Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          cxZpVFIXRzk+CBp4lAIMDLMd1KLibJ3ky36V9VmoZcE=
Subject key identifier:   E3:C1:8C:33:52:C3:CF:32:33:2D:B4:E3:1D:FA:0C:56:8F:70:05:E4
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       019EBE1138781302201520AB6CB1B01F3ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          13FB
Signing time:             Fri 12 Jun 2026 23:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:00 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 6zeCC/lrw2B6kbCub4XUclmSKMQU3Li1KJ4i8lbImbM=)
                          2: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=)
                          3: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=)
                          4: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=)
                          5: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:38:78:13:02:20:15:20:ab:6c:b1:b0:1f:3e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Jun 12 23:01:00 2026 GMT
            Not After : Jun 13 23:01:00 2026 GMT
        Subject: CN=e3c18c3352c3cf32332db4e31dfa0c568f7005e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:c3:48:e1:81:bd:48:1c:d2:ea:87:5d:f6:
                    df:6a:b8:7b:59:71:14:ff:1c:60:3b:f9:d8:67:fc:
                    69:b0:59:f6:9a:35:70:b1:c9:1f:f5:29:11:d4:df:
                    35:40:51:55:4f:d7:93:8c:84:03:ac:9f:2f:c8:b4:
                    2c:7f:36:30:8f:68:1b:d3:ec:d6:7f:db:eb:85:9d:
                    8e:35:ee:ac:70:30:1b:9b:ad:81:e8:6e:55:d7:f7:
                    d5:13:e9:27:70:91:41:58:e4:35:c1:42:59:ec:15:
                    88:fe:8d:bf:ed:22:47:18:db:b2:34:7a:60:c1:53:
                    2e:fa:16:45:25:5b:7a:40:02:25:64:ee:ea:b2:90:
                    89:10:02:bf:52:74:01:87:f5:51:0e:5f:2b:bc:05:
                    66:b8:98:bb:fc:98:f9:d5:3f:53:1f:3d:f6:85:c2:
                    7c:a0:82:bf:c2:7d:c4:c9:50:53:31:54:cf:9d:59:
                    4e:0c:08:6a:a0:10:d1:7c:29:16:f1:ba:43:a9:3e:
                    83:bf:b6:26:9d:4d:ab:5c:d4:2a:32:65:38:36:7a:
                    5e:66:5a:a5:f0:05:6c:75:67:2b:22:b4:41:99:d7:
                    40:21:dc:26:43:b6:f7:92:75:6d:99:91:24:75:d7:
                    ff:e2:27:32:8f:36:bf:d7:77:53:50:0a:fe:06:92:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:8C:33:52:C3:CF:32:33:2D:B4:E3:1D:FA:0C:56:8F:70:05:E4
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:72:2a:73:a2:c1:8b:62:93:fb:b4:e8:23:5a:e2:46:b0:
         01:4e:99:67:7c:c6:19:5b:a0:b4:d7:ee:cc:4b:7b:af:9a:d6:
         dd:2e:7b:f8:33:09:60:a0:17:e6:28:3d:bc:bf:3c:39:ff:6b:
         1d:aa:5a:01:be:86:ee:16:2a:36:66:41:e3:73:c9:02:24:76:
         bf:31:ad:d7:95:65:5d:83:76:22:bd:e8:86:3b:11:80:b0:cf:
         a1:fc:03:b5:c7:9a:e1:ff:90:30:fd:6a:f8:78:48:b5:0f:4f:
         34:5f:79:7b:23:2f:76:22:dc:9a:d3:cb:83:7a:e4:10:35:32:
         bb:41:cb:ca:15:f4:72:30:bf:41:b4:05:6a:32:2b:bf:bf:57:
         2b:ae:18:95:6c:ec:16:e7:08:51:3a:1c:30:c3:08:05:a0:4f:
         7e:13:d5:4b:a6:db:d4:db:82:9c:b2:f6:09:c2:e0:b8:29:20:
         56:36:5e:11:91:b5:69:9e:ac:ff:7c:69:8f:85:20:52:fc:d6:
         79:88:e9:2b:f7:6d:6d:3d:a2:ec:7c:3d:ce:95:66:05:b0:4d:
         34:7d:41:9e:cc:61:f0:f2:4c:6f:6e:7b:f9:be:5c:eb:be:5f:
         6d:8a:3a:14:6e:00:20:27:31:32:1e:23:ed:e8:cc:16:58:72:
         b8:05:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:34 2026 by rpki-client