Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File:                     3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier:          nt5XV0trl+NTYXzV1YK+UK9aYXgVRP9H91kmO2J9g9I=
Subject key identifier:   E4:7C:D9:1B:7B:45:96:A4:CB:48:29:11:FD:E0:EA:F0:16:FA:90:B2
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer:       /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial:       019E1D227CE85AB45BEA634DBDF28256B8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number:          1898
Signing time:             Tue 12 May 2026 17:00:59 +0000
Manifest this update:     Tue 12 May 2026 17:00:59 +0000
Manifest next update:     Wed 13 May 2026 17:00:59 +0000
Files and hashes:         1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: KAmKQXC9p3F3OuUjQbBZBW+bL7B9IVJmzHRo2dldMNU=)
                          2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:7c:e8:5a:b4:5b:ea:63:4d:bd:f2:82:56:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
        Validity
            Not Before: May 12 17:00:59 2026 GMT
            Not After : May 13 17:00:59 2026 GMT
        Subject: CN=e47cd91b7b4596a4cb482911fde0eaf016fa90b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:0c:7f:b2:0d:91:3e:3c:07:cb:c1:1f:e6:
                    ca:ba:ba:07:1b:d9:d0:95:b0:c4:f5:40:5d:5f:4d:
                    1d:1b:f1:55:33:5c:96:cb:f2:74:79:ac:49:9a:0a:
                    99:2a:94:18:71:d4:af:b1:5a:cd:78:fa:3b:f9:f1:
                    a2:71:fd:ca:68:b7:5b:fc:d9:36:9c:c9:87:59:8a:
                    e8:e6:d0:cb:8f:7e:c7:8c:7f:62:0b:32:1a:eb:95:
                    09:50:9d:af:fe:a9:3c:00:90:8b:0d:7b:3c:3b:64:
                    bd:db:d7:09:c9:fc:49:98:12:e9:f5:2b:bd:96:f1:
                    b9:b4:59:f5:1f:7c:54:2b:9c:bd:35:3f:61:fa:69:
                    6f:56:0a:a6:14:2f:aa:a8:62:48:50:fb:41:dc:88:
                    91:24:ed:8f:52:ca:52:9f:bb:4f:73:d3:b7:a2:de:
                    d8:36:00:a1:59:5b:51:7c:7d:2a:78:fe:7d:40:a3:
                    6e:13:76:2e:6a:31:3d:c2:c8:75:a1:8a:52:ec:6c:
                    f9:0f:a7:83:1d:a4:86:bf:55:58:12:22:72:64:a8:
                    21:55:2a:14:43:d7:ac:96:b3:ea:52:63:c1:da:55:
                    1a:aa:e0:80:9c:4c:58:58:40:f4:39:0e:0a:c0:70:
                    7b:f4:5f:aa:4b:d3:75:cc:b4:9d:b9:e5:dd:67:32:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7C:D9:1B:7B:45:96:A4:CB:48:29:11:FD:E0:EA:F0:16:FA:90:B2
            X509v3 Authority Key Identifier:
                keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:44:e8:2a:c6:af:46:4d:66:13:3d:db:2b:72:ef:83:67:
         96:8a:40:75:55:04:b4:32:43:ca:15:0b:46:e2:38:be:cd:d3:
         d5:2d:87:b2:92:53:4f:33:ed:83:4e:a2:6d:cb:e5:b9:af:5c:
         a1:bf:35:54:14:7f:3c:9b:77:b9:d4:eb:f9:3f:37:e0:94:68:
         55:98:d3:47:55:2e:bd:c0:65:9d:cf:fe:70:13:6c:47:3c:0b:
         5f:3e:1c:91:0a:1e:fa:df:bc:bc:1e:75:97:1b:f1:8c:66:a9:
         46:b0:36:a1:6c:90:70:99:4f:c4:2e:b1:46:e0:0a:0e:1b:d6:
         b8:c8:1e:e1:7f:f1:ad:c8:24:d1:a7:6f:ac:1c:26:27:64:d8:
         5d:d0:03:2c:24:0f:ae:2c:92:75:d7:31:2f:73:83:5c:28:7f:
         f5:80:7f:d8:f7:18:59:fa:d7:12:4f:81:f5:dc:ce:94:75:c8:
         d4:6c:d3:e7:6d:60:9a:01:0a:d3:b8:a9:9f:1c:e6:ae:12:b8:
         f6:79:60:be:97:8b:1d:0a:93:96:bb:2d:50:63:90:10:cd:a7:
         92:54:e4:2d:f5:cf:c3:a3:7a:1d:28:7e:78:a4:c5:bd:b9:ff:
         f9:9f:df:93:5b:a8:bc:9c:b4:92:1e:76:1d:cc:57:f5:33:74:
         7f:e1:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:35 2026 by rpki-client