Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File:                     3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier:          QGE7NbeVeQNf0JE42+bac/lSwGv6lWtTDKZB0H+pts0=
Subject key identifier:   CE:B0:93:4D:49:35:47:51:55:1F:C4:06:6E:07:CC:43:35:E9:08:6A
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer:       /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial:       019EBEB5E39B43EC0CE6EF0FB9C239265AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number:          05E2
Signing time:             Sat 13 Jun 2026 02:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:51 +0000
Files and hashes:         1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: VFMmT9m4kscRILYEBb7dkTFbX2BARNwMlwvANBQyp/g=)
                          2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:e3:9b:43:ec:0c:e6:ef:0f:b9:c2:39:26:5a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
        Validity
            Not Before: Jun 13 02:00:51 2026 GMT
            Not After : Jun 14 02:00:51 2026 GMT
        Subject: CN=ceb0934d49354751551fc4066e07cc4335e9086a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:8a:f4:b7:16:d7:6e:a7:cd:97:a8:59:93:
                    d7:2c:46:3e:e1:14:51:6d:c9:dc:c7:00:79:51:61:
                    e9:74:2e:9f:72:83:6f:d1:ec:dd:ec:f4:d2:46:1a:
                    09:67:23:15:63:7b:62:14:c3:75:54:36:cb:56:43:
                    78:1c:cf:c6:d0:59:7e:3f:5c:d9:74:24:69:96:94:
                    65:89:84:d6:c4:ce:e3:b7:74:9a:ee:a6:b9:15:90:
                    ef:67:fb:91:fa:6f:79:17:95:e1:2b:9e:01:0d:0d:
                    30:a7:ea:d6:75:62:a7:cc:7c:ce:92:7c:1c:a2:2d:
                    3c:2d:15:b0:82:18:95:07:36:34:82:17:87:5a:07:
                    31:a7:cc:d1:00:3f:a3:f2:37:fb:a2:59:1c:99:1f:
                    90:7b:98:ce:89:f6:dc:2d:b4:5c:0d:44:c2:8a:e9:
                    2e:3c:75:0c:33:9e:cd:99:1c:72:d1:4d:ff:2e:e7:
                    95:75:91:89:7b:1b:9d:34:06:c1:59:ee:f6:35:9b:
                    e5:fb:06:f4:9f:57:bb:d6:a8:3d:5a:a0:3c:91:cb:
                    5b:c0:18:42:55:66:a8:63:ea:ef:fe:d3:ed:12:b7:
                    f9:70:bb:fc:c2:e6:72:52:8c:6e:c5:8d:e0:a2:b2:
                    99:a8:8c:6a:df:fc:38:7e:04:b5:27:49:7c:7c:ed:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:93:4D:49:35:47:51:55:1F:C4:06:6E:07:CC:43:35:E9:08:6A
            X509v3 Authority Key Identifier:
                keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:82:4b:9e:d2:16:4d:a2:47:d8:58:97:4c:a0:04:de:cd:23:
         f6:8b:bb:0e:56:06:e9:eb:9e:d3:b5:eb:6f:ce:94:4b:44:90:
         22:63:eb:c0:18:12:f8:7d:4b:85:61:e3:c0:f9:3d:ff:fe:07:
         e3:77:f5:91:e8:28:ff:58:db:5a:1f:50:0e:2c:27:cf:c5:31:
         92:bb:a5:98:79:69:4f:8f:e4:8b:e7:40:6a:80:68:59:be:1b:
         d7:1b:8a:73:9b:af:ba:01:8a:dd:73:20:0c:17:89:9f:96:53:
         ba:cd:59:d4:48:70:d6:32:ac:be:47:be:18:10:56:b2:c8:66:
         14:5a:75:a9:ed:53:12:d7:10:ac:b1:15:93:67:ce:43:00:1d:
         69:c7:96:6d:e3:42:12:02:3c:07:aa:bc:56:89:f5:79:19:c0:
         56:25:1a:b3:e8:17:db:5d:31:29:77:a1:49:6a:f3:06:c7:bf:
         be:12:13:f8:ce:a2:9a:f2:2d:fb:25:b2:a4:3e:ed:ef:5d:b9:
         fb:e9:c4:29:67:20:eb:a7:c0:c6:36:3a:e5:a5:ea:bb:cb:7f:
         ad:b5:fa:41:2d:a4:a8:9b:b7:e2:8f:6f:8b:10:91:f9:2f:54:
         51:15:3e:ec:20:5d:4d:b6:4c:ff:63:f6:41:07:0b:cb:35:ee:
         ca:73:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:13 2026 by rpki-client