Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
File:                     M6NHJJRdp2kw_nkfYIlslt_87IQ.mft (raw, json)
Hash identifier:          TQASLXyVFzNIaXyLcC8zIFsAy/7MM6JvkfFI3nVJCGE=
Subject key identifier:   B6:5F:69:24:8A:C7:50:81:25:9F:80:BD:3B:E7:F6:81:42:B6:3B:3A
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Certificate issuer:       /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial:       019E1F478E21EAFE58F4270888885D644A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
Manifest number:          F3
Signing time:             Wed 13 May 2026 03:00:43 +0000
Manifest this update:     Wed 13 May 2026 03:00:43 +0000
Manifest next update:     Thu 14 May 2026 03:00:43 +0000
Files and hashes:         1: IAsVodo77dbg-h6rQj-fdEgsD9c.roa (hash: a6RE8kj0IdT5Q3ggVRunq2rBj3jd9EStyQVhRJPPz6Q=)
                          2: M6NHJJRdp2kw_nkfYIlslt_87IQ.crl (hash: mspKC3gVp72e1j8uQ/K1PZb0rXt2fYOucjYM8vfOP0o=)
                          3: YeVLRWZskfx_IZGiLmT84waZsq0.roa (hash: hRBrTkDkDF9xPGZibtinblYHrG8tk7wxZI+ehCaks0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:8e:21:ea:fe:58:f4:27:08:88:88:5d:64:4a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
        Validity
            Not Before: May 13 03:00:43 2026 GMT
            Not After : May 14 03:00:43 2026 GMT
        Subject: CN=b65f69248ac75081259f80bd3be7f68142b63b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:55:bb:36:bb:da:30:1e:01:c0:30:77:ac:c6:
                    48:b0:da:d0:d6:38:74:e0:7f:a8:f2:78:f8:e4:f7:
                    95:fe:3a:0b:ad:c1:b4:60:74:08:d0:63:4a:c2:e3:
                    f5:ca:ef:c7:89:14:69:2d:cd:4c:f7:21:12:48:97:
                    80:ba:f9:d2:c3:f4:b3:63:6d:08:8e:01:52:6a:4e:
                    78:e2:94:6c:43:5a:4c:bd:f4:e3:b1:ea:68:d5:17:
                    16:04:cc:a9:b5:1e:62:0f:a5:7b:02:2a:05:18:e3:
                    fb:2c:6f:ac:c3:07:4c:05:26:ec:34:5c:81:ec:2d:
                    5f:8d:2f:c3:28:6e:b2:2f:93:26:b6:c5:63:ad:70:
                    5b:a0:04:d0:3c:49:e0:7e:d7:b9:59:9f:00:02:8a:
                    98:58:16:1b:66:db:cf:65:f7:64:91:35:c1:c5:6c:
                    99:17:83:70:76:58:62:f5:91:b7:86:73:5d:b8:1f:
                    1d:f0:ed:51:65:80:eb:72:0a:01:3c:17:a7:7f:d4:
                    3c:65:c9:63:ff:81:a5:1d:66:a3:ee:f3:f9:49:f6:
                    8a:0e:fd:7e:f7:0e:85:ed:76:3e:1b:33:76:e5:ed:
                    06:9b:15:a3:6a:a6:6e:27:9e:a9:8a:4f:1f:09:d5:
                    f4:c7:b0:c7:3c:ea:cb:1c:b5:af:89:ea:b8:47:3d:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5F:69:24:8A:C7:50:81:25:9F:80:BD:3B:E7:F6:81:42:B6:3B:3A
            X509v3 Authority Key Identifier:
                keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:e4:11:08:77:d0:2c:8c:bd:b4:77:79:07:c1:54:e3:14:
         86:fe:77:2d:79:43:cc:0c:46:11:92:c5:cc:1a:11:71:42:d3:
         6c:83:66:20:eb:ac:14:44:e3:fe:dc:17:62:ed:9d:42:2a:93:
         3a:d4:ce:52:c8:55:00:b8:48:82:37:07:f8:3d:c1:4b:56:22:
         84:49:cb:92:04:f9:98:39:48:83:ce:a4:36:26:47:f6:f3:95:
         f2:a4:6a:11:4d:c6:ae:99:eb:a6:af:45:34:71:4d:a0:35:fc:
         03:f7:af:38:36:52:7d:83:be:84:1a:79:be:96:3f:99:0d:f1:
         27:af:f2:c8:73:43:b1:1b:06:f6:b5:4a:02:45:be:7e:d0:e8:
         27:0d:2a:43:26:a8:90:2a:4b:cb:c9:f1:bc:a4:a6:bc:4c:6b:
         e7:60:76:bb:cb:f5:fd:fe:a0:c4:0e:05:7d:58:ab:f0:03:9c:
         85:8c:6e:47:1d:d6:52:e6:9a:8a:f2:c5:35:9f:df:5c:a7:22:
         6e:dc:59:05:a0:a2:17:cb:69:df:fb:7d:20:8a:13:24:13:2a:
         3b:ca:ea:8a:e8:ae:a3:af:b1:ee:9c:56:90:7f:36:dc:18:a2:
         db:8a:c9:4c:bd:1c:aa:f2:ba:ef:b6:03:11:3f:f5:09:90:e1:
         66:92:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:34 2026 by rpki-client