Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File:                     3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier:          Y6aEwcNoVTuYKx2sbNdb5Dgv7PXIVBAY7K+DkrOmGCQ=
Subject key identifier:   61:11:7E:49:C2:05:F7:22:D2:1A:AF:48:94:25:1A:2F:F3:30:DD:23
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer:       /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial:       019D28BB49D4FB5E432C1A79B71710694292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number:          11E4
Signing time:             Thu 26 Mar 2026 06:00:55 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:55 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:55 +0000
Files and hashes:         1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: tIMz88qGCGcjRHrX0enIxK0wEk7J0GJWOSZkRwkihq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:49:d4:fb:5e:43:2c:1a:79:b7:17:10:69:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de122d172c13b15291e41f945681525826fef892
        Validity
            Not Before: Mar 26 06:00:55 2026 GMT
            Not After : Mar 27 06:00:55 2026 GMT
        Subject: CN=61117e49c205f722d21aaf4894251a2ff330dd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:cc:65:1b:9f:d4:b1:1e:92:c1:0d:ad:60:
                    23:2e:b6:d6:ec:6f:e1:15:f9:6d:72:58:c2:b6:2e:
                    02:83:5a:10:4a:ed:0d:6f:13:8a:cf:3d:fc:92:ee:
                    ca:d5:19:4c:0b:4d:1a:1c:00:1e:60:b1:13:5f:96:
                    04:ae:64:15:ff:68:cb:57:b5:b8:a8:88:ef:a8:a0:
                    6a:47:c7:39:f7:26:26:1a:32:a2:c6:97:d1:ab:eb:
                    c4:92:e2:70:af:4b:47:32:33:9f:bb:ea:cf:45:f2:
                    e9:c1:d4:a9:c2:82:f9:d3:d3:55:12:5f:cd:92:2a:
                    65:f7:f4:5a:c6:d3:a2:e9:44:bc:37:8e:c8:f9:b8:
                    ca:98:77:98:98:57:98:00:85:f9:a1:3f:df:47:0a:
                    6b:bd:62:d1:56:14:70:33:af:00:59:ad:81:51:1d:
                    cc:1e:18:a1:7a:ff:a5:11:fe:ca:af:70:01:0f:7f:
                    7c:3e:2e:1b:00:34:27:01:3c:19:c9:8d:20:4f:cd:
                    ee:6e:21:86:2c:75:66:7f:5c:b3:10:bb:5b:41:d4:
                    6e:87:f2:6a:bc:5d:0f:6c:cd:bd:f7:19:a5:ee:46:
                    f1:aa:43:ac:c0:65:64:44:15:bb:ae:af:bb:66:94:
                    68:55:de:0d:56:b0:cd:f5:a1:16:6d:7e:c1:29:69:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:11:7E:49:C2:05:F7:22:D2:1A:AF:48:94:25:1A:2F:F3:30:DD:23
            X509v3 Authority Key Identifier:
                keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:92:29:12:e4:10:63:1c:2e:53:58:58:5f:10:07:ce:21:
         45:37:9e:cd:20:37:40:88:17:c3:a4:a4:01:e9:95:c6:0a:3a:
         2a:9f:94:52:e6:b7:d6:ac:94:f8:8b:b1:31:ef:62:60:f7:8b:
         8f:5c:7c:9d:0e:41:80:6f:13:23:4f:5f:f5:c7:e4:88:c4:a2:
         e8:13:f1:47:ea:56:6b:9c:1e:92:06:a1:42:13:e7:71:55:07:
         fe:cd:c6:d2:4f:c9:63:41:89:8c:03:a9:37:1c:dd:9e:38:c1:
         9d:21:9e:f3:b8:73:a3:d1:92:19:f0:1c:12:9c:3d:b5:43:bb:
         da:80:54:2e:95:8c:90:11:12:bf:dc:c3:4d:20:73:67:b5:de:
         28:67:49:ec:34:af:4d:80:10:e7:bf:a3:83:83:08:ef:21:bb:
         8e:fb:63:07:51:d9:28:81:d8:02:6e:6c:0e:75:68:92:99:1c:
         a8:33:fc:75:71:9d:a4:20:08:8e:b9:1f:32:1c:30:25:da:50:
         9e:c3:1c:9c:e7:81:f5:49:62:3b:d2:9d:ed:af:a6:88:17:53:
         25:5a:67:03:cc:3f:26:e8:06:59:2b:50:60:1f:14:db:e4:68:
         f4:64:58:67:6c:22:12:e1:21:5d:1d:84:a0:5b:be:d0:97:ba:
         eb:70:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:44 2026 by rpki-client