Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File:                     3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier:          yF5ynja5UBG+abSHlfz78N6rMtGgBjrucjqrWvtsTb4=
Subject key identifier:   C8:6B:72:55:72:02:83:F9:5E:FD:37:C8:C9:57:C0:04:8B:57:23:E5
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer:       /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial:       019E1D911B415E615670ED1083477EBC5360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:01:49 +0000
Manifest this update:     Tue 12 May 2026 19:01:49 +0000
Manifest next update:     Wed 13 May 2026 19:01:49 +0000
Files and hashes:         1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: +m5r/H5ZqSK7C+q8o4bLl5fXZsmrwOZjHpCViQ/pZdg=)
                          2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:1b:41:5e:61:56:70:ed:10:83:47:7e:bc:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
        Validity
            Not Before: May 12 19:01:49 2026 GMT
            Not After : May 13 19:01:49 2026 GMT
        Subject: CN=c86b7255720283f95efd37c8c957c0048b5723e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:e6:1f:5c:71:e8:be:1f:10:5b:af:a4:a7:
                    24:6a:aa:ae:00:eb:9e:2c:5c:4c:9c:c5:94:3f:46:
                    12:32:87:cc:39:a3:18:36:94:fc:b4:ad:95:39:37:
                    84:7c:5e:c4:e0:83:94:2d:f1:6e:3b:58:25:7d:ff:
                    3f:c7:d5:6d:df:da:51:40:00:35:d9:a9:fd:54:61:
                    17:63:c2:77:d1:22:ac:0f:e4:c8:23:a8:16:9c:b6:
                    7e:5a:b9:34:c0:81:35:b6:b8:ac:2b:da:e8:21:99:
                    ce:a8:93:a3:30:47:fe:a2:cf:81:9e:4f:50:3b:ce:
                    17:ba:40:04:0e:0f:e3:32:ed:dc:ac:19:bd:ea:6e:
                    63:b3:4c:1d:2a:94:64:94:62:32:02:2e:23:b2:48:
                    05:79:51:b9:d3:d3:75:f9:23:98:0f:18:46:e6:f9:
                    17:e1:bb:74:47:57:5d:19:46:96:be:74:e8:1c:53:
                    c4:0a:59:9f:dc:db:e2:2f:d1:d6:7d:b1:bb:31:87:
                    4f:68:45:85:4a:4a:98:91:b1:03:ef:3e:63:a0:15:
                    0d:dc:7d:9a:3f:56:28:86:b7:3f:5c:e9:02:10:5a:
                    1b:6e:d4:84:0d:0c:0c:f7:f7:3e:e5:e8:86:c2:0e:
                    0c:59:b2:3b:66:9c:86:ed:cf:7b:df:0c:7c:9e:29:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:72:55:72:02:83:F9:5E:FD:37:C8:C9:57:C0:04:8B:57:23:E5
            X509v3 Authority Key Identifier:
                keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:3a:bf:e7:60:fa:b4:a1:de:72:e5:fa:fb:9a:00:ae:fb:
         97:18:ce:96:ce:99:00:b1:ff:4e:5b:a1:b2:7f:4c:05:1d:38:
         a8:e6:b4:41:17:cf:f6:ae:70:d7:25:4e:3c:4f:7f:52:1b:94:
         05:de:e7:12:f8:6d:8b:ce:34:74:2c:22:c5:25:9f:dc:21:ed:
         d9:e4:30:17:a7:e9:86:c4:79:3a:50:8a:c6:63:10:13:dd:23:
         8b:24:c6:29:4e:07:9d:f4:c3:3c:0d:fe:22:a2:84:b2:f7:9a:
         18:78:08:c2:d2:6b:58:cb:bc:db:35:68:c0:d4:de:71:2f:f9:
         30:3b:6e:cc:2e:33:5b:3e:06:f2:5f:b2:37:e8:37:08:27:c7:
         e0:95:29:dc:fc:17:9c:6d:9b:71:1e:ff:ca:79:ce:ea:7f:aa:
         51:26:95:b8:5d:58:7c:02:96:5c:ad:f7:2e:e5:4e:be:b3:69:
         93:35:37:df:ee:d6:bc:0c:c8:0b:b2:f7:95:b7:6c:c6:37:40:
         92:c5:0b:be:39:75:3a:30:85:63:7b:33:bd:e5:97:df:ea:14:
         b7:69:bc:40:86:6e:88:96:49:bc:fa:eb:5d:f7:02:2c:2b:83:
         4e:fb:a4:1b:b0:68:d9:56:55:82:02:f0:94:e9:7c:ad:37:55:
         dc:0a:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:32 2026 by rpki-client