Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File:                     3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier:          qwNBPPMWI9TPTV8OdDlARrALz7dnGH5Es+ih4rWOaJ8=
Subject key identifier:   C0:C0:65:3C:92:1A:E2:06:1B:B4:FE:CA:8E:5B:B2:06:E4:59:4D:7D
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer:       /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial:       019FAB633654BA15C0CCDE80F4A58DEA8204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number:          05D5
Signing time:             Wed 29 Jul 2026 01:00:33 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:33 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:33 +0000
Files and hashes:         1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: p3191jfUTRmKspuxwt4DSzeIM12RxPtF8nADTt4kYnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:36:54:ba:15:c0:cc:de:80:f4:a5:8d:ea:82:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
        Validity
            Not Before: Jul 29 01:00:33 2026 GMT
            Not After : Jul 30 01:00:33 2026 GMT
        Subject: CN=c0c0653c921ae2061bb4feca8e5bb206e4594d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:19:24:59:84:34:90:57:49:83:2a:f0:f2:
                    5f:ef:d3:0e:60:73:79:3f:de:3b:8b:0e:09:da:87:
                    00:da:11:5e:20:07:01:01:c8:9b:4b:5d:62:5d:c1:
                    4b:ae:17:1d:e9:3b:67:05:c7:9b:21:d4:c3:a3:76:
                    1a:ae:35:96:43:77:0a:f4:34:66:66:51:e3:ae:1f:
                    ce:c6:dc:ad:d4:36:a9:72:f2:6a:e5:31:91:87:5b:
                    16:01:37:d4:3c:72:92:01:82:21:6e:19:65:29:bd:
                    2a:f0:5d:38:a7:30:b5:72:dc:8e:ff:26:61:e2:30:
                    35:ef:c9:19:0f:35:8d:4c:36:1f:65:d2:60:e8:2b:
                    1d:3e:7c:23:45:a0:5e:d0:9c:b7:2c:23:87:37:73:
                    e0:e2:05:88:d5:aa:8b:3f:d5:9b:0b:d2:08:c8:7a:
                    8e:8c:eb:b5:55:cb:58:2a:71:78:a2:71:89:71:26:
                    10:c2:67:6b:96:52:16:8b:6e:cd:b9:08:df:76:b6:
                    25:9a:6f:ce:d3:c5:d6:98:4f:07:59:f3:54:98:34:
                    5b:c5:1b:1c:bb:7a:76:53:84:57:be:09:1d:b4:df:
                    e7:0a:e6:c0:e3:99:5f:69:c9:18:74:76:9b:17:ea:
                    27:e4:21:3d:ad:88:95:b0:4e:e0:d8:c6:07:66:ef:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:65:3C:92:1A:E2:06:1B:B4:FE:CA:8E:5B:B2:06:E4:59:4D:7D
            X509v3 Authority Key Identifier:
                keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:c8:ec:58:05:d8:ef:c1:8a:c8:7c:34:ba:53:53:32:32:
         50:ee:43:5c:7d:60:98:b0:2c:97:75:8b:f5:38:f1:be:5b:1e:
         ff:bc:41:f8:8a:59:51:ba:c3:15:3a:40:68:9d:90:84:e2:15:
         c9:9f:ee:36:98:7a:11:76:5d:39:5b:9a:66:5b:31:9e:c9:03:
         d0:e2:9e:53:2e:c8:38:78:01:b5:54:c6:e3:e1:c5:6c:6c:02:
         e9:b1:a8:5a:7d:fe:bb:85:09:44:f4:8e:c3:90:02:5f:09:f2:
         e5:0d:9d:38:3f:ee:c4:08:4a:75:03:b8:4a:57:71:e3:c0:ef:
         fb:ad:3e:48:17:4c:e4:95:ef:8c:a8:bd:c8:6a:7d:3f:ca:5a:
         a5:7a:96:f1:97:01:c2:fa:5d:b7:ef:cd:f6:d9:e4:63:14:ce:
         87:3b:fa:c5:98:63:1a:fe:97:85:33:21:75:18:9a:5b:99:53:
         23:b4:93:7b:cd:c2:63:91:fa:e5:e8:1f:b0:92:2f:08:a3:c3:
         11:98:30:80:d4:f3:dc:45:f8:f1:42:ea:82:ee:8a:ca:c5:48:
         92:a8:63:c6:e6:c9:7d:50:06:fb:10:0d:35:26:67:57:c7:48:
         00:1c:46:b8:9f:d2:55:45:22:13:9a:59:d2:76:0c:93:4f:cc:
         3a:6c:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:20 2026 by rpki-client