Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File:                     s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier:          uF7O0RoM8BXglw9vm77TPiKg45OMgURR0YWSi5Wn5MA=
Subject key identifier:   CC:1B:0A:75:D3:6A:04:85:E1:10:EB:63:88:12:9A:2E:B3:1E:00:84
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer:       /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial:       019ED386A74F5F829FA4C3B3C3310B0914BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number:          1968
Signing time:             Wed 17 Jun 2026 03:01:17 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:17 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:17 +0000
Files and hashes:         1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
                          2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: f1+ScjfQ4TApXw3YPDG5Ur3UDNmDQcJh3y5W/eAF4Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:a7:4f:5f:82:9f:a4:c3:b3:c3:31:0b:09:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
        Validity
            Not Before: Jun 17 03:01:17 2026 GMT
            Not After : Jun 18 03:01:17 2026 GMT
        Subject: CN=cc1b0a75d36a0485e110eb6388129a2eb31e0084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:5f:69:2a:b7:7d:51:9d:31:7f:48:37:c6:
                    25:a6:e7:fd:bd:cc:fc:4d:b5:cd:a4:a3:40:c6:67:
                    74:f2:4d:be:bc:6d:a7:ab:e5:37:db:dc:94:6e:18:
                    e1:ec:ec:b6:41:ee:71:15:d1:ce:fe:4a:62:cc:40:
                    79:af:ec:92:50:0b:79:f1:c5:c1:12:43:6e:55:37:
                    6e:ab:4a:e3:50:e6:ed:f2:07:0a:fd:b0:98:4c:47:
                    03:95:5e:83:76:a4:00:fb:c2:05:4b:29:21:68:2b:
                    f0:3b:05:ae:24:ca:ff:8d:b7:f2:f8:79:4f:c6:ff:
                    6f:d6:c2:3c:52:83:4c:ff:48:7a:fe:2d:aa:fa:08:
                    bf:a0:f6:d1:e4:70:be:43:1b:99:89:db:79:38:bb:
                    6b:b3:06:48:29:ca:42:6c:22:6c:ee:02:85:68:f6:
                    eb:fe:24:11:be:d3:46:04:cd:4c:4d:67:ea:f2:00:
                    69:73:40:84:35:04:d5:5c:57:65:9d:38:63:44:b9:
                    d3:3d:15:dc:0a:2a:96:8c:d5:db:87:09:b8:f1:95:
                    0e:af:d5:5f:25:25:09:2e:6a:d6:a0:e5:64:e0:68:
                    0f:3a:05:b0:ee:f3:4c:58:62:ad:f2:f7:5f:24:4e:
                    f8:94:ab:aa:a1:74:5d:92:84:d5:03:6f:21:88:09:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:0A:75:D3:6A:04:85:E1:10:EB:63:88:12:9A:2E:B3:1E:00:84
            X509v3 Authority Key Identifier:
                keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:d7:c3:12:02:1d:da:be:58:b4:d1:27:af:c8:8f:52:1d:
         95:2f:6e:dc:07:ba:98:78:73:6d:30:4c:59:6c:18:5e:68:80:
         bf:14:e9:9f:ea:a9:c9:42:0a:f2:f3:5e:6a:2a:3e:71:ae:6e:
         0b:0c:ff:e2:e0:ba:74:c4:ee:a9:90:d5:b4:dc:5b:e4:0d:4d:
         5d:f9:3b:b9:b8:a1:97:96:1e:4b:6b:8e:91:dd:bc:33:66:06:
         b1:30:20:76:14:60:28:8c:ae:63:9d:06:bf:f4:36:2c:41:62:
         9c:31:b1:2d:75:42:4d:fd:20:4b:a9:21:0b:65:c0:71:2e:3e:
         c5:4a:36:80:3d:1b:9a:1f:02:ac:39:ff:af:9a:bc:71:f4:2b:
         eb:a4:96:72:19:23:37:0b:d1:15:af:aa:b7:be:3d:9e:12:68:
         20:22:17:a4:e6:b9:57:37:95:8b:6c:94:36:e7:07:a6:34:15:
         51:05:32:70:96:0d:95:85:7d:bd:af:99:5e:8b:e1:b7:c1:44:
         06:cc:1f:d2:57:a1:17:a9:2e:40:db:59:bb:b0:16:c5:b1:b0:
         b2:b7:bb:ac:0e:7f:f4:1d:99:75:00:0f:ba:1c:35:46:a8:9c:
         99:b4:9a:92:18:09:14:1d:10:6b:2d:88:bd:cd:67:b8:81:c7:
         26:7b:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:37 2026 by rpki-client