Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File:                     3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier:          IuK/Tb5tgpGpfnkq9XI9ZqOpsqpHMUWs0hFtkE2cCFw=
Subject key identifier:   74:0C:E8:8F:B3:98:43:62:1B:57:6C:C1:7E:F1:CA:F8:1C:DA:A1:A8
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer:       /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial:       019EBE7EEE3D31BC79D12D4C2BEF545D3824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number:          1174
Signing time:             Sat 13 Jun 2026 01:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:49 +0000
Files and hashes:         1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: hncATYhR/9LGQbIrEEAqN+Z6lQIhm0ng/h2dZd17m2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:ee:3d:31:bc:79:d1:2d:4c:2b:ef:54:5d:38:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
        Validity
            Not Before: Jun 13 01:00:49 2026 GMT
            Not After : Jun 14 01:00:49 2026 GMT
        Subject: CN=740ce88fb39843621b576cc17ef1caf81cdaa1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:25:bf:47:fe:56:48:6f:0e:f3:79:83:cb:
                    9f:ef:21:da:1a:73:36:22:51:fe:18:15:52:c4:04:
                    b8:63:7e:a3:23:6d:61:4a:fc:37:36:bb:c6:53:cf:
                    09:0d:68:df:4e:f7:7c:4d:6f:7a:d7:a4:18:ee:e3:
                    d1:a8:7c:8f:ca:ef:4c:0e:57:bc:02:4e:e7:4a:e4:
                    7d:31:57:e7:de:95:59:22:00:84:b1:27:29:50:c1:
                    59:ef:9e:68:74:01:88:23:1d:bd:79:53:cb:c6:a0:
                    c4:32:f6:8e:6b:17:cb:3e:3d:c3:8f:df:03:51:a4:
                    93:5e:5e:d6:74:0f:2b:71:c5:ea:94:43:6c:92:45:
                    48:fd:97:62:d7:a9:27:7c:7d:79:00:6d:e9:eb:b4:
                    03:0b:8e:75:3b:82:cc:d4:16:1c:60:6d:ee:d1:37:
                    f4:4e:d9:25:7c:b8:90:dd:55:a9:56:18:7c:ef:3e:
                    3a:7d:e1:23:5c:67:1a:34:32:93:e6:ad:31:20:bc:
                    78:e0:5b:04:85:90:cb:8a:b6:7b:85:fb:84:ae:bf:
                    01:11:94:31:1d:82:2a:cb:2f:a6:09:46:52:6d:3c:
                    2a:e9:25:58:87:ff:2e:80:ef:84:1d:c6:81:e3:92:
                    20:10:25:48:03:e5:38:f4:06:27:21:f0:32:56:37:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:E8:8F:B3:98:43:62:1B:57:6C:C1:7E:F1:CA:F8:1C:DA:A1:A8
            X509v3 Authority Key Identifier:
                keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4b:cb:36:d6:3d:60:41:85:7b:9e:8c:93:cd:ed:fa:16:89:
         80:1f:3f:ad:c9:42:39:59:33:0f:17:31:c1:30:56:b0:9d:2c:
         30:54:81:70:73:28:d3:a6:95:d8:1e:7b:f3:4a:ee:73:87:27:
         18:99:e4:c3:52:b7:54:09:57:25:da:99:fb:0d:91:0d:9d:39:
         b5:73:3f:d2:3b:ee:c7:21:06:04:74:94:ca:7e:e2:91:63:33:
         99:3c:9c:b2:b5:9e:3e:88:cf:e6:aa:72:08:1f:e4:00:66:55:
         91:bc:59:18:bc:cd:99:f8:47:d1:fe:e9:e3:3a:43:86:7e:b5:
         d4:15:c9:4c:fe:a7:dc:58:4f:1e:0d:01:53:8b:79:6b:a8:e1:
         d4:c4:c8:de:ac:e7:ae:80:01:90:3f:c6:c2:40:ae:d0:cb:4b:
         d8:e4:d6:d4:43:e4:1a:d2:16:a7:38:b4:a7:65:e8:82:09:7b:
         4c:b6:d6:cd:74:78:ff:50:ea:c2:09:43:27:35:07:97:29:86:
         f8:4f:59:c5:42:18:e0:d6:37:3a:f8:5f:af:34:a4:eb:63:d9:
         0e:66:e9:f1:fd:6e:c4:f6:1c:55:e6:36:2e:4d:e8:2f:bc:9b:
         4c:01:e2:2c:42:83:54:ec:2c:7b:aa:94:2c:77:f9:85:6d:a4:
         ee:ae:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:15 2026 by rpki-client