Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File:                     3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier:          /gemKv0qIw4FFkS/yqZ5lKc1PwnE7W0LE5Daf/NNg2A=
Subject key identifier:   19:51:C8:B1:25:D4:40:42:93:C4:92:F9:17:0E:49:8C:90:9F:78:DF
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer:       /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial:       019E1F10EB5430E2994A6D63A97BFA88E7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number:          0F62
Signing time:             Wed 13 May 2026 02:01:02 +0000
Manifest this update:     Wed 13 May 2026 02:01:02 +0000
Manifest next update:     Thu 14 May 2026 02:01:02 +0000
Files and hashes:         1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: zzJko7H5IpcGR4XyzdKX412l+il3lg94NXC4Dpl2KvI=)
                          2: v4jlzQPH9B19BgnawF1RP-229sY.roa (hash: b4H5XHOj6d5z6OnvgwQoCpKZ6CNBYc2Lt4zW82aMu4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:eb:54:30:e2:99:4a:6d:63:a9:7b:fa:88:e7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
        Validity
            Not Before: May 13 02:01:02 2026 GMT
            Not After : May 14 02:01:02 2026 GMT
        Subject: CN=1951c8b125d4404293c492f9170e498c909f78df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:c9:c3:ef:59:77:72:1c:b2:f2:13:32:f5:
                    5d:63:0d:9a:27:34:de:1e:9d:cb:8f:a8:71:5d:dd:
                    30:79:6d:0c:b9:c4:b1:b8:42:83:00:c2:18:fb:13:
                    12:42:b3:64:76:51:a4:45:93:72:18:68:d0:e7:b3:
                    21:f0:80:e2:b6:9c:a8:05:e9:4b:e4:27:b3:7e:a0:
                    d7:e8:8f:4a:05:0a:52:12:02:50:14:4c:5f:82:7a:
                    56:4e:d3:56:99:5e:5a:12:9e:d7:d5:d8:aa:3b:80:
                    45:bf:33:ff:9f:40:b7:90:2b:00:14:a2:d6:33:01:
                    e1:c2:56:eb:6d:d0:2e:cc:c6:97:01:5a:8d:6f:ae:
                    2a:02:44:27:11:c3:5b:70:69:95:6e:a2:dd:11:00:
                    93:46:35:ac:1c:dd:38:96:79:2d:ca:3b:63:34:55:
                    cb:22:36:38:ba:ae:6d:2b:f1:e8:76:05:4b:5f:0d:
                    f7:d3:df:a1:a7:3f:62:12:d8:70:9a:4d:38:d7:e0:
                    74:61:5e:ea:d3:cd:02:35:bf:58:cf:26:83:f6:40:
                    bf:78:74:90:79:dc:41:fa:9e:57:0e:b7:d7:4a:5e:
                    1a:7b:f5:70:18:ec:eb:80:ba:d7:21:5a:96:70:11:
                    8c:b4:1e:98:97:8d:9c:66:9c:58:5c:6a:c0:cb:1b:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:C8:B1:25:D4:40:42:93:C4:92:F9:17:0E:49:8C:90:9F:78:DF
            X509v3 Authority Key Identifier:
                keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:19:4e:22:16:ac:c8:85:9b:ea:ba:05:37:79:5b:2e:79:
         94:6b:a2:11:02:f0:0d:55:f7:9d:1f:b5:54:c4:84:82:80:55:
         99:6d:7c:0b:b9:59:f2:5a:ae:b2:a6:7d:83:1a:28:db:67:94:
         ee:93:84:74:11:c4:96:c3:8c:04:ab:ac:58:ad:d0:40:82:45:
         eb:31:a8:7a:ca:d6:f7:03:6b:f4:b7:77:64:34:ae:29:85:a8:
         c1:6a:f3:49:11:48:21:23:8a:c4:ad:2b:73:b8:fb:55:99:bc:
         1a:62:77:56:27:64:76:de:bb:d5:ee:50:16:ab:2f:b2:a0:10:
         c0:ba:6d:88:7d:5f:3d:7e:53:8d:50:26:a2:73:38:42:27:4d:
         70:4b:ac:41:6f:b0:b4:44:2d:d5:f6:23:44:25:5d:1b:aa:c7:
         c9:0f:df:37:c0:ca:92:94:24:62:c9:6b:81:09:59:c2:7a:08:
         f4:40:4c:c8:87:d9:2b:c9:21:0f:be:49:2d:ff:8a:9f:49:85:
         e0:7f:d5:b5:23:4b:4f:ce:76:92:fb:ee:b4:c2:0e:8a:a0:a1:
         44:b3:a9:5a:55:84:b3:f6:10:b5:07:da:a0:46:fc:ba:30:b8:
         0b:a7:1e:c9:51:6a:f4:32:41:22:91:32:fb:ca:5a:a9:a9:f0:
         57:54:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:56 2026 by rpki-client