Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File:                     scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier:          Osny3NzTj4331EDs6iIZD2hYC6aRxM8zOjMGjvmzx4A=
Subject key identifier:   E8:6A:FE:30:44:B4:8B:E4:CB:66:1C:64:A8:DF:85:21:4D:23:44:9B
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer:       /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial:       019E1FECB32BE0A38C6F2DDD47E1C1F8B6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number:          0BC3
Signing time:             Wed 13 May 2026 06:01:06 +0000
Manifest this update:     Wed 13 May 2026 06:01:06 +0000
Manifest next update:     Thu 14 May 2026 06:01:06 +0000
Files and hashes:         1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
                          2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
                          3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: jNe+9vjZifl9B1nc4xVxfvOysMKiSGWrZ/XSKSZjbKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:b3:2b:e0:a3:8c:6f:2d:dd:47:e1:c1:f8:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
        Validity
            Not Before: May 13 06:01:06 2026 GMT
            Not After : May 14 06:01:06 2026 GMT
        Subject: CN=e86afe3044b48be4cb661c64a8df85214d23449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:32:d0:bb:3d:38:0a:74:fe:89:b2:e5:f4:
                    74:bf:4c:b5:d7:ce:3d:19:61:a0:80:aa:94:79:85:
                    18:88:81:c8:8c:ee:d0:3b:1a:0c:04:c0:6c:83:15:
                    72:01:ae:52:c5:a9:e9:2c:e7:72:17:8f:e0:25:d3:
                    f5:b6:96:40:1f:10:33:9d:ef:a7:42:9f:46:08:bf:
                    2a:6f:ca:05:d9:d5:6d:b3:11:5e:72:06:6d:0d:2e:
                    05:b5:4a:c0:25:78:db:97:23:3c:58:9a:9d:04:c4:
                    76:ce:0d:d9:d8:73:d5:9f:b0:7d:b1:31:f4:9f:95:
                    06:95:fd:15:37:52:e3:c0:60:88:02:29:86:42:2d:
                    03:9c:f9:ad:2f:95:79:a3:4c:a7:cd:5f:d3:f4:d1:
                    73:cc:d2:d1:e1:f4:ee:f2:5b:32:f7:a4:f2:6e:49:
                    69:30:e8:d6:20:b7:e9:ca:8d:01:c4:29:93:50:7d:
                    b6:a0:69:b0:eb:ee:aa:9d:1f:c7:74:30:b5:f6:1d:
                    10:b9:2e:36:fe:7c:ab:f0:e2:bf:e6:a7:15:5e:0d:
                    4c:c2:50:6d:45:11:a0:9c:b2:cc:0f:3b:c5:0c:07:
                    68:fb:e6:56:78:bf:19:ac:a4:e2:d5:05:d3:a8:3b:
                    26:88:52:5b:f8:df:3a:66:57:a2:2c:57:46:20:27:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:FE:30:44:B4:8B:E4:CB:66:1C:64:A8:DF:85:21:4D:23:44:9B
            X509v3 Authority Key Identifier:
                keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:81:79:c6:4b:c3:51:ae:7a:ff:8c:ea:b3:1d:ee:31:4b:
         76:ef:07:fe:b4:01:9b:7b:e2:74:59:91:b8:1e:66:d8:78:45:
         9e:51:53:3b:31:02:6a:8f:d1:06:5d:9a:83:fa:34:11:59:e0:
         45:4a:bb:ba:7e:70:ee:bb:98:7c:1e:50:36:a3:9d:36:1d:37:
         39:71:00:40:c9:91:d3:6f:82:5f:69:c0:24:8e:a1:7c:60:31:
         af:17:51:1b:29:a1:bb:d1:c7:ea:91:7b:a9:4a:dd:86:9d:07:
         4f:d6:d0:24:7f:b4:10:62:55:8e:1b:71:2f:20:3d:5b:da:ac:
         e8:be:75:45:2c:3f:c4:84:f4:dd:a9:c7:ff:93:e7:4c:f6:bd:
         bf:7f:aa:11:bd:e3:7c:76:fe:0e:21:9c:b1:39:c7:a1:39:70:
         2f:12:8c:66:70:08:72:eb:7a:86:de:df:cc:40:7f:d6:1f:15:
         f5:a7:7d:6c:c9:1f:35:e7:83:14:12:1d:a9:df:56:17:d8:b8:
         6c:4d:59:8e:5a:e9:93:b8:bb:25:dc:05:e8:23:0e:59:18:98:
         ac:a4:36:1c:28:79:83:69:e6:29:2b:34:1f:d8:29:36:2f:4e:
         e8:c7:32:7e:25:cc:08:03:55:86:cf:fb:4e:70:80:30:43:d6:
         90:19:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:37 2026 by rpki-client