Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File:                     3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier:          6ZWarLCV+FwCBxU3GeSIY9Yq4nVAQZB0ye3cHV8OEmM=
Subject key identifier:   2D:58:88:65:98:AB:3B:AA:F1:70:83:48:70:76:63:A8:62:75:A5:72
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer:       /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial:       019E1C472271BED0260E7612FBF47157B529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number:          1243
Signing time:             Tue 12 May 2026 13:01:24 +0000
Manifest this update:     Tue 12 May 2026 13:01:24 +0000
Manifest next update:     Wed 13 May 2026 13:01:24 +0000
Files and hashes:         1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: DhiTO+Rl3dHHR7Cfch5AqTN0NTu8skYcQTF2Uo8mpjk=)
                          2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:22:71:be:d0:26:0e:76:12:fb:f4:71:57:b5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
        Validity
            Not Before: May 12 13:01:24 2026 GMT
            Not After : May 13 13:01:24 2026 GMT
        Subject: CN=2d58886598ab3baaf1708348707663a86275a572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:74:51:c3:3d:ba:cb:15:2a:8c:0e:aa:6a:
                    a3:32:f4:da:68:fa:ea:94:30:e7:a4:72:5a:0a:5a:
                    89:aa:bb:db:f7:44:a8:08:f3:4e:63:98:d1:da:d2:
                    66:ac:d3:50:f8:68:63:ba:bf:81:4c:8f:17:f5:ac:
                    81:98:01:54:c8:e0:31:db:c9:9e:23:cf:fa:90:64:
                    0b:7e:f2:02:00:6f:f5:90:85:21:78:f0:1b:1e:35:
                    88:3c:d8:8e:66:e1:4d:9d:be:6d:43:8c:f3:0f:81:
                    0e:11:0e:05:a6:13:40:4b:d9:0d:1a:bd:fc:8c:4e:
                    a2:b0:e6:6c:61:fc:2c:22:cb:48:30:3f:47:a6:ee:
                    cc:10:ac:96:f9:44:47:3c:2c:b6:a1:d4:bb:e1:57:
                    63:8e:30:85:e9:01:ae:37:47:38:ed:ab:ec:31:4a:
                    99:51:22:3e:a5:c3:54:9c:58:60:b2:f8:c0:ff:45:
                    79:d4:92:0d:00:ba:f4:7b:b9:40:0d:a1:66:f5:f3:
                    b3:5a:e5:b6:67:bd:87:ed:3f:96:e7:7c:f0:5a:4b:
                    24:03:35:e2:27:4c:1f:64:41:03:f9:0a:e1:18:23:
                    c6:fa:3f:9e:73:b3:10:30:3a:21:09:b1:4b:1a:d5:
                    3e:47:da:08:26:d0:c6:b7:7a:d8:4b:7c:3f:14:ed:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:58:88:65:98:AB:3B:AA:F1:70:83:48:70:76:63:A8:62:75:A5:72
            X509v3 Authority Key Identifier:
                keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:f5:c0:04:df:0c:81:cc:ec:9b:ce:9b:ce:a6:2c:6d:ef:
         c2:c4:56:aa:df:b2:af:f9:8b:33:bd:af:0b:9d:98:db:77:df:
         f2:1c:87:27:ac:11:1e:5e:ea:15:e6:84:eb:15:74:6f:66:2f:
         7a:5e:16:9d:e8:af:8b:0c:bb:9a:21:53:81:31:50:35:b4:40:
         61:59:13:02:2d:9e:9e:17:fa:30:a4:8e:5b:b6:87:72:a6:b7:
         26:a2:cf:25:c7:f3:24:5a:65:58:ab:88:09:a2:fd:79:06:7b:
         12:73:90:5e:39:67:8e:ba:e0:7c:8a:c6:d1:ba:86:3d:9f:37:
         f3:aa:1f:6e:e4:1d:8c:9e:8e:63:4a:60:b3:96:fb:b2:2c:e8:
         16:cd:57:77:26:51:a5:d7:c2:5c:aa:3a:52:57:de:66:68:3d:
         c1:db:7b:5a:ce:06:f9:f7:a7:13:53:ef:ea:3f:1d:8c:dc:1c:
         82:fd:62:24:1f:28:4c:92:69:4e:da:f8:16:d9:31:ff:68:2f:
         72:9b:04:74:26:8a:3b:2c:8e:e5:5e:90:44:9d:f1:01:46:93:
         7e:bc:45:70:e9:97:ca:49:fc:5e:d2:c7:d5:0e:53:e2:81:e3:
         62:86:e5:8e:2d:7a:bd:42:5a:c8:ff:e6:0f:2a:5b:53:37:b0:
         ec:b2:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:09 2026 by rpki-client