Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File:                     3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier:          3EvXRvIxw1qivGUBTBBQLxbQVvQlUgAXErtSVu4oinM=
Subject key identifier:   67:B3:47:A1:DC:A7:7E:3D:42:87:9A:8C:01:9E:FA:62:91:62:78:B1
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer:       /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial:       019EBFFEE4AD70C5030292621C3806A2D1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number:          0903
Signing time:             Sat 13 Jun 2026 08:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:13 +0000
Files and hashes:         1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: g+QEGlkOIk12/eIxeGg+4rJ8z6tXXjny5aYj6sLMWTc=)
                          2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:e4:ad:70:c5:03:02:92:62:1c:38:06:a2:d1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
        Validity
            Not Before: Jun 13 08:00:13 2026 GMT
            Not After : Jun 14 08:00:13 2026 GMT
        Subject: CN=67b347a1dca77e3d42879a8c019efa62916278b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:d8:48:fd:d4:3e:09:f4:88:ac:a3:34:a0:
                    0c:e7:cd:e9:f0:3e:bd:ed:40:ac:14:09:9f:df:26:
                    64:e9:56:b1:af:2c:80:7b:fd:15:97:4f:5b:ff:24:
                    23:45:83:11:de:92:1e:46:a6:ce:98:91:68:8e:32:
                    f2:b2:c7:45:49:2f:8f:ed:4b:ce:43:75:21:2a:62:
                    f2:b3:28:9e:95:cb:48:50:01:d9:f1:bc:76:f0:36:
                    bc:d1:2c:62:63:b0:b1:e5:41:27:06:9a:27:2c:15:
                    a9:ea:ea:dd:96:ef:38:8e:51:67:03:d7:09:2a:39:
                    0b:cb:36:c7:37:77:69:4c:cd:4d:7e:15:02:ea:76:
                    ee:e5:48:8a:b4:32:14:88:62:be:31:8d:a9:4e:a1:
                    18:d7:a3:20:df:44:18:91:af:d5:2b:7c:17:c4:a2:
                    82:1d:e4:a5:2c:41:19:7f:c3:f6:e4:a4:71:55:93:
                    d1:36:4b:d3:e2:e3:93:3d:d5:e1:00:a6:b6:99:3f:
                    53:5e:78:87:8a:a9:22:7d:c4:b2:05:3a:35:d7:d7:
                    57:8b:ec:db:54:66:3d:6d:4f:78:ff:42:74:c2:88:
                    ad:93:59:cd:13:5a:4c:14:30:96:5c:c6:35:b7:a9:
                    8e:bd:2f:46:37:9d:a9:bf:73:7f:a4:1e:55:44:1f:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:47:A1:DC:A7:7E:3D:42:87:9A:8C:01:9E:FA:62:91:62:78:B1
            X509v3 Authority Key Identifier:
                keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:19:30:36:a9:7e:dd:c5:78:bf:91:a0:ef:ce:ca:0c:62:
         41:3d:fd:31:c3:40:b3:06:ca:16:7f:81:6b:11:9f:08:30:1d:
         89:97:de:b9:38:89:26:17:6e:a7:71:f4:c1:d2:66:34:ae:c3:
         0c:2a:2f:1d:90:dd:d8:2f:7b:c0:f4:d5:a8:80:80:9e:84:42:
         ff:39:68:4c:2a:64:c7:f1:53:df:43:9f:b9:ab:df:50:1a:43:
         62:81:bb:f2:a3:ed:5c:18:f5:b0:9d:c0:ba:e6:36:85:f0:96:
         8d:9e:c4:a9:ee:01:d2:99:38:c6:71:fb:7c:f8:1b:e2:26:90:
         28:51:8a:1c:8e:c2:91:62:14:c0:ec:c6:64:8a:25:33:58:cd:
         ba:dd:2f:68:ac:48:72:5f:c6:d1:06:bd:85:32:7a:f9:54:d3:
         dc:12:7b:4c:93:5b:c4:b6:0f:86:d0:8a:31:89:e2:b7:32:39:
         0a:a8:3b:d2:56:8c:29:dd:1c:0d:7f:5e:57:1b:2a:64:e0:ba:
         5a:e9:39:23:33:da:20:67:8d:67:48:6a:3a:e9:4f:3d:5b:70:
         2b:ea:f6:72:f8:1a:2b:3d:07:80:34:f1:7a:d9:6a:19:10:6b:
         4c:f1:d3:4e:ba:dd:df:5c:d3:42:74:ba:1f:de:b0:3f:73:13:
         01:c9:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:28 2026 by rpki-client