Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File:                     3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier:          AyTRtoG+ZrvvmJ/Elyy/leGoxiR2eH/luNnT6kgNQCs=
Subject key identifier:   22:C5:5B:AC:54:68:F9:25:1F:38:36:0E:11:01:83:BA:6D:F8:94:CD
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer:       /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial:       019D984FBCF8AAD854936ED8FFD8B51F2667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number:          0AEA
Signing time:             Thu 16 Apr 2026 22:00:55 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:55 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:55 +0000
Files and hashes:         1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: ijlmf9rnIsOra70mT5cAht81IfH8llJpjG4MIsz1zhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:bc:f8:aa:d8:54:93:6e:d8:ff:d8:b5:1f:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Validity
            Not Before: Apr 16 22:00:55 2026 GMT
            Not After : Apr 17 22:00:55 2026 GMT
        Subject: CN=22c55bac5468f9251f38360e110183ba6df894cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:bb:51:b8:85:e1:36:b2:74:91:fe:97:c9:
                    f9:08:b9:f4:37:b0:97:b9:e2:d5:e3:e3:be:5d:b1:
                    38:1a:d8:21:30:4e:71:cd:8a:fb:76:ae:5d:ff:01:
                    f9:bf:79:cb:b1:0f:d9:77:5c:0d:4a:ad:84:cc:42:
                    d8:48:44:2c:1d:27:e2:5e:ba:a3:b7:db:f2:50:36:
                    59:36:3a:ef:af:23:b0:e7:65:c3:12:15:96:ec:bb:
                    20:2f:48:f8:93:9a:06:c6:2b:cc:58:8a:60:8f:5d:
                    2a:16:a6:d0:3c:19:cb:68:2e:cc:48:98:16:a0:af:
                    e3:dd:5d:38:68:9c:2d:0e:16:33:28:f2:92:49:75:
                    b4:e4:ed:3c:f2:51:50:f8:4a:82:43:4e:ef:2b:89:
                    ad:30:de:13:6e:51:1c:f5:1f:16:e8:40:96:24:77:
                    9e:a4:9d:3e:d6:29:9c:de:85:36:0f:ff:c4:d3:54:
                    ed:5a:f1:1b:0f:8b:f2:0a:50:3c:cd:3f:3c:5f:30:
                    e6:39:d8:b3:4a:74:da:e9:ed:ba:ee:46:f3:fa:4d:
                    cb:fa:c0:a9:5a:69:15:a5:bb:e0:4b:01:be:53:96:
                    b1:40:34:eb:76:2e:fc:ea:9d:5d:3f:ac:43:b4:ce:
                    02:31:37:e2:43:96:e0:61:22:2f:2f:2c:f2:04:bc:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:5B:AC:54:68:F9:25:1F:38:36:0E:11:01:83:BA:6D:F8:94:CD
            X509v3 Authority Key Identifier:
                keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:b0:b9:4d:39:ea:28:21:87:7e:57:a2:ee:38:65:4d:7c:
         32:d2:42:5b:86:ae:e2:28:e4:f5:0d:f6:5e:ad:39:99:f7:27:
         04:61:03:bf:4c:a5:42:bf:6a:6d:ff:33:8e:e6:a8:a5:d3:9b:
         7d:c6:63:0f:e9:e9:29:8d:be:c4:d0:e3:16:d1:8b:35:22:19:
         8f:12:98:23:7c:b3:04:f9:b3:bf:2c:60:f5:c9:21:e3:65:db:
         2b:ba:94:0e:68:71:eb:ed:75:49:df:56:0f:db:8c:16:49:7e:
         0c:dc:55:34:05:1a:b0:70:62:37:42:fd:c6:3e:e7:a9:63:df:
         78:01:81:3d:88:a1:f8:cc:f0:f8:a1:5e:10:a6:fe:d0:c7:39:
         5a:f4:06:55:34:e2:e6:33:ba:16:13:7c:7d:31:90:fe:6f:b5:
         ae:70:da:55:46:43:4c:dc:69:ba:da:34:32:7e:77:e2:38:6b:
         4f:f6:f3:e4:c4:99:4f:38:1b:e6:4e:3b:ad:d0:3d:27:39:ff:
         12:b8:37:c3:07:ff:db:f5:49:92:ef:75:45:aa:ad:e2:d6:2c:
         41:67:64:8f:24:39:d6:dd:4b:5c:fb:f3:8f:e3:59:76:c3:18:
         00:9d:50:82:de:82:4c:79:cd:58:76:a8:b0:94:75:5b:97:18:
         dd:91:6c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:35 2026 by rpki-client