Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          O2gHIn51cN4DMikhXfjYMOBA+GNluMrVBT1fMfSYfPw=
Subject key identifier:   5F:71:0B:9A:A9:F5:21:12:97:3D:5F:F2:33:B2:78:72:81:26:67:61
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       019EBEED37C5BDA94A37A912677EE0F10F03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          0F89
Signing time:             Sat 13 Jun 2026 03:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:17 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: lLuMCY45SpGU1fcGHPhN1o6PwcrlGiOSQK4Dc/6biTw=)
                          2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=)
                          3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
                          4: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
                          5: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
                          6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
                          7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
                          8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
                          9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:37:c5:bd:a9:4a:37:a9:12:67:7e:e0:f1:0f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Jun 13 03:01:17 2026 GMT
            Not After : Jun 14 03:01:17 2026 GMT
        Subject: CN=5f710b9aa9f52112973d5ff233b2787281266761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3c:cb:de:5c:5d:30:fd:2a:44:1a:17:22:e4:
                    be:97:28:2f:c5:37:9c:d7:e4:01:79:61:ce:f2:cf:
                    23:b7:45:06:27:3f:b2:2a:cb:6f:bb:df:de:d8:80:
                    ae:95:9d:03:9d:52:f9:97:7d:2f:90:e6:67:72:54:
                    63:bc:59:97:c1:56:ad:33:72:93:ec:81:4c:79:49:
                    60:f8:47:e5:b4:20:32:b0:fc:18:d2:19:b1:b2:9c:
                    23:6e:cf:d5:2c:06:a9:4e:3a:04:8f:f3:72:8a:4d:
                    07:6e:52:03:09:a4:7d:b1:77:a2:a4:6a:b0:53:b8:
                    08:d6:9f:da:b6:01:ba:41:0e:60:50:c4:fe:cd:8f:
                    2e:f2:15:42:a8:ab:2c:d9:4f:0c:fd:94:03:26:40:
                    ea:46:ea:91:fd:d1:b7:ab:e1:35:04:6d:b6:13:70:
                    15:9a:30:1c:6a:19:51:35:3a:4b:ff:84:f3:0e:89:
                    11:c4:a0:6f:9c:b9:17:a4:7e:07:d2:84:8b:de:39:
                    39:1e:92:e7:96:e1:75:ae:87:7d:b0:36:82:fd:cc:
                    32:2d:42:2e:41:83:ca:c1:0f:cf:43:50:9f:7e:50:
                    70:0a:2a:8b:13:7b:ca:d5:25:19:c7:e7:fb:ef:ac:
                    4d:ef:ff:26:e2:b4:d2:3e:6a:f4:fc:94:02:32:9b:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:0B:9A:A9:F5:21:12:97:3D:5F:F2:33:B2:78:72:81:26:67:61
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:35:76:bf:1f:f7:0f:76:db:4b:d0:11:82:69:c2:8d:15:
         31:36:bc:8f:96:fb:db:6e:39:54:70:45:d8:ee:fa:48:69:d1:
         18:05:f8:ca:67:ee:32:82:41:dc:8c:dc:ca:63:da:f9:a1:35:
         92:ae:2c:c5:1a:03:f1:d0:e0:fb:88:e4:4d:b3:5b:48:15:0a:
         b5:3b:b1:35:0d:25:71:8e:00:98:18:a6:c1:d9:3d:95:c7:5f:
         39:fe:48:44:15:14:58:f4:6b:49:d5:b7:da:d7:5e:44:bb:0a:
         af:b1:5e:d3:17:0e:96:12:be:3a:d5:f1:ce:e9:eb:98:dd:4f:
         7d:85:25:53:68:98:45:40:33:91:e7:68:42:26:b3:be:ac:fc:
         5a:00:d1:a9:7c:dc:4e:95:58:20:5a:be:c5:f8:86:5c:45:3d:
         ef:0e:9b:15:55:61:fc:75:ac:0d:60:01:ef:6b:15:a1:35:84:
         df:06:a5:ef:57:39:ba:1e:be:9b:a2:a2:bc:d9:80:bf:52:9f:
         f5:4f:2e:41:21:0d:19:c7:b7:c3:9e:3e:a3:a8:08:da:09:ca:
         0b:5c:6f:cc:1b:aa:d2:bd:c7:2a:36:b9:36:14:d3:c0:29:49:
         07:8d:f3:ff:c4:d1:30:8f:8d:e0:1d:12:a5:69:16:f2:73:86:
         84:7c:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:59 2026 by rpki-client