Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File:                     3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier:          b9FUCN0t0zMBVoS2jq2uVDwKzO40hfiCTGGhCZBFlrY=
Subject key identifier:   37:F4:2F:A8:22:68:AA:36:2F:BC:7B:7F:2F:BF:2C:F9:7D:83:2B:92
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer:       /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial:       019E1D22B15C5D566176173242B375C2F9FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number:          081E
Signing time:             Tue 12 May 2026 17:01:13 +0000
Manifest this update:     Tue 12 May 2026 17:01:13 +0000
Manifest next update:     Wed 13 May 2026 17:01:13 +0000
Files and hashes:         1: 2U3Vq1QnP8ctuHADYZl7AYfrN8Q.roa (hash: aSqIWAFTh+DEyVISsUqiiF4heoz8JVrFxkyTiK/xNAk=)
                          2: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: ESe0nj4hUemTOWpuovmoC7MjF9qvXUGWGLOqWv47gf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:b1:5c:5d:56:61:76:17:32:42:b3:75:c2:f9:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
        Validity
            Not Before: May 12 17:01:13 2026 GMT
            Not After : May 13 17:01:13 2026 GMT
        Subject: CN=37f42fa82268aa362fbc7b7f2fbf2cf97d832b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:2b:6e:ab:04:77:bd:f2:9b:c1:12:88:26:
                    0a:ca:3a:e1:e2:ba:a3:6e:25:49:62:01:01:2f:2b:
                    68:ff:3c:53:71:6a:ea:63:dc:80:be:5b:83:eb:16:
                    c4:c3:e9:23:8b:e6:d0:eb:75:b7:95:bf:f5:14:71:
                    59:de:0b:20:9b:c0:e8:13:9e:98:5a:ac:03:e8:0b:
                    5c:2d:46:d5:9a:0c:bd:2c:42:ce:47:35:0d:b9:75:
                    63:26:c7:f0:52:63:e6:9e:7b:87:37:5b:1b:fc:8a:
                    30:43:d6:58:2d:bb:8c:e5:f8:03:d4:c1:57:df:cf:
                    aa:ba:4e:a0:6f:89:60:9a:0c:c4:8b:28:ed:45:44:
                    27:f6:f1:7a:1f:14:64:94:21:8f:89:fe:85:cb:ba:
                    d1:d4:b1:f6:65:57:d5:37:31:32:3c:aa:11:c6:d5:
                    8e:7f:68:2c:28:68:37:ac:85:19:92:60:71:56:40:
                    24:5f:e9:ca:bc:14:fa:00:56:60:b0:65:b7:23:a4:
                    c5:a0:e9:93:95:4c:5f:a2:60:f8:b4:a4:73:71:06:
                    60:f1:33:83:0f:19:a8:33:2b:4e:fa:54:48:8f:4e:
                    40:6e:6d:bf:9e:f4:67:4c:50:7b:03:2b:17:36:bb:
                    1f:77:81:75:54:a9:50:eb:92:f8:33:9a:04:76:92:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:2F:A8:22:68:AA:36:2F:BC:7B:7F:2F:BF:2C:F9:7D:83:2B:92
            X509v3 Authority Key Identifier:
                keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:be:0c:fa:f5:a0:d0:7d:a4:b7:5a:54:76:e1:47:87:71:5f:
         71:b8:3c:6c:53:67:91:44:db:b2:18:75:69:63:e3:f9:02:a5:
         6e:f8:40:9d:ca:75:23:ab:72:7a:12:92:a3:5c:7c:ea:9b:a5:
         a9:5f:b2:3f:9f:a1:ad:1d:a8:2f:7a:4a:2c:54:60:9b:16:06:
         76:3f:3b:77:0c:35:7d:8a:6a:c4:f9:6e:ae:fa:de:e3:a3:e9:
         11:93:fa:fe:d6:87:a6:8f:44:77:c8:65:c8:bb:3e:5b:4e:e6:
         7c:bc:e9:ef:6e:a8:d1:6c:d7:bd:be:04:4f:2a:64:51:10:46:
         5c:92:74:a4:79:1b:77:4d:6f:f0:36:6a:e4:a2:21:f7:12:7d:
         34:17:b2:81:a6:91:f0:b6:0d:f1:0b:7a:80:10:e3:79:1c:49:
         ac:9b:ef:56:63:d2:13:0e:b4:26:81:c8:f2:8a:33:07:6d:14:
         85:be:ff:3d:8a:60:32:3e:60:f4:9d:70:62:46:5e:4b:d9:ba:
         c0:4b:6d:29:72:ab:f3:d9:86:f4:c0:7f:4a:cb:80:ac:e2:71:
         f5:97:c8:fc:6c:b7:56:3a:ab:99:18:40:d1:a5:8a:41:b1:67:
         c2:4d:2a:67:dd:7a:69:3d:2a:81:4d:f9:c0:2f:57:08:08:e6:
         f0:e0:f5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIrFcXVZhdhcyQrN1wvn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5
OGUzYjUwHhcNMjYwNTEyMTcwMTEzWhcNMjYwNTEzMTcwMTEzWjAzMTEwLwYDVQQD
EygzN2Y0MmZhODIyNjhhYTM2MmZiYzdiN2YyZmJmMmNmOTdkODMyYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0grbqsEd73ym8ESiCYKyjrh4rqj
biVJYgEBLyto/zxTcWrqY9yAvluD6xbEw+kji+bQ63W3lb/1FHFZ3gsgm8DoE56Y
WqwD6AtcLUbVmgy9LELORzUNuXVjJsfwUmPmnnuHN1sb/IowQ9ZYLbuM5fgD1MFX
38+quk6gb4lgmgzEiyjtRUQn9vF6HxRklCGPif6Fy7rR1LH2ZVfVNzEyPKoRxtWO
f2gsKGg3rIUZkmBxVkAkX+nKvBT6AFZgsGW3I6TFoOmTlUxfomD4tKRzcQZg8TOD
DxmoMytO+lRIj05Abm2/nvRnTFB7AysXNrsfd4F1VKlQ65L4M5oEdpLAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf0L6giaKo2L7x7fy+/LPl9gyuSMB8GA1UdIwQY
MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt
NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm
LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb4M+vWg
0H2kt1pUduFHh3Ffcbg8bFNnkUTbshh1aWPj+QKlbvhAncp1I6tyehKSo1x86pul
qV+yP5+hrR2oL3pKLFRgmxYGdj87dww1fYpqxPlurvre46PpEZP6/taHpo9Ed8hl
yLs+W07mfLzp726o0WzXvb4ETypkURBGXJJ0pHkbd01v8DZq5KIh9xJ9NBeygaaR
8LYN8Qt6gBDjeRxJrJvvVmPSEw60JoHI8oozB20Uhb7/PYpgMj5g9J1wYkZeS9m6
wEttKXKr89mG9MB/SsuArOJx9ZfI/Gy3VjqrmRhA0aWKQbFnwk0qZ916aT0qgU35
wC9XCAjm8OD1AA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:25 2026 by rpki-client