Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File:                     3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier:          1CX9DO920J8YsnwHyKVAxc2VcwU/CNESvWAf5+FuGaw=
Subject key identifier:   2A:D9:0B:80:40:6D:4D:FF:A7:EF:20:F3:11:4F:32:0C:22:AF:6B:65
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer:       /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial:       019D98BD410610796D70E8556A504EDB37F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number:          0F1C
Signing time:             Fri 17 Apr 2026 00:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:32 +0000
Files and hashes:         1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: D8Gourbka3wz0J543dnAfSuer5RYtUSRoO4uqYCqf8E=)
                          2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:41:06:10:79:6d:70:e8:55:6a:50:4e:db:37:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
        Validity
            Not Before: Apr 17 00:00:32 2026 GMT
            Not After : Apr 18 00:00:32 2026 GMT
        Subject: CN=2ad90b80406d4dffa7ef20f3114f320c22af6b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2b:35:1b:d7:31:66:2c:fd:d1:76:b7:95:eb:
                    c6:b1:1f:32:1b:8d:5b:ce:53:31:88:18:dc:ae:0a:
                    77:4b:5d:d1:fb:cc:d8:9e:23:e3:08:e9:10:f1:8e:
                    74:e8:0a:e8:7e:76:dd:52:ed:59:2f:f5:82:26:e4:
                    43:20:62:f8:8c:f1:b1:f2:57:6e:48:ff:68:a6:bd:
                    8d:be:ab:60:72:15:3e:d4:2e:1c:0a:b3:b2:cc:8a:
                    18:9a:e5:c5:3f:72:c1:01:d2:c5:f6:1a:4f:3c:c9:
                    e4:1d:49:48:c3:7e:0e:15:62:4d:04:66:b2:31:b7:
                    19:c0:70:c1:44:ba:2b:8d:e5:d9:3a:5a:93:2b:67:
                    c7:7a:72:95:51:f5:bf:2d:ad:52:ce:cf:62:2e:32:
                    78:d3:5f:4f:ab:20:34:55:33:0a:29:db:c1:3a:ad:
                    bb:c8:74:22:03:ee:da:b8:9b:8b:55:77:78:b6:e0:
                    f6:14:15:95:ee:72:e4:5b:0f:37:b2:00:2b:56:d5:
                    c1:93:2f:c7:4f:34:0f:91:e9:9c:58:99:1e:c2:71:
                    a7:35:a2:2c:39:11:3d:4a:8c:46:95:b4:22:0f:bf:
                    ca:53:ce:36:0a:dd:f7:6f:5d:85:11:d9:49:c0:2e:
                    c0:c8:dd:3c:8e:9d:fe:51:f4:56:23:84:f7:fa:03:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D9:0B:80:40:6D:4D:FF:A7:EF:20:F3:11:4F:32:0C:22:AF:6B:65
            X509v3 Authority Key Identifier:
                keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:b2:ff:10:8b:74:bf:fa:75:ba:90:84:c9:6f:a5:56:46:
         ec:3b:f1:57:33:2b:8c:64:e3:9d:4b:a1:2d:bb:02:9d:01:60:
         a6:f9:95:31:6b:a2:9a:26:c0:83:06:be:53:e0:b5:c9:5b:60:
         a2:bf:1c:e5:a9:58:2e:8f:99:d1:fd:c9:3e:12:18:f6:b5:6a:
         ff:9d:b6:a0:26:a7:c7:ed:ab:e8:e7:43:99:4b:c9:5b:d2:2d:
         49:c1:4e:d7:b4:d2:34:67:7e:d0:87:8f:1e:86:c4:72:3a:42:
         3d:3a:46:43:51:71:23:ce:20:ac:fa:71:9b:9c:04:b7:df:1b:
         02:b4:3c:40:64:70:6f:68:20:04:77:37:36:da:85:19:6c:f8:
         f1:e8:77:88:7d:66:dd:34:14:cd:ea:74:7e:9f:64:03:10:bf:
         25:cb:90:56:5a:09:76:e6:37:55:89:f3:ae:7f:00:db:30:2f:
         42:ce:7d:37:f4:9b:5b:e0:c8:3f:31:1d:93:ed:c3:fd:ab:ea:
         b8:96:58:2f:bf:d2:da:cd:5d:9c:c6:86:7b:42:10:8c:43:a7:
         36:53:2e:b1:20:7d:c3:3a:fd:5e:0b:8e:ac:57:5d:e9:1f:a4:
         db:d1:13:52:9a:ab:98:0b:dd:d2:4b:15:63:10:5c:29:55:44:
         97:c0:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:43 2026 by rpki-client