Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          WMPd7MAHs4fPuEfbNyI4PdwlLtLhHRMbHIB05SAgIfA=
Subject key identifier:   1F:BA:5D:AC:1E:F7:94:F3:A8:E6:29:5B:B3:B0:36:8C:A8:76:52:74
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       019E1D90753D2191B54007CEDE9B7D3D94B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          1630
Signing time:             Tue 12 May 2026 19:01:06 +0000
Manifest this update:     Tue 12 May 2026 19:01:06 +0000
Manifest next update:     Wed 13 May 2026 19:01:06 +0000
Files and hashes:         1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
                          2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: 1BZXcR39ZI4y4BUBuSzXakY393jOahH3fdBgXzHuYZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:75:3d:21:91:b5:40:07:ce:de:9b:7d:3d:94:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: May 12 19:01:06 2026 GMT
            Not After : May 13 19:01:06 2026 GMT
        Subject: CN=1fba5dac1ef794f3a8e6295bb3b0368ca8765274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:d0:c7:41:6a:6c:a7:df:0e:74:c9:cb:7b:
                    20:55:33:53:97:bb:bf:57:e9:5d:58:74:b4:0e:d4:
                    69:66:27:48:c9:73:64:80:9d:98:13:ae:52:b8:e6:
                    d0:16:58:6d:ff:d6:55:dc:cb:eb:ba:88:b6:e7:ac:
                    63:d7:98:e7:a9:4a:cc:d8:89:81:d9:b7:e8:fe:49:
                    a9:17:6c:80:b1:e0:d8:df:8b:75:5a:33:63:cd:dd:
                    e5:b4:b5:14:cb:4e:89:54:39:0e:a7:fb:50:66:09:
                    e0:d5:74:a8:7c:ef:48:43:1f:bb:aa:9d:fd:a2:af:
                    5f:ab:ad:12:0b:5c:10:8e:e0:ed:d6:87:ec:7a:db:
                    ae:51:15:f1:0f:e0:38:f5:98:b2:4b:3b:ec:ef:ee:
                    4a:ac:59:3c:cf:00:cf:6d:e5:7c:94:e3:63:42:dd:
                    a4:08:ee:c9:d5:90:1f:4a:b7:ec:5f:08:9a:08:0b:
                    61:a4:89:d0:d4:2b:a1:78:22:a8:f2:a6:2d:9e:6f:
                    59:80:ad:c1:04:54:f0:d9:f3:56:4b:9e:2c:12:39:
                    90:ff:86:b0:e7:24:5d:d4:67:29:99:5b:97:1b:e7:
                    c9:55:f7:35:19:27:ca:b5:11:f3:25:74:ea:d9:9a:
                    83:9b:91:7e:dd:c8:ea:ab:2e:54:4c:ee:28:73:eb:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BA:5D:AC:1E:F7:94:F3:A8:E6:29:5B:B3:B0:36:8C:A8:76:52:74
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:b1:00:7a:f6:d6:72:23:9f:d2:c0:1d:f9:f9:11:2e:53:
         fb:87:09:39:36:d0:7a:c7:82:bf:ab:d8:3a:32:d4:cd:7b:44:
         31:8f:0b:77:8d:f2:7e:9a:1b:f9:d0:a5:df:9d:91:71:6b:4c:
         ab:f5:06:86:6a:32:1d:3d:42:74:f6:18:c4:34:1a:49:32:ef:
         bc:40:9c:47:90:97:90:aa:63:67:61:90:6c:b5:e1:71:a7:a2:
         42:2a:b1:99:5c:13:7b:e5:ab:eb:53:48:7f:58:1c:55:33:a2:
         5c:2d:dd:b6:09:78:d3:2c:cd:05:b7:cb:2f:bb:9b:bd:90:3c:
         d8:39:f0:c5:b7:80:04:b7:84:04:12:c4:28:af:f3:3a:56:4e:
         64:e6:2a:50:bd:05:43:43:c6:0a:f2:f9:a2:59:1c:84:5a:42:
         be:2f:30:41:15:6a:53:b0:ea:e6:bf:5d:6c:dd:55:91:3a:dd:
         fc:32:d0:71:f0:bc:2a:d5:9c:4b:ca:95:fb:9f:8a:19:14:2b:
         f9:34:d9:ce:5f:3d:71:21:72:21:64:4e:28:45:6c:84:6d:12:
         15:6b:db:ab:0e:20:6c:20:c6:52:60:91:fb:bc:60:83:1c:7f:
         ff:5f:6d:f7:e9:e6:b1:fb:f6:8f:aa:84:ed:55:91:5a:b3:86:
         a8:a5:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:57 2026 by rpki-client