Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File:                     3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier:          7OeOlUCXPCpoOn5dRkrFIg7ONpjyt9jk3vdH4KNwnbo=
Subject key identifier:   27:EC:BD:52:B0:16:17:C8:F6:5B:14:3C:37:D8:83:5B:9C:9F:34:D4
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer:       /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial:       019EBE7FC4F50DCC11D4AF3F58383E4E9A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 01:01:44 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:44 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:44 +0000
Files and hashes:         1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: CUMeQ0BQcfRrUep8yhIsO9EbLK9cRpvxrxcP4vVS9sA=)
                          2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:c4:f5:0d:cc:11:d4:af:3f:58:38:3e:4e:9a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
        Validity
            Not Before: Jun 13 01:01:44 2026 GMT
            Not After : Jun 14 01:01:44 2026 GMT
        Subject: CN=27ecbd52b01617c8f65b143c37d8835b9c9f34d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:20:99:95:1a:34:9c:95:b6:74:07:c6:1c:
                    a5:99:d5:0a:72:aa:cd:fe:f0:c8:bb:6c:b6:f0:e7:
                    d3:90:eb:18:5d:96:8d:29:42:a7:66:9d:1a:b0:85:
                    16:ef:15:6f:e1:23:75:1f:88:57:17:8a:e0:1f:d1:
                    08:74:56:eb:75:bb:f0:bb:ab:cc:49:01:44:02:c5:
                    33:c3:87:42:3f:cd:93:5b:06:eb:39:48:a0:0d:99:
                    5f:f2:48:2b:b4:e1:9c:c2:b1:ac:d5:01:16:ed:da:
                    d4:1a:bc:b3:7f:4b:7e:7a:f4:9e:09:f8:cb:55:2a:
                    62:00:bb:90:26:2d:fd:0c:49:21:80:9e:ca:ed:b8:
                    2b:12:bd:63:f3:6d:b3:56:27:e3:99:10:af:5e:bd:
                    bd:27:32:73:b7:aa:17:55:9c:d2:c7:f2:ff:cf:ed:
                    15:62:69:9a:da:36:3a:a1:f9:9a:45:3e:3a:8f:a8:
                    42:5c:55:ae:ba:63:ed:56:6c:a6:2b:43:b5:76:b8:
                    fd:17:ab:56:f0:9b:d3:f1:8a:01:c7:e6:d4:4d:22:
                    ca:7b:bb:b0:81:aa:fa:c0:bf:44:04:4c:e1:47:5a:
                    e0:eb:53:30:1f:e5:cc:c6:84:c7:ca:45:ba:32:af:
                    51:94:3a:c4:9c:9b:a5:98:41:97:aa:66:8f:ff:fa:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:BD:52:B0:16:17:C8:F6:5B:14:3C:37:D8:83:5B:9C:9F:34:D4
            X509v3 Authority Key Identifier:
                keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:25:b1:ee:fd:b4:5a:f9:07:a3:80:5c:30:e4:cc:35:a0:1a:
         53:b4:e5:66:0e:d5:27:e2:0c:69:6c:a4:ac:21:33:84:9a:1d:
         d0:d2:a8:c8:f4:36:4c:1b:e9:3d:15:1a:8f:21:d2:25:90:b8:
         cf:a5:bc:d7:89:c9:8c:7e:a7:e5:39:34:e2:7d:94:ad:30:d7:
         0e:a9:f4:4a:af:4d:73:e2:92:af:de:5d:9a:04:f3:8b:df:23:
         8c:71:77:b4:d9:80:b5:9d:62:bc:f5:a8:2f:7d:a4:72:3a:57:
         c7:f6:f1:df:f8:56:1c:ea:13:c7:f2:fc:73:8d:fd:ef:16:4d:
         70:6f:99:65:82:13:8d:38:58:38:88:0d:ed:cd:68:56:60:04:
         e5:85:69:3b:52:ca:2b:09:91:14:f3:a3:8b:45:63:03:15:f6:
         b3:99:dc:0a:64:8a:5a:f6:83:ab:57:af:1a:3a:12:ad:3d:b4:
         17:42:83:91:4e:df:19:af:c3:29:fd:5e:dc:8c:5a:dc:3a:04:
         0b:ff:44:86:d5:33:94:62:9b:8a:72:55:f9:1d:c5:1f:c4:b6:
         7e:ce:56:05:1f:40:ca:e5:30:5f:e7:1a:18:73:95:71:ac:64:
         9a:a0:c0:dd:dc:1a:b0:9b:2c:c1:57:98:34:6a:18:4d:f9:80:
         05:12:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:16 2026 by rpki-client