Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File:                     3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier:          Q8HzwH13jDOVo4orQN6LHe6jJc3nG3UFQ4ar7tWPdxo=
Subject key identifier:   61:74:3D:EA:4C:24:ED:AB:9F:61:77:35:04:4B:C8:8D:4E:D5:23:03
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer:       /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial:       019EBE47FAE59B0ED1DAF4DB8471C7CE38A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 00:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:48 +0000
Files and hashes:         1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: sqnACNqo+LX6n68reTOj640/vdozlhVvoWSUukT9XQE=)
                          2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:fa:e5:9b:0e:d1:da:f4:db:84:71:c7:ce:38:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
        Validity
            Not Before: Jun 13 00:00:48 2026 GMT
            Not After : Jun 14 00:00:48 2026 GMT
        Subject: CN=61743dea4c24edab9f617735044bc88d4ed52303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:02:2a:cc:73:be:0e:1e:f4:52:f0:e8:f8:
                    01:8c:47:c4:b8:97:34:00:25:70:7b:dc:27:ea:51:
                    af:46:74:7b:1e:bf:b4:38:37:f1:f7:21:2d:e1:ea:
                    54:62:ed:7e:2e:71:27:1a:71:e4:a4:45:e2:45:6d:
                    96:13:7d:c9:ca:99:f8:43:e1:25:fc:53:af:2d:15:
                    80:b4:4a:48:eb:87:5a:35:95:4a:b0:2a:2c:7e:49:
                    28:58:d0:d5:b6:6a:e9:73:d1:a9:5a:42:0e:ee:7b:
                    87:6d:31:6a:a4:d7:7e:5f:db:57:12:09:80:2a:d1:
                    d3:4b:78:d6:9e:64:30:8a:ab:1a:93:04:3f:0b:4a:
                    3e:a5:62:93:1c:34:05:1e:07:b1:98:fd:95:b1:cc:
                    43:47:34:d7:49:5f:10:0e:b9:a9:c0:93:7d:bf:05:
                    0d:88:de:3c:14:30:44:04:60:d1:c0:e1:3b:b6:14:
                    cc:ac:52:65:dd:4a:1c:73:ac:f2:c8:8e:e8:07:ba:
                    c0:59:76:d4:43:23:a9:d2:95:28:98:20:b5:68:cb:
                    e8:cd:4f:46:e7:f8:0d:d0:3c:04:54:8f:3a:a1:3a:
                    47:5a:5b:37:c3:a3:87:72:bc:12:db:97:b3:30:ec:
                    74:30:79:c7:4f:49:09:ff:46:91:a3:9d:2d:56:1f:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:3D:EA:4C:24:ED:AB:9F:61:77:35:04:4B:C8:8D:4E:D5:23:03
            X509v3 Authority Key Identifier:
                keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5b:ba:67:50:c4:dc:ec:5e:34:04:07:8f:f3:8e:3e:10:15:
         2e:02:a7:16:95:2e:d0:ca:1f:2c:dd:16:38:2e:c6:c9:62:ad:
         3b:62:8f:57:65:32:64:60:9a:32:72:87:49:4e:e4:08:f2:97:
         50:c8:49:38:14:23:32:be:b6:13:f5:5c:32:ba:1c:52:87:6d:
         ac:91:04:07:14:e0:52:b4:07:08:cd:03:f6:b9:a2:d9:0d:fc:
         18:ba:5d:5a:4d:7c:3f:a1:ee:28:86:41:fd:fe:cf:92:ef:4a:
         e1:47:ad:aa:2c:0b:01:f9:a9:ae:59:86:f2:30:e9:d8:52:0c:
         c4:32:b4:3d:ca:45:92:9b:2d:15:f0:79:62:f2:f3:fc:a8:60:
         08:a5:15:8e:69:6a:9e:7e:21:7f:c4:3f:d7:a4:c9:e3:69:bf:
         f2:d4:84:57:9e:9b:40:cd:c3:18:37:08:14:4a:c4:1f:4a:16:
         4b:0c:38:76:1a:0a:6b:ba:53:98:05:5f:da:d1:4f:c6:6b:b5:
         ea:0a:b6:a5:b9:9e:1a:3e:56:9c:fb:6a:55:41:15:a8:c4:ee:
         99:42:6f:3f:96:a2:22:1c:80:40:84:63:0f:99:87:40:f5:23:
         d9:79:9f:13:50:52:e6:c4:69:f8:3a:b0:e7:1f:60:c5:5d:f5:
         fb:25:bd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:55 2026 by rpki-client