Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          1IjZ2RGLvR9QMzjeOZ7y8OpouwEuiZ1uxn9GMxSAMLU=
Subject key identifier:   50:E1:BC:0D:A1:BB:BB:11:BB:3E:44:06:D8:60:D3:85:13:0A:7B:08
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       019E1BD8FB638B4005E0C98B13EE9810163F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          1906
Signing time:             Tue 12 May 2026 11:01:05 +0000
Manifest this update:     Tue 12 May 2026 11:01:05 +0000
Manifest next update:     Wed 13 May 2026 11:01:05 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: BOr9KabXmT4NQQ2e139EW0K8Tk9qHJc3rOyHCIs5DGI=)
                          2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
                          3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
                          4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:fb:63:8b:40:05:e0:c9:8b:13:ee:98:10:16:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: May 12 11:01:05 2026 GMT
            Not After : May 13 11:01:05 2026 GMT
        Subject: CN=50e1bc0da1bbbb11bb3e4406d860d385130a7b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:2a:46:15:bb:3e:7b:91:35:53:df:df:2c:
                    eb:38:f0:8d:a2:5f:26:d4:73:be:4e:dd:f4:0b:46:
                    03:d9:33:a2:a8:e1:36:76:30:ee:09:37:51:8d:62:
                    dc:be:55:78:23:13:eb:8f:c7:50:fe:f0:d8:2b:56:
                    1c:ab:a6:42:5b:ed:10:94:0a:60:98:ed:8c:9b:83:
                    03:97:47:6e:53:01:dc:49:4b:13:b5:97:02:b4:7d:
                    35:be:54:92:9d:28:55:8e:2f:b4:53:7d:e4:60:45:
                    5e:ea:ea:19:2b:8a:bd:99:a0:4f:31:d1:1e:cb:85:
                    e4:c7:d2:03:68:3b:ae:54:86:52:cc:d7:aa:50:5e:
                    78:ee:f9:af:7c:56:4b:26:1a:87:ee:68:cb:84:4e:
                    d3:aa:47:21:ac:45:b6:dc:65:8d:ad:33:b5:6f:8d:
                    91:fa:9f:95:f7:24:c2:a8:c0:c1:08:4d:38:9a:3a:
                    4f:23:0d:5c:41:46:8a:20:ce:5f:b0:51:90:af:5c:
                    0f:b1:0b:c4:0b:d5:61:a5:7f:d0:6e:35:33:cf:d4:
                    3b:bb:3f:7a:bb:52:0c:7a:48:c6:47:5a:52:02:dc:
                    43:3f:1a:18:8c:02:19:74:de:e6:8a:ae:f7:e9:59:
                    8e:f6:b4:01:7c:05:f9:01:15:08:4d:73:77:b5:17:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:BC:0D:A1:BB:BB:11:BB:3E:44:06:D8:60:D3:85:13:0A:7B:08
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:74:99:4e:91:c0:a4:62:34:4f:73:46:ff:18:03:c1:41:c0:
         02:71:12:a9:5d:57:22:a1:d7:8f:58:e2:73:b7:07:f8:8d:a8:
         18:06:4b:0d:02:26:5b:cc:55:f4:65:60:72:7d:29:2d:94:e0:
         11:1a:c6:d6:57:76:ca:84:7a:f3:3a:82:cb:b5:a9:2e:f5:c8:
         64:5b:a6:01:5b:23:ac:67:ac:56:e3:f3:2d:97:68:f2:76:86:
         fe:63:ae:42:b5:32:e7:07:41:36:d1:bc:5c:78:12:fb:97:f3:
         7c:d4:53:8c:89:c6:cb:2a:11:a1:e4:60:45:95:9d:1c:49:c0:
         18:04:d7:31:62:ae:a6:25:47:5b:e6:f7:f7:64:a9:28:f9:96:
         ea:a8:a3:28:47:d9:27:16:ee:d9:08:c3:9f:48:0e:22:cd:df:
         91:7d:07:67:b6:86:49:bc:8b:d4:c6:f0:39:66:f4:43:24:90:
         ab:d9:b4:87:a4:96:2e:61:cc:4e:85:78:58:a7:02:98:b4:a0:
         7f:fe:ab:cb:8e:65:cc:22:8f:69:c0:d8:3e:73:83:3e:80:8d:
         20:fb:a9:1b:e6:2a:b9:18:a7:c6:da:76:ab:35:50:a6:07:2b:
         3d:85:ee:9c:f0:cf:09:36:d8:27:de:17:e6:90:d9:7e:c1:58:
         81:23:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:53 2026 by rpki-client