Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File:                     3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier:          snEU8G6WXhMzE70Y+/Gu5TY+kEapcXgWvUmsF0EBYfc=
Subject key identifier:   CB:A5:AA:0C:1F:D8:AB:58:BE:7E:63:C8:A2:E7:F7:A3:8E:D3:45:14
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer:       /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial:       019EBFC8FD95416EC390696A9D4BAED19C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number:          1370
Signing time:             Sat 13 Jun 2026 07:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:20 +0000
Files and hashes:         1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: j7ypTXk8//TMdZdxof8dvxIS/Y8g8xI9WKlg8S7Ehy4=)
                          2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:fd:95:41:6e:c3:90:69:6a:9d:4b:ae:d1:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
        Validity
            Not Before: Jun 13 07:01:20 2026 GMT
            Not After : Jun 14 07:01:20 2026 GMT
        Subject: CN=cba5aa0c1fd8ab58be7e63c8a2e7f7a38ed34514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:3d:67:9f:c5:27:d6:03:c7:e2:8e:66:ee:
                    5b:3a:40:1f:09:1c:a6:cc:4a:6d:d3:67:f4:3f:c9:
                    4e:8a:20:e0:e7:db:d3:6e:f2:30:c9:22:4d:af:1c:
                    be:e4:9d:88:c6:ec:43:32:57:e5:ca:45:0b:ef:d9:
                    62:a2:7e:8b:24:de:29:f2:98:2f:91:cb:2c:5b:c3:
                    70:8e:5e:1e:fd:bb:d3:c2:5b:44:74:52:63:2d:c1:
                    ef:14:fd:a1:41:dd:e8:4a:05:9b:64:19:31:da:c1:
                    4f:81:45:04:d4:76:12:2f:6a:62:e4:3c:a6:cd:af:
                    21:5a:cc:2b:7a:df:97:39:6e:06:ce:4f:d5:0c:16:
                    e9:7b:e1:6f:78:ce:14:4d:3d:9a:12:27:99:3c:04:
                    bb:b6:e7:99:7d:02:47:9a:9f:27:db:a8:40:44:38:
                    b8:e0:35:62:66:88:57:52:e1:50:ec:89:8e:68:d4:
                    6d:27:33:57:54:77:d0:ea:07:9f:af:ea:d1:18:f6:
                    05:b5:09:fe:d5:e8:3d:2c:be:8b:23:6e:bc:31:5a:
                    59:d3:70:74:43:66:41:7f:fc:b6:35:c9:7d:8e:1f:
                    5d:23:bb:01:8e:f4:4d:cc:bc:63:70:01:7a:cf:65:
                    fa:39:40:8d:31:92:95:92:0b:1d:cf:c8:d2:33:40:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:AA:0C:1F:D8:AB:58:BE:7E:63:C8:A2:E7:F7:A3:8E:D3:45:14
            X509v3 Authority Key Identifier:
                keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:3e:26:79:7c:d6:cd:fc:ef:46:6c:e9:b3:ff:04:7b:e9:
         60:9d:ea:5d:7a:3a:d3:9a:c4:41:c6:65:57:9f:5f:d3:dd:26:
         d9:95:a1:63:44:c9:88:4f:95:df:85:b9:44:fa:5b:2d:7c:d3:
         22:dd:01:d1:c2:4b:08:82:22:1b:20:e0:ba:3b:3f:97:a7:cc:
         5a:98:a5:d4:7a:59:df:d3:87:bc:0a:fe:44:42:cb:72:71:88:
         a4:61:da:37:89:a6:0d:06:dc:34:2b:2d:8c:b2:1a:b9:08:fb:
         f7:05:a2:bc:4d:95:4a:ab:5e:a6:66:83:62:65:72:56:59:dd:
         e8:99:20:cd:af:04:34:6d:23:19:ad:52:af:ab:53:d2:c0:28:
         4d:a7:a9:de:e2:fe:53:a0:06:71:47:f8:b8:2a:cf:98:88:8b:
         4e:8a:d8:60:f9:42:7f:78:e1:48:a0:62:ac:42:73:42:07:33:
         6a:94:8d:78:bb:af:89:f9:49:87:84:f7:3c:f2:6a:62:46:4c:
         ed:7b:83:09:97:6a:3c:7c:69:c0:31:55:71:43:cf:93:ef:5e:
         22:30:9a:fd:fc:3e:2f:f1:f8:58:c1:69:bf:31:ef:21:3a:f3:
         c2:7e:dc:39:7f:de:0d:56:ad:25:10:20:3f:72:6d:15:bc:93:
         ff:94:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:32 2026 by rpki-client