Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier:          p4aAYr+6JZ/ewMv2EN2svK80GeLlb0zS3u/4YOxCa+M=
Subject key identifier:   17:73:BD:F6:C2:91:09:15:E0:38:51:51:23:60:1A:2C:7C:B4:64:07
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer:       /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial:       019D25BA4DBF6AAA5E8B61796577E138B44E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number:          17FD
Signing time:             Wed 25 Mar 2026 16:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:59 +0000
Files and hashes:         1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: Gvemi958aDyJMDNqslkTXHRJEML1e+eEQtFlWZ71gQs=)
                          2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:4d:bf:6a:aa:5e:8b:61:79:65:77:e1:38:b4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Validity
            Not Before: Mar 25 16:00:59 2026 GMT
            Not After : Mar 26 16:00:59 2026 GMT
        Subject: CN=1773bdf6c2910915e038515123601a2c7cb46407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:d5:b7:d3:ed:66:4a:03:ba:14:bb:d2:e3:
                    e4:cf:76:18:70:37:95:6f:7c:f2:a2:5c:84:b2:f2:
                    20:f9:75:8c:ff:14:d4:11:69:c8:88:a6:9f:00:cb:
                    c5:bb:4f:fb:19:7a:f3:50:72:78:cb:05:d6:0b:68:
                    19:b9:3d:8d:91:2b:37:dc:85:2c:0c:ef:30:7c:d2:
                    82:8f:0f:50:ad:db:c8:ce:b4:15:30:ae:c6:64:85:
                    ed:1e:06:2e:2c:22:78:ae:7e:49:73:27:f5:db:2b:
                    0e:f5:26:99:38:4d:1c:ea:91:ab:35:9b:ce:48:92:
                    fd:10:be:65:35:32:5b:06:e0:f3:1f:bf:c7:61:af:
                    cd:63:d3:07:22:2a:97:1d:0a:5c:6a:9a:be:9c:d8:
                    af:b2:99:b7:20:39:85:b9:f5:91:3c:b4:0a:c9:69:
                    88:bb:06:1b:e7:87:53:62:91:bd:0c:38:9c:1d:cd:
                    96:92:4f:eb:84:be:65:5d:a0:ee:98:3f:c9:16:a3:
                    b7:ec:66:36:ae:8e:29:be:88:d3:cd:60:3e:28:1d:
                    c8:1a:6e:82:06:1f:9c:45:b9:80:50:b7:2a:83:75:
                    d6:4f:45:5d:f9:59:5a:f3:59:51:40:3c:0e:65:e1:
                    c3:d2:f6:cb:1b:95:41:a2:62:8e:00:32:2d:ee:23:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:73:BD:F6:C2:91:09:15:E0:38:51:51:23:60:1A:2C:7C:B4:64:07
            X509v3 Authority Key Identifier:
                keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5e:3f:6b:1b:04:90:f0:2e:65:fc:3d:e2:7a:b8:49:3a:66:
         b1:bb:54:31:98:22:1f:95:b8:41:e1:fd:86:d9:47:80:c3:bd:
         c8:9a:3a:76:26:b7:7b:cf:19:b5:49:e2:be:34:6b:70:9c:35:
         c0:52:fe:00:55:8e:4a:2c:d4:d2:e3:fa:81:bb:b7:4f:bb:ba:
         e7:ae:c6:83:37:bc:57:c1:4e:de:05:49:19:93:74:04:d2:88:
         3a:2d:2f:98:40:bd:f0:a6:30:8f:45:b5:8e:34:0a:eb:e2:c0:
         b2:c0:d6:09:99:e3:f4:68:0d:e3:e8:ed:b3:27:07:19:b6:9a:
         38:81:bf:24:9f:49:2c:8e:bf:4c:37:d6:6c:1b:0a:e5:2d:cc:
         df:fc:a5:f8:c1:bc:8e:76:9d:62:2d:d7:25:6e:b7:3f:44:0b:
         f0:45:f0:33:68:ee:dc:51:6a:b3:8c:4c:50:96:ff:93:99:7c:
         12:fb:c3:7d:bc:41:eb:80:4b:c5:be:8c:bf:b1:7b:da:f9:d2:
         88:bd:4c:ae:73:04:20:a2:22:a1:f6:e5:de:a9:9a:bf:fc:83:
         a2:c1:2f:e2:98:de:c6:ed:31:1e:c9:67:2a:28:2e:8d:f4:ba:
         b0:c2:08:7f:ce:1f:e2:6f:59:34:68:e5:42:23:db:09:61:6a:
         4e:35:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:20 2026 by rpki-client