Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          MVzlAlXMjtYaYl6Hht5Gz6mO2OW+1Ji6v/Fqv9WiXZg=
Subject key identifier:   F3:EE:DA:8A:7C:A7:1C:1F:68:1E:02:B1:E6:28:34:5B:61:4C:84:B8
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       019F90C81FCB734009569CD7A2B7E1B72F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          0A1D
Signing time:             Thu 23 Jul 2026 21:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:02 +0000
Files and hashes:         1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: v4JFly7yyyphv+8qF/xBWLdc4kVUwR+k43xlx4sQsx8=)
                          2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:1f:cb:73:40:09:56:9c:d7:a2:b7:e1:b7:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Jul 23 21:01:02 2026 GMT
            Not After : Jul 24 21:01:02 2026 GMT
        Subject: CN=f3eeda8a7ca71c1f681e02b1e628345b614c84b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:94:b4:3a:6e:37:e3:e1:65:e5:73:f6:fe:
                    fb:80:dc:2a:28:a7:a5:1c:43:b9:00:8d:76:08:f2:
                    ed:10:e2:c0:88:a6:d8:bd:37:52:49:a9:30:08:32:
                    9d:f5:e6:85:37:bc:e0:67:d7:b3:4f:a4:1c:ed:5c:
                    f9:70:b0:e7:e7:56:19:26:f0:0f:95:a1:c5:76:b1:
                    ed:a0:2d:a0:2f:ad:65:3b:cf:ec:5b:93:9d:8f:23:
                    73:ab:4e:6a:1e:f0:65:22:f3:63:61:03:f1:29:ea:
                    e5:e9:f9:3e:6e:12:d9:52:44:6a:c1:9b:55:a1:88:
                    e6:11:3f:a0:27:74:f9:af:4f:e1:b7:55:91:dd:f6:
                    9e:df:ed:78:6b:8a:b7:0c:a4:e4:0a:a5:4b:b3:02:
                    ba:9c:89:10:61:8c:6c:4b:d3:50:ec:9a:16:32:01:
                    00:c5:07:06:23:13:b3:0b:4f:91:c4:d0:0f:7e:d3:
                    ec:45:c2:b8:d9:2d:33:77:78:fb:92:81:60:0a:d0:
                    bc:e8:a9:86:ce:e4:0a:be:fb:1a:9b:56:a7:0e:aa:
                    09:dd:d0:03:f6:23:f6:1b:25:1f:e8:ff:f6:e3:21:
                    db:54:40:2d:53:b9:d6:27:1e:54:0b:1d:69:ac:f0:
                    ab:13:0d:3b:03:fa:c3:44:23:28:2f:2d:f1:62:d7:
                    3b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:DA:8A:7C:A7:1C:1F:68:1E:02:B1:E6:28:34:5B:61:4C:84:B8
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:3c:40:e7:8c:21:fd:a2:01:98:d5:3e:d6:7f:e1:a2:60:
         65:f4:c7:b9:28:bd:62:18:00:87:e1:ae:81:5d:98:32:57:09:
         bf:07:c8:d8:59:07:03:81:cd:7c:f6:bb:7a:d4:3d:57:53:c9:
         74:53:ff:a5:fe:61:64:95:a3:4d:50:92:50:ba:51:ed:d4:2e:
         db:53:81:78:28:81:d1:1b:22:ad:49:f5:af:63:fc:ad:f3:3a:
         fe:c1:6c:e6:3d:3b:04:7c:0a:52:dc:47:f8:8d:8b:a9:fd:e6:
         4f:e8:87:89:fb:bf:6a:45:19:8b:90:b6:f1:d3:f9:0e:f3:66:
         47:d1:3c:7d:9f:3b:95:da:b2:bd:19:43:a3:68:c3:61:58:20:
         0a:c7:53:b7:1e:78:57:fe:c6:60:12:09:b2:25:36:4b:64:6e:
         d5:78:8d:13:be:16:d0:38:bb:60:94:bc:76:f4:df:a9:9f:0b:
         f1:fc:8b:58:2e:c0:a9:e1:44:e7:eb:f5:6a:ba:88:c7:55:94:
         54:3b:a1:56:71:6d:d8:e2:c4:5d:ca:b4:1d:84:c2:f6:50:4b:
         60:29:a5:07:13:52:d2:8f:83:6e:b4:7d:38:8d:8d:49:6c:f3:
         84:37:89:23:cd:87:6f:ce:78:4d:e6:5b:6f:61:ad:94:94:68:
         f0:c2:96:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyB/Lc0AJVpzXorfhty8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGRkNmU3YTFmZWI2ZmI0N2M5YTJmODk5MTg4MjcwOTRk
YmZjMTcwHhcNMjYwNzIzMjEwMTAyWhcNMjYwNzI0MjEwMTAyWjAzMTEwLwYDVQQD
EyhmM2VlZGE4YTdjYTcxYzFmNjgxZTAyYjFlNjI4MzQ1YjYxNGM4NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq+UtDpuN+PhZeVz9v77gNwqKKel
HEO5AI12CPLtEOLAiKbYvTdSSakwCDKd9eaFN7zgZ9ezT6Qc7Vz5cLDn51YZJvAP
laHFdrHtoC2gL61lO8/sW5OdjyNzq05qHvBlIvNjYQPxKerl6fk+bhLZUkRqwZtV
oYjmET+gJ3T5r0/ht1WR3fae3+14a4q3DKTkCqVLswK6nIkQYYxsS9NQ7JoWMgEA
xQcGIxOzC0+RxNAPftPsRcK42S0zd3j7koFgCtC86KmGzuQKvvsam1anDqoJ3dAD
9iP2GyUf6P/24yHbVEAtU7nWJx5UCx1prPCrEw07A/rDRCMoLy3xYtc7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPu2op8pxwfaB4CseYoNFthTIS4MB8GA1UdIwQY
MBaAFN7d1ueh/rb7R8mi+JkYgnCU2/wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2Qt
ZjA3MTgzNzczYjI2LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2QtZjA3MTgzNzczYjI2
LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt88QOeM
If2iAZjVPtZ/4aJgZfTHuSi9YhgAh+GugV2YMlcJvwfI2FkHA4HNfPa7etQ9V1PJ
dFP/pf5hZJWjTVCSULpR7dQu21OBeCiB0RsirUn1r2P8rfM6/sFs5j07BHwKUtxH
+I2Lqf3mT+iHifu/akUZi5C28dP5DvNmR9E8fZ87ldqyvRlDo2jDYVggCsdTtx54
V/7GYBIJsiU2S2Ru1XiNE74W0Di7YJS8dvTfqZ8L8fyLWC7AqeFE5+v1arqIx1WU
VDuhVnFt2OLEXcq0HYTC9lBLYCmlBxNS0o+DbrR9OI2NSWzzhDeJI82Hb854TeZb
b2GtlJRo8MKWXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:44 2026 by rpki-client