Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          pU0E66FQdONrh8nUfagDI8UInD1Mp8Wdc9Z+oFaXooM=
Subject key identifier:   59:C8:D6:E9:B2:0D:23:37:57:36:BF:67:4F:7F:EC:26:3F:EA:A9:88
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       019E1E6C43ACDE6F4AA69176E7E8C6738CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 23:01:12 +0000
Manifest this update:     Tue 12 May 2026 23:01:12 +0000
Manifest next update:     Wed 13 May 2026 23:01:12 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: db6ktkyi1nigyn0m/yZytgyD8bjIUlMCyGHNX2MNwss=)
                          2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:43:ac:de:6f:4a:a6:91:76:e7:e8:c6:73:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: May 12 23:01:12 2026 GMT
            Not After : May 13 23:01:12 2026 GMT
        Subject: CN=59c8d6e9b20d23375736bf674f7fec263feaa988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:9c:69:15:8d:fb:7c:6d:ca:94:65:60:2f:
                    5d:89:6d:ea:a1:b2:84:86:a3:8f:df:0d:2c:d6:45:
                    44:36:91:df:4f:33:3e:60:b6:a1:b2:b4:31:e5:5f:
                    c9:7c:27:27:e8:1a:38:01:e8:79:8b:22:0d:34:44:
                    cf:f5:5d:71:44:2a:06:98:5c:8c:bc:06:7e:d3:2c:
                    56:ab:2b:e9:b0:8f:23:50:52:6a:68:47:03:3b:2b:
                    77:76:e2:08:7b:d4:08:05:1a:5b:93:e7:79:8d:6e:
                    9f:f3:04:9a:48:21:4b:ce:45:66:ed:95:02:05:da:
                    0a:e7:45:ae:e1:78:f5:b8:e3:c5:03:9e:95:bd:43:
                    70:1f:04:ca:31:04:ad:11:98:89:b3:12:67:00:fb:
                    31:d7:b9:66:df:31:33:d2:a7:33:e8:42:93:2a:9b:
                    24:6d:08:37:b9:6c:c3:0a:f4:e9:05:98:c2:a4:b7:
                    01:ae:80:54:c4:92:81:4d:7a:af:04:9d:fc:25:3e:
                    43:eb:22:c2:a2:54:18:ea:95:0e:89:b9:12:1c:2f:
                    22:b7:58:79:3f:7a:93:48:0e:8f:a2:d9:43:e4:a9:
                    ea:29:c7:3b:24:e7:76:a2:47:6b:6b:3e:97:58:c5:
                    47:c9:1a:4a:66:4b:8d:b3:e9:38:7a:0a:e8:bf:a9:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:D6:E9:B2:0D:23:37:57:36:BF:67:4F:7F:EC:26:3F:EA:A9:88
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:64:f5:b4:f0:b1:28:b9:c5:fb:af:b2:a3:18:81:8e:a5:
         57:b7:3d:33:6c:c7:78:c2:f7:b7:7e:9e:6d:ac:18:14:2f:07:
         8c:8b:13:0b:b0:a5:13:d2:97:f3:a7:63:dd:2d:a1:d3:78:32:
         00:91:7d:3a:b9:44:93:52:53:3b:2b:cb:c2:ac:91:1e:bc:20:
         b1:3b:e0:e7:bc:c2:f2:0f:f1:2a:5a:ad:fa:58:7c:52:5a:f5:
         ce:d2:6b:2d:38:70:d4:1c:66:96:5d:c9:4b:72:b7:88:12:21:
         d6:5a:2b:6f:12:0d:96:8f:71:ae:16:73:38:ec:60:e8:52:3a:
         9a:38:20:c9:b7:c0:1a:12:db:da:a3:ec:d3:ea:2e:51:5a:e4:
         52:6f:fb:b2:e3:0d:51:a3:e1:1e:bc:9f:bc:31:55:ea:fc:44:
         56:46:5d:4a:ae:3f:d8:1d:e9:82:e6:96:2e:2a:40:ea:5a:0c:
         09:2b:e3:c8:e8:2f:71:6a:d6:6a:fe:90:82:26:9c:5b:24:24:
         79:3c:bf:de:7f:95:a0:a5:16:a6:b9:54:7c:6b:20:00:27:db:
         2a:1f:bf:b3:00:9e:e8:04:60:4a:2e:5b:02:85:d6:1e:bd:b4:
         3d:a5:f4:32:a8:b9:c8:8d:a9:40:48:a7:2a:8e:0e:39:f9:87:
         01:21:96:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:01 2026 by rpki-client