Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File:                     3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier:          7lqandEa88RY5vk8ADqLGgr0RsKngHdH93stDxQijOs=
Subject key identifier:   FC:51:34:EE:78:56:CB:5F:45:7E:F4:1B:59:AC:D8:ED:2D:73:06:39
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer:       /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial:       019EC1EDCD1EA44E7C14C8E949C74E3CF9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 17:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:47 +0000
Files and hashes:         1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: 2cvLiK7I2OZFdetZRzgUmURVDf+r7/4clbUqRH081mE=)
                          2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:cd:1e:a4:4e:7c:14:c8:e9:49:c7:4e:3c:f9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
        Validity
            Not Before: Jun 13 17:00:47 2026 GMT
            Not After : Jun 14 17:00:47 2026 GMT
        Subject: CN=fc5134ee7856cb5f457ef41b59acd8ed2d730639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:10:83:4a:88:1a:a0:41:87:df:72:64:46:
                    4b:e5:68:0a:50:1a:67:6a:c0:23:7d:8e:a3:fd:a0:
                    6f:7d:0c:b2:cc:54:30:d8:44:a6:df:aa:c9:c2:76:
                    0b:f4:47:a2:ad:f4:8b:59:99:d9:16:eb:06:46:cc:
                    e4:82:f3:46:f3:dd:c4:f7:36:7b:0f:fa:44:c7:3f:
                    c2:59:8c:a0:29:fb:4b:69:e4:98:eb:3c:12:62:1f:
                    20:f7:23:c5:5d:b4:43:89:ab:6e:e8:71:60:c9:b9:
                    7b:4b:8b:0d:c2:88:cc:ec:e6:dd:22:51:9a:58:59:
                    28:bc:2e:51:7d:57:23:ca:f2:71:df:88:1f:08:24:
                    e7:b7:07:96:0d:61:e2:a6:2c:5b:60:5a:7c:f1:7b:
                    6a:f7:12:c5:ae:8a:68:67:46:48:39:51:a8:f8:25:
                    03:36:2d:9c:5c:cc:06:cf:04:77:9f:52:1f:1c:7a:
                    27:7f:23:80:67:a1:29:67:79:e6:07:07:db:c8:d1:
                    bb:55:50:66:57:8a:3a:3b:08:91:a8:2c:29:bd:e6:
                    d8:2b:32:8e:1f:f7:7a:a6:1b:f3:ae:78:52:a4:11:
                    5d:74:70:6e:02:8b:db:b2:7c:82:62:03:6e:7e:df:
                    83:e5:7e:3a:10:85:1e:8c:f4:3e:79:3b:60:1a:c3:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:51:34:EE:78:56:CB:5F:45:7E:F4:1B:59:AC:D8:ED:2D:73:06:39
            X509v3 Authority Key Identifier:
                keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:70:d6:71:1e:46:7b:8d:c2:df:fb:86:d9:5e:a2:cd:35:
         9a:98:37:7e:56:50:32:31:97:17:f5:1c:28:0d:6a:35:ef:10:
         b4:8d:ce:9c:cc:52:f0:90:ad:99:49:f4:44:03:c0:62:cd:f5:
         d4:ce:10:fb:3a:48:f1:fc:1d:80:d3:e1:b5:ec:bd:26:fd:a7:
         f2:f0:cf:ab:1c:e2:ae:c3:81:c1:3f:c6:d5:18:fc:92:e3:d9:
         0b:f5:74:30:0c:71:8c:b2:7f:bc:9b:d2:d9:c4:7e:d5:26:31:
         79:54:ac:fe:90:46:46:6e:d5:f2:6e:72:ee:3a:b1:45:b7:d3:
         48:49:f8:a0:c5:ab:f3:9f:48:67:fc:0c:d0:d7:1c:e2:1d:b6:
         95:ca:65:fa:a0:ca:bf:8b:c1:0d:29:de:23:d2:b4:4e:45:a1:
         91:cf:5f:5b:06:d0:0a:fc:ef:56:a5:b3:b1:4d:c3:29:21:13:
         a5:89:a9:a6:30:81:eb:43:ae:94:4d:fc:89:c5:76:41:3b:a0:
         fb:ec:88:9c:7e:56:3c:21:9b:38:e0:9f:80:64:5e:c0:bb:02:
         61:a4:17:84:03:bb:3e:ce:e4:0f:df:40:d5:a3:ad:40:fa:00:
         ab:de:64:2b:45:59:50:40:57:8d:73:84:89:89:01:42:a5:a2:
         4c:96:5c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:39 2026 by rpki-client