Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          eLkWdAklRQd6yUPBraLnpTbI5Yh4lZVgCjH8+MsNLl8=
Subject key identifier:   66:27:52:46:3E:3A:09:79:FE:E4:BA:02:C0:10:6D:18:90:6E:10:25
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       019E1D224ED30EB0BDA18F77B8B80C9E0677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          0ADB
Signing time:             Tue 12 May 2026 17:00:48 +0000
Manifest this update:     Tue 12 May 2026 17:00:48 +0000
Manifest next update:     Wed 13 May 2026 17:00:48 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: h8LVg3ETfblqbwM9eqwEzlxH4PmgKZEnmkllFdtg+0w=)
                          2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:4e:d3:0e:b0:bd:a1:8f:77:b8:b8:0c:9e:06:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: May 12 17:00:48 2026 GMT
            Not After : May 13 17:00:48 2026 GMT
        Subject: CN=662752463e3a0979fee4ba02c0106d18906e1025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:8a:e6:4c:18:bc:92:53:37:0f:af:c3:8a:
                    73:9e:f6:e6:b4:36:24:cc:f8:13:6b:c5:3d:98:31:
                    12:cc:bc:23:ae:39:89:ba:dd:ec:44:43:a2:dd:a9:
                    12:f1:83:2a:69:3e:fd:be:90:eb:0e:31:b7:0b:18:
                    7f:32:81:f4:9b:df:05:5f:47:d1:2f:a4:36:9a:4e:
                    4d:80:9c:44:fd:7a:62:0e:ee:8a:29:e6:fc:88:d8:
                    98:64:a3:5b:51:18:ed:02:f4:84:4a:f3:b9:a3:8c:
                    62:3b:f4:0a:45:ba:3b:1a:11:96:f4:1d:cc:9a:b8:
                    6b:e0:4d:fc:4b:40:ef:c5:38:c2:48:c0:4e:ba:a1:
                    2d:08:09:dd:64:53:0b:3d:23:9b:13:40:ca:50:03:
                    e3:2d:4e:44:bb:85:8e:1b:d5:ab:e2:b9:dc:89:8a:
                    cb:d8:85:6d:3f:71:4c:df:12:0d:84:b5:08:b9:44:
                    e2:30:83:77:00:4e:0d:7d:22:e5:c9:7b:09:34:fe:
                    86:1a:2b:39:53:74:28:90:f4:b0:5f:c7:87:ba:85:
                    4d:f2:60:68:76:88:f2:e6:04:27:36:04:c6:b4:88:
                    52:80:3b:e3:eb:dd:d2:77:e3:c3:88:05:9c:5b:31:
                    32:05:80:df:c4:d7:cb:6d:de:0a:a4:59:67:6c:fd:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:52:46:3E:3A:09:79:FE:E4:BA:02:C0:10:6D:18:90:6E:10:25
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:3b:f6:13:5a:79:bf:2b:73:bc:1a:f0:01:70:8a:1c:8b:
         9a:6b:09:34:f5:7b:c0:c4:09:e5:e0:e6:df:66:fe:be:3b:3e:
         b9:69:a0:09:c2:67:2e:13:2a:76:0b:89:a1:6a:15:ed:4e:e6:
         4c:da:c6:ef:ac:a6:56:a0:83:85:b1:b8:53:01:77:0c:a0:26:
         f1:d0:6f:fa:cf:8a:98:f5:e8:2c:85:0e:ee:02:06:b9:3b:b5:
         c4:a2:50:88:67:f2:1f:88:59:c7:52:3c:19:57:d5:c6:ce:86:
         89:bd:57:64:0a:a7:88:d4:c2:2a:cd:e1:67:10:a7:ed:3f:ac:
         db:e8:73:84:b6:96:fb:74:1f:2b:6f:b9:62:30:0b:19:53:8f:
         47:39:f4:54:c4:5d:66:8f:00:ee:dc:8b:36:33:3a:0c:83:6f:
         f6:77:56:b9:e4:8b:7e:05:da:3f:a1:15:5a:57:2d:87:8b:04:
         bc:3b:8d:b2:67:92:e2:6f:74:d0:92:ca:24:f9:0f:0b:50:b9:
         a6:b4:26:39:e0:21:dc:16:33:6d:e2:3d:52:ae:93:d1:6a:81:
         49:02:3f:2a:8a:71:77:87:9c:14:2c:3d:23:b9:41:6b:91:a3:
         fb:f4:dd:fd:ec:82:e4:75:30:54:ad:ff:f1:25:58:bb:02:5d:
         61:26:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:07 2026 by rpki-client