Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          WHxFPZxZkPNmnTBJveZw93v6WQq3PZwvmiIE45EENkM=
Subject key identifier:   D0:ED:08:7A:67:78:0E:48:E0:60:1C:95:6F:93:60:A5:67:80:FA:94
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       019D2997A4D9EC70874AAE6D647DF5739C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 10:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:37 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: pFLAPXItNN2JxaQ574vO0TZoHWicznE00Se2eh4nSUw=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:a4:d9:ec:70:87:4a:ae:6d:64:7d:f5:73:9c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Mar 26 10:01:37 2026 GMT
            Not After : Mar 27 10:01:37 2026 GMT
        Subject: CN=d0ed087a67780e48e0601c956f9360a56780fa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:af:a5:6b:19:07:76:aa:51:a1:b3:1e:9b:
                    8c:5d:31:3a:c0:73:c1:53:ff:13:63:a9:4a:b4:7e:
                    07:6c:95:c1:10:a4:ed:8b:01:ec:18:77:e1:ee:12:
                    b8:f9:ff:85:a9:ef:29:ac:c6:72:f9:10:ea:1f:78:
                    68:66:e7:60:a4:d1:d9:ce:fe:65:31:12:b8:e2:d2:
                    65:98:ae:f7:61:f9:f4:04:89:94:e7:c8:af:83:76:
                    43:f0:ed:23:d2:c2:a8:cf:86:2a:cf:a9:92:5d:a5:
                    4e:a5:07:5e:38:93:e1:9e:da:bd:67:db:4a:06:23:
                    00:dd:a9:55:4c:42:1c:e7:f5:86:92:c3:1c:1c:7a:
                    a0:a3:53:d5:33:34:b1:24:0b:bf:72:31:98:a7:e2:
                    f2:43:ff:1a:3c:6e:16:1b:a8:38:d2:82:f0:ec:dd:
                    32:17:b2:fb:82:36:5d:56:a4:04:82:3c:9e:ac:79:
                    28:c4:70:92:a5:25:74:23:c5:11:e0:d3:59:71:bd:
                    35:1c:50:f7:98:96:fa:ed:cb:83:ef:de:47:ac:3e:
                    eb:09:1b:6e:03:29:80:4f:db:c5:d4:8e:4f:0a:62:
                    cb:0b:45:ba:70:7e:10:5c:62:a7:d4:c3:58:bb:60:
                    9d:cd:5d:90:9c:9d:52:cf:65:bd:37:44:62:02:cb:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:ED:08:7A:67:78:0E:48:E0:60:1C:95:6F:93:60:A5:67:80:FA:94
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:44:11:15:69:e2:cb:0e:86:6b:72:f6:88:65:62:cb:3b:
         e4:7b:97:e3:6b:03:57:66:b3:a6:95:79:81:f4:90:13:01:1e:
         21:a8:b6:33:38:33:64:0f:16:7e:25:35:6c:01:66:da:23:a5:
         88:21:51:d0:38:ee:b3:40:22:0c:d4:d8:1e:23:bd:8a:e0:f5:
         05:f2:ac:ba:8e:09:dc:ff:66:86:c0:63:fc:a0:d0:85:3c:64:
         77:46:25:f2:98:86:73:a0:9b:28:9c:f0:06:28:ae:f6:64:b8:
         e6:79:d7:77:d0:54:86:6d:f6:f9:0e:e2:cf:41:be:57:78:17:
         7a:37:8a:91:50:c2:7c:07:cb:5a:8a:46:36:3a:4d:d2:dc:85:
         27:c8:02:4e:9f:e6:ac:76:6d:ae:90:3b:6b:5a:cf:0e:f2:86:
         e7:45:52:ae:e2:74:fc:8b:72:5b:3f:67:ec:f0:7e:35:e2:27:
         0f:0c:1a:e6:34:30:76:8d:9e:f3:b7:c0:27:e1:68:38:79:4c:
         4a:f4:fc:97:08:ee:bf:d7:5b:8e:f9:d8:a9:d7:28:7c:6c:55:
         29:00:fe:56:a2:fd:f8:12:94:46:af:45:34:d2:c9:d7:63:05:
         97:0b:cb:69:30:e3:23:ca:44:60:3c:77:e3:57:b4:36:cf:0a:
         0d:29:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:36 2026 by rpki-client