Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File:                     3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier:          KLIxvTxqndJCTh/J79gloW5nNidnNcBQeRWqqdgEcQI=
Subject key identifier:   68:FF:C6:44:E9:9C:25:52:94:D6:D2:7E:18:EC:A8:B0:78:A6:27:5D
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer:       /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial:       019E1D9111965B063DE61CD8C521FF7B454A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:01:46 +0000
Manifest this update:     Tue 12 May 2026 19:01:46 +0000
Manifest next update:     Wed 13 May 2026 19:01:46 +0000
Files and hashes:         1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: OL+CG5ozI4/rXBbGdcF9UKmytOxzNDVmbhmqqDmWcWo=)
                          2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:11:96:5b:06:3d:e6:1c:d8:c5:21:ff:7b:45:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
        Validity
            Not Before: May 12 19:01:46 2026 GMT
            Not After : May 13 19:01:46 2026 GMT
        Subject: CN=68ffc644e99c255294d6d27e18eca8b078a6275d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:c4:55:69:01:cd:3e:ef:93:03:6c:ad:b1:
                    1f:d8:83:cc:60:5a:5f:5b:66:d4:d2:ae:3c:a9:e6:
                    52:c9:cf:bc:b8:d8:fa:6c:1a:10:4d:75:92:e3:6e:
                    ed:fd:29:e4:dd:0f:af:e2:59:c5:b2:93:49:22:b5:
                    97:4a:2e:3e:a4:98:e3:d8:c4:2b:e0:bf:76:49:82:
                    6a:2c:cf:63:26:59:eb:23:9e:79:1e:0a:f2:2d:39:
                    53:52:d0:6e:b0:0e:30:0a:27:9e:6e:11:76:d7:85:
                    b5:3c:b5:58:d7:92:d9:75:68:92:7c:08:16:78:14:
                    4a:98:0d:46:de:50:aa:5d:3e:63:e6:0b:cf:50:f9:
                    26:e3:d8:e4:37:6c:26:db:9e:33:b2:52:fc:bf:95:
                    cc:76:51:78:93:8d:9a:b0:4f:ce:3b:57:09:4c:9c:
                    9e:c6:0e:a3:c2:8f:2d:1e:46:c5:76:22:44:54:1e:
                    f9:b9:ce:e8:c0:23:c7:11:13:ae:c9:c0:0d:50:a7:
                    02:dd:f1:9c:f9:20:db:75:76:ec:5a:4b:03:30:03:
                    06:48:f7:06:b3:50:28:8f:92:1a:6f:63:1a:d1:3b:
                    e9:3c:30:49:c0:63:fd:fb:63:3a:f7:ba:84:f8:dc:
                    63:54:71:0e:6a:b3:a1:b8:e6:36:4f:66:5a:c6:4f:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:C6:44:E9:9C:25:52:94:D6:D2:7E:18:EC:A8:B0:78:A6:27:5D
            X509v3 Authority Key Identifier:
                keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9f:c3:43:05:d7:9b:01:32:49:7b:8a:95:f1:60:fe:0a:f8:
         54:e5:41:e5:e4:fb:10:80:5a:78:2c:44:29:98:e9:b7:e9:d9:
         b0:43:06:e3:07:0c:cd:e3:f8:1a:32:f8:6d:26:b9:01:b4:2f:
         1d:19:b3:35:d5:23:e1:c9:f6:6f:e5:e2:9a:90:d4:67:57:3c:
         19:37:e2:14:79:e5:d8:01:e7:1f:70:c2:12:4a:d1:35:60:c5:
         d3:9b:a3:1c:2f:ca:1c:61:c2:21:bf:2e:e7:f5:af:21:ee:35:
         c0:22:22:df:8a:f1:d8:18:fb:89:30:b1:13:2f:9b:90:18:05:
         e8:58:fd:41:34:88:84:16:e0:86:4f:d4:7f:12:1e:ea:60:f8:
         3b:24:b2:44:79:c4:ad:68:da:ed:11:a7:17:b9:c0:a3:95:39:
         9b:6c:c1:9a:c5:89:7e:02:a5:ad:b0:67:6e:79:54:69:e1:60:
         c6:67:35:bc:7a:f7:89:e7:5c:c9:00:85:72:6f:81:50:47:96:
         17:63:65:78:ae:e2:7b:2f:a5:80:63:0d:15:26:f7:4e:ae:3f:
         c9:63:e1:36:aa:0c:13:0f:b3:ba:96:af:ba:63:3a:f7:9a:ed:
         61:db:50:99:f2:c0:c0:e2:88:b8:28:42:8a:fe:e6:7c:6f:c7:
         59:a3:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:42 2026 by rpki-client