Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          mCsoV1nydB47AXdMZLVb10ZJ6rc3JKGCscw5/CK3YKc=
Subject key identifier:   75:81:FD:73:DE:E8:78:12:B3:54:20:7E:24:B8:61:2D:2B:88:16:4F
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       019E1E35D5BBC90F32C12B0C83B35CC6C942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          1902
Signing time:             Tue 12 May 2026 22:01:44 +0000
Manifest this update:     Tue 12 May 2026 22:01:44 +0000
Manifest next update:     Wed 13 May 2026 22:01:44 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: VYPbTLlyUybYbmk4Dp5xtlQNkBFY/g9h1qL9vRBWLtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:d5:bb:c9:0f:32:c1:2b:0c:83:b3:5c:c6:c9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: May 12 22:01:44 2026 GMT
            Not After : May 13 22:01:44 2026 GMT
        Subject: CN=7581fd73dee87812b354207e24b8612d2b88164f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:fc:31:32:09:c6:a6:7e:61:63:05:03:90:
                    20:29:2f:90:40:4b:f2:00:9c:43:0b:48:08:55:7a:
                    04:1a:87:a5:fc:44:60:42:ca:8b:be:26:74:a2:df:
                    fb:e5:27:c4:d6:8d:26:0e:af:f5:4f:8a:1c:05:d1:
                    3d:15:7f:ee:f9:97:80:1d:cf:d5:ef:71:a6:cd:72:
                    1d:b9:1f:5a:4c:00:bd:a2:62:ca:21:16:40:4e:89:
                    4f:18:e0:ba:c8:0d:f4:82:2b:78:1b:80:80:2d:c2:
                    b3:b6:d4:96:53:f1:69:3f:ae:58:7e:9f:67:cc:8a:
                    8c:58:78:37:31:99:55:1a:b5:25:a2:42:9c:98:61:
                    8d:d4:00:2b:3d:1e:13:83:f9:2c:94:67:f1:89:7c:
                    3b:b6:50:bc:51:f3:da:03:de:bc:2f:53:19:d6:80:
                    7d:8c:e1:39:97:70:94:2a:a0:d5:30:41:8e:bd:0d:
                    5b:4d:35:08:d1:8e:80:7d:e1:1c:f6:7c:c8:34:79:
                    9a:85:50:05:41:f1:68:d1:d5:0e:0e:37:73:57:cf:
                    d7:11:0d:d6:dc:21:66:a4:e4:05:5a:71:86:98:26:
                    f7:79:93:b8:44:5a:5c:5a:5a:d6:09:4e:15:05:9f:
                    9d:ff:37:62:9d:0c:d7:4a:8f:70:09:a1:d4:3e:48:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:FD:73:DE:E8:78:12:B3:54:20:7E:24:B8:61:2D:2B:88:16:4F
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:23:84:a2:b8:b6:cb:d5:8b:24:89:95:8d:68:8e:4c:e4:
         78:76:21:e1:b9:9d:e2:0f:8f:19:fc:12:da:94:e2:96:36:09:
         c6:aa:dd:ed:2f:80:3b:20:05:f9:e4:e2:7d:05:8d:50:14:c8:
         95:6c:ee:25:f8:5d:f1:4e:e4:88:4f:a7:07:fd:7b:a4:bc:5d:
         6d:20:43:ee:5d:97:03:95:14:b9:c3:15:08:40:e5:3e:77:16:
         e4:c7:52:45:62:d3:39:fa:83:93:b5:8f:22:82:d4:19:85:99:
         67:e7:8f:4a:a4:16:dc:e6:51:02:09:e3:d9:60:74:d8:dd:36:
         aa:7c:52:76:f7:0e:f5:61:7e:9a:bc:8a:c1:70:87:a6:0c:0f:
         b4:5e:7d:9c:77:fe:a2:1d:5a:37:63:8b:0b:12:b1:8d:1d:71:
         8c:9d:66:38:24:f6:75:77:71:d1:25:f9:ff:39:ba:e6:ab:35:
         54:19:57:cb:fb:cb:6a:55:c8:01:7c:f8:8b:c6:8f:e5:b2:09:
         77:64:19:64:2c:b1:a8:d8:71:a2:7e:8f:b2:f7:27:6e:5b:4f:
         43:a7:8c:0d:83:eb:62:35:50:ed:01:ac:94:9d:44:bc:45:fc:
         61:38:6f:fb:5a:c6:cb:07:88:4c:aa:55:0e:42:fe:11:45:63:
         d5:9a:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:05 2026 by rpki-client