Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
File:                     eA-Kp9juLNFxq6aAElVCf5qr5UY.mft (raw, json)
Hash identifier:          mQCLs4EkZD4YHMJd0MBdPl/Xj2piGD5qRcDFm3Aw7rQ=
Subject key identifier:   33:13:F3:9A:FC:87:36:F9:13:68:4D:60:54:6E:C6:F7:0F:8A:FF:B5
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Certificate issuer:       /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial:       019E1D59784EDBD9BE505B86ECDD4C273417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
Manifest number:          3B
Signing time:             Tue 12 May 2026 18:01:03 +0000
Manifest this update:     Tue 12 May 2026 18:01:03 +0000
Manifest next update:     Wed 13 May 2026 18:01:03 +0000
Files and hashes:         1: 7JrvDNG8oGw0RmNvLIxWBX3TSpo.asa (hash: klva+5TPMuYVnGfJMNENaMHwwVk+KQKe00ezvPZgP+0=)
                          2: eA-Kp9juLNFxq6aAElVCf5qr5UY.crl (hash: 4jtHK4/R6GQ13t6495yUetPSDEE+YGf1mpiEy98nNQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:78:4e:db:d9:be:50:5b:86:ec:dd:4c:27:34:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
        Validity
            Not Before: May 12 18:01:03 2026 GMT
            Not After : May 13 18:01:03 2026 GMT
        Subject: CN=3313f39afc8736f913684d60546ec6f70f8affb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:69:b2:c6:09:49:75:2c:b9:29:a1:cf:e9:
                    da:20:65:6d:95:e4:2e:e1:a5:17:dc:04:65:bc:89:
                    e3:c5:96:88:11:8d:51:20:f9:ad:18:b2:6d:93:55:
                    56:26:57:63:65:a7:ec:2b:42:9e:e9:00:6c:4f:7a:
                    07:2f:f6:82:a0:33:ad:4d:2a:45:90:65:17:92:96:
                    42:70:19:c6:19:6d:30:1b:ad:73:6f:92:24:14:71:
                    20:0d:86:36:71:0f:21:5d:79:15:37:9f:20:d0:4f:
                    db:a8:a1:5b:19:5b:aa:26:50:1a:12:c0:68:ae:32:
                    be:01:9b:75:ab:04:54:19:01:71:83:9a:84:74:93:
                    87:54:fe:0d:d8:38:86:19:23:59:d7:59:d8:6d:46:
                    78:62:e8:e2:3d:8b:56:e7:85:8b:ad:a2:02:1e:12:
                    3a:eb:b3:4b:84:04:81:4c:ad:6f:56:6e:10:e3:f8:
                    f1:ac:91:96:75:79:d2:85:b9:7d:13:d1:93:58:41:
                    14:3c:a7:5c:d7:e5:bd:68:c8:42:81:56:7f:b0:e7:
                    10:e9:cd:3b:4c:c0:ad:c5:02:4c:20:e8:70:04:a4:
                    77:8c:4c:7f:1d:6b:03:02:ee:16:32:4e:7b:fa:8f:
                    9a:fb:2b:f4:e1:b9:39:5d:ff:9b:d8:21:b8:31:e7:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:F3:9A:FC:87:36:F9:13:68:4D:60:54:6E:C6:F7:0F:8A:FF:B5
            X509v3 Authority Key Identifier:
                keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:84:be:21:31:66:69:9f:2c:7a:6e:19:de:ac:e6:d0:b9:2a:
         20:a3:ed:44:75:6f:8a:eb:f9:bf:34:4b:dc:2f:2a:09:73:67:
         f9:05:a9:8d:2f:7f:43:9a:ee:50:38:b7:1e:3a:b4:ea:58:86:
         6d:f1:db:8c:47:70:51:57:3c:9b:a4:03:2d:74:85:68:4f:ec:
         65:b1:a4:51:d2:56:ee:4b:77:52:33:5d:d8:39:78:b2:83:1b:
         d3:ed:77:7d:52:b6:50:a8:9f:2e:d1:70:47:9e:33:2e:6d:c7:
         b9:43:2f:36:19:c0:86:07:4e:dd:8e:73:8c:11:85:23:83:c5:
         88:eb:02:b6:b6:6b:82:6f:48:c2:32:6b:95:c9:fd:40:46:f4:
         8f:f0:75:fb:4c:d9:5a:a3:dc:43:da:f7:65:92:ad:61:ad:31:
         51:d3:b4:c7:54:ab:0c:3a:27:01:f8:61:54:ed:29:2d:d2:34:
         a9:01:c0:9c:c4:24:b4:9f:65:8a:51:a5:b7:8a:3f:05:7f:0e:
         ab:03:fa:12:35:20:41:09:fe:42:c8:cf:04:17:ef:73:00:41:
         59:2e:a0:e6:61:2a:97:10:3a:8a:4b:c9:d1:70:07:66:28:30:
         19:14:91:1f:36:6c:69:78:e1:53:6f:e0:cd:34:0e:79:58:38:
         47:d9:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:18 2026 by rpki-client