Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier:          dSoZ8AArtKJP237kgvbFzfJghckTYzS4dE1JLIW/gGs=
Subject key identifier:   FA:77:6E:EC:98:81:27:55:D4:A4:96:57:60:2C:87:A6:F6:C2:0B:51
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer:       /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial:       019E1EDA5FB445B78976581D6F30776384C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number:          187E
Signing time:             Wed 13 May 2026 01:01:28 +0000
Manifest this update:     Wed 13 May 2026 01:01:28 +0000
Manifest next update:     Thu 14 May 2026 01:01:28 +0000
Files and hashes:         1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: ZrVJkfPrL6NoERgyxwt366aLgX2TbFuIK/+m4zwXy3U=)
                          2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:5f:b4:45:b7:89:76:58:1d:6f:30:77:63:84:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Validity
            Not Before: May 13 01:01:28 2026 GMT
            Not After : May 14 01:01:28 2026 GMT
        Subject: CN=fa776eec98812755d4a49657602c87a6f6c20b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:f4:9d:b6:51:46:26:3f:2b:34:3a:6d:b5:
                    11:b3:82:b6:da:1b:20:aa:69:09:91:7d:9e:d3:23:
                    e1:a9:65:8a:a0:12:8e:62:06:b6:42:b0:c8:41:75:
                    db:2e:ab:5f:d9:9b:e3:a8:30:37:52:cb:37:2e:d5:
                    fd:5b:80:b6:45:0f:a9:af:a8:7d:75:24:62:5e:83:
                    30:c2:5f:35:8f:00:8b:51:14:81:b1:b0:29:7d:0d:
                    7f:ac:15:56:24:a5:45:24:4f:4c:08:5f:fe:61:bd:
                    43:e1:75:18:a8:05:63:ae:a2:d4:56:ed:66:32:42:
                    fa:fe:b3:6e:3d:cd:ec:8b:ac:dc:32:ee:ea:f3:1d:
                    ec:a4:60:02:54:30:60:60:d5:16:99:0a:84:8b:1a:
                    72:13:27:7a:c7:f0:4f:3d:76:09:41:26:d6:8b:2d:
                    8b:9f:27:9b:d2:c0:f3:a1:4a:0f:d9:03:55:a5:c2:
                    dd:bc:34:73:3a:d6:1f:03:18:80:e9:69:e7:b9:94:
                    f8:0e:df:7d:c0:4f:a6:93:8f:ac:d5:bf:c1:1c:5c:
                    21:93:a9:2b:af:de:c6:39:a7:5d:6a:6b:c0:44:7b:
                    b7:dd:57:14:b9:4d:b7:1d:99:24:3b:f6:ce:71:35:
                    99:4e:d0:48:f1:fc:7a:32:3a:c1:d3:88:d8:07:e6:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:6E:EC:98:81:27:55:D4:A4:96:57:60:2C:87:A6:F6:C2:0B:51
            X509v3 Authority Key Identifier:
                keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:11:55:56:38:95:89:87:1a:d3:b7:96:09:f9:61:f1:44:
         fc:f8:f8:6c:49:56:00:b5:b1:94:03:24:da:8d:91:38:4e:8b:
         00:41:28:dc:61:1c:d9:a4:77:1a:4a:1f:a3:e3:24:96:55:a6:
         93:b8:4a:05:6b:ff:31:1d:bb:86:bf:d5:ad:03:0d:e0:57:94:
         75:3c:42:7b:fc:a0:db:b1:ee:b7:86:cc:97:08:ca:d9:68:9d:
         ed:46:6f:f6:f4:60:73:fc:b1:71:a7:fb:b4:2e:3c:24:96:f5:
         f7:ea:9e:4e:d6:0c:5f:35:03:83:a2:18:fe:7e:bb:19:90:8e:
         5d:1f:61:3a:ff:2d:bd:c1:55:21:34:f0:a0:cb:0d:17:b3:7a:
         6a:9d:aa:d5:b6:2b:ce:45:0c:84:49:44:fd:14:f4:bd:53:2f:
         9e:98:97:6f:d8:66:5d:4f:02:30:e2:83:15:0f:bb:f4:10:96:
         78:01:62:11:28:7d:c4:67:ed:39:bc:bb:6b:2f:45:ab:92:92:
         8a:68:62:40:58:1e:26:0f:fb:a7:79:58:b1:54:a8:21:df:f9:
         29:49:ad:47:6e:df:ae:86:52:d6:86:12:ae:f2:82:2f:10:f3:
         38:ab:fb:e3:1d:9f:9c:f5:79:65:8a:85:bc:55:29:a6:a7:bf:
         2e:92:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:20 2026 by rpki-client