ac:2a:99:3d:38:d6:e5:f2:91:03:d5:82:ce:39:24:e7:10:07:
         d9:63:a3:9b:97:9f:7e:de:40:33:0f:d4:3c:b2:2a:4b:87:3a:
         9f:a0:de:5b:80:c0:46:24:e7:6b:a3:b7:a3:8a:90:ad:6a:d3:
         75:72:9f:d6:41:10:3f:8b:4b:39:97:72:19:8d:35:ef:51:e8:
         3f:cd:ee:21:67:5f:c0:d0:13:64:9c:67:e8:2a:4b:37:1d:7f:
         a6:8c:d0:41:7a:9a:e2:77:b1:50:93:87:5e:37:8b:32:06:e4:
         f3:27:7a:c8:bd:9f:36:12:7b:1e:e6:95:f4:d4:cf:02:63:0d:
         86:79:f4:ed:5d:dc:cd:65:f8:eb:18:51:8f:eb:77:97:1c:59:
         0c:9e:e0:89:47:4d:26:7e:30:21:c5:2d:84:92:d6:f0:13:ee:
         ab:34:0e:49:43:ea:17:51:ce:ea:2a:b4:0c:23:70:f4:6d:ba:
         62:bf:b3:6e:eb:dc:70:b4:96:c4:9e:38:c8:e2:8c:b5:a4:47:
         da:ea:c0:5a:07:66:a1:61:e3:43:de:b7:d8:3a:06:e3:9c:cb:
         d8:a7:90:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6+G7CcjdO0m/W2BSvx3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjYwNTEyMTYwMTIxWhcNMjYwNTEzMTYwMTIxWjAzMTEwLwYDVQQD
Eyg3OGQyZWQ1ZGJiMzAxMTZhMjlhMjRjOGJmYzU4M2FlOTI3ZTExY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nkffCgHHI61Rfp+dM0wO23MpS3u
G7KG6OPvmGSfW2Qvv0xjr9Cvl2p6rRaUoFlayK9i4tbhfyebgHw2KV+re1nzs+et
rQ0q6nZaz4+CGtffGfwOmOK944Hh2WVOgksL1PrpAvA7i/No0tToZB5FUaYGduPJ
U1Nt0imkV6/KutyWKHXRb+fCi+4rxwYbq2EXTvC697jae6ydk8/50ZCPTODPmz2I
FEKE2LYhM+CZHoItum6HDgYhJgkOV6tuD3JWuIzIgel/7xmJDevLPVfnCpC37Vq3
rSUHrWD1xvSWybZel79FsKayLWvcgGUrnUO+ElJIXq/ZJkMhtCalrkFa5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjS7V27MBFqKaJMi/xYOukn4Rz9MB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofJobk1m
0hw/KKbLT4bB9YV0dIQTtWQSBo1KsmwZcbmQe0NmrCqZPTjW5fKRA9WCzjkk5xAH
2WOjm5efft5AMw/UPLIqS4c6n6DeW4DARiTna6O3o4qQrWrTdXKf1kEQP4tLOZdy
GY0171HoP83uIWdfwNATZJxn6CpLNx1/pozQQXqa4nexUJOHXjeLMgbk8yd6yL2f
NhJ7HuaV9NTPAmMNhnn07V3czWX46xhRj+t3lxxZDJ7giUdNJn4wIcUthJLW8BPu
qzQOSUPqF1HO6iq0DCNw9G26Yr+zbuvccLSWxJ44yOKMtaRH2urAWgdmoWHjQ963
2DoG45zL2KeQAg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:32 2026 by rpki-client