Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File:                     b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier:          WoP09d3E/bO+01eTJ82+WZn032NrlmmZcxab+5YPt/Y=
Subject key identifier:   3D:C2:19:D0:5C:34:4D:AC:B5:97:13:69:18:B2:A3:29:92:F4:E0:4F
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer:       /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial:       019E1E35E741819A0D7552B5D0552CE4325C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number:          02B7
Signing time:             Tue 12 May 2026 22:01:49 +0000
Manifest this update:     Tue 12 May 2026 22:01:49 +0000
Manifest next update:     Wed 13 May 2026 22:01:49 +0000
Files and hashes:         1: DaJESnUPstRnvc8gyVuGJJGAc7Y.roa (hash: XZbUEMnqmV6tcLHU8cRnDGbe97bObMl8R2ndAHcyFi8=)
                          2: FNDjx2az9tCR_VzC5TbRTJVU45M.roa (hash: P36YaarhMgLgB/2+d+QXhzMEz6mV4aOY72ihhGMy3DY=)
                          3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: yAIL483fIbtRB+Q9CQAtSynOHK7FfRY3h9dKeW62GjY=)
                          4: mdu3xdhyXhJdxS8EEEljr-DR8go.roa (hash: rnQ2hZVq/YedWUKl/nEjRuy3KybsEEgeJU8EAN9cR0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:e7:41:81:9a:0d:75:52:b5:d0:55:2c:e4:32:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
        Validity
            Not Before: May 12 22:01:49 2026 GMT
            Not After : May 13 22:01:49 2026 GMT
        Subject: CN=3dc219d05c344dacb597136918b2a32992f4e04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:86:88:43:ef:1d:23:95:d0:9d:d1:8e:62:
                    69:7b:0a:f3:13:c3:f5:50:a9:07:89:bf:04:0c:07:
                    a9:68:a3:74:13:ba:9b:7b:f7:47:49:47:28:6b:73:
                    14:06:c3:c5:03:ec:5b:bf:18:38:92:b7:20:56:f0:
                    6b:e0:fe:ff:6c:e5:7b:fb:8d:5d:6a:5a:9f:fe:0c:
                    2a:d2:cd:98:84:65:fa:fc:b7:02:a5:3e:c4:52:10:
                    d4:b3:88:1c:b9:1d:dc:ed:98:de:80:89:20:5c:3e:
                    81:e6:cb:32:bf:8a:e8:42:3c:6a:8e:06:9c:53:f7:
                    ee:ae:f3:e5:af:c2:e6:fb:84:48:54:9b:96:61:fa:
                    57:bc:21:4c:5e:7f:6c:3d:1f:8a:1c:9c:91:97:ce:
                    7b:65:8f:db:f0:97:12:6b:03:a3:06:ce:4a:4d:be:
                    c6:72:0f:3a:96:0d:82:1d:ae:b7:47:b7:fb:9d:2a:
                    a0:48:dc:93:ab:0f:47:2a:68:84:60:13:2a:02:62:
                    82:97:11:62:77:29:5b:1c:96:28:c8:45:b2:fa:f7:
                    10:2a:ce:d9:fa:7c:72:f5:2d:e6:68:4f:d7:12:3f:
                    1b:0a:ed:84:8a:86:83:88:20:91:25:56:d8:9a:7d:
                    bc:d5:8b:3c:61:1c:e7:20:a2:b7:71:9f:57:b6:f6:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:19:D0:5C:34:4D:AC:B5:97:13:69:18:B2:A3:29:92:F4:E0:4F
            X509v3 Authority Key Identifier:
                keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:8c:f8:11:a8:29:e6:12:ce:d0:58:8f:f7:18:fe:c2:3e:
         ef:53:cb:65:3d:34:17:f8:cd:46:72:d4:3d:a0:89:a5:db:00:
         82:14:b5:31:c8:9d:5c:bf:ec:55:1a:f9:9b:d1:6c:63:9a:ab:
         cf:e7:11:e1:1c:9b:75:d4:15:99:9e:ad:d3:07:7b:8c:6d:dc:
         c7:42:b3:60:7c:9a:76:2b:8c:63:7d:89:ac:2b:bb:23:9d:af:
         c0:41:52:df:78:7c:ed:1b:5e:d7:56:e8:7f:30:5a:cf:6d:96:
         ee:bb:73:74:c2:0d:97:39:8a:38:d1:40:d1:03:32:ab:74:67:
         1f:53:df:2d:5a:74:4d:0b:bf:fd:ca:90:3e:63:0d:5d:d3:68:
         ef:7b:03:39:24:86:19:e8:25:ef:2a:28:a0:26:6c:0d:15:66:
         c4:d4:b3:22:6f:30:24:a0:0d:bb:80:91:a2:d2:1d:9f:95:af:
         22:e2:4e:ee:30:5d:08:6b:53:6a:84:15:6c:35:9a:5a:8f:04:
         b0:2b:e6:89:18:2e:4d:8c:ed:5c:e4:40:e5:13:aa:75:55:db:
         27:2f:80:aa:dd:12:55:52:31:38:b3:22:8c:ba:1a:01:b4:02:
         eb:f7:d9:c8:f3:1c:5c:bd:06:e4:d0:97:f6:b5:55:db:e7:15:
         9b:f3:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:26 2026 by rpki-client