Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File:                     3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier:          J4wNdq/QKUVM+q0PbtVb+L39pBN7BphCW+f8hqxIP5U=
Subject key identifier:   F0:6F:35:3F:25:2A:05:5A:98:C0:D2:78:9E:E1:25:F0:0D:B1:AA:DD
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer:       /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial:       019EC2CA12FA153B14C4216DF4E7D153071A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number:          0760
Signing time:             Sat 13 Jun 2026 21:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:23 +0000
Files and hashes:         1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: jOWdxDnFrMpNf0E2Q6HFYcUiq0Vp+QGV8VB6/Q0W2TQ=)
                          2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:12:fa:15:3b:14:c4:21:6d:f4:e7:d1:53:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
        Validity
            Not Before: Jun 13 21:01:23 2026 GMT
            Not After : Jun 14 21:01:23 2026 GMT
        Subject: CN=f06f353f252a055a98c0d2789ee125f00db1aadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:6b:3e:fd:b9:5c:e8:9b:70:e6:83:b7:b5:
                    79:7e:70:29:fd:af:ef:77:7b:26:15:11:34:42:64:
                    e9:6a:e5:46:72:b5:45:1f:81:82:3d:2e:6f:21:77:
                    45:0a:5b:bc:45:ff:73:56:a9:0b:33:9d:80:9d:d6:
                    35:5f:09:17:79:9e:45:ed:bb:67:b3:7f:f2:e5:9f:
                    4c:e7:02:20:d7:d0:bd:36:4c:88:13:ea:e2:6f:08:
                    07:e8:c2:1a:cd:64:bd:e3:b6:ad:02:cf:70:c6:6d:
                    3c:fe:33:b1:d0:52:b3:f0:6a:35:29:6b:d7:4a:94:
                    94:0a:1b:9a:b1:3a:3b:70:fd:28:03:0d:bc:6a:fd:
                    f1:c7:47:6c:2e:5e:8d:9a:bf:d4:9b:02:76:38:a5:
                    17:5b:d0:75:c0:55:de:a7:3c:6b:0a:77:17:b5:d6:
                    70:53:5e:61:14:95:8d:bc:3f:e1:07:3a:65:a1:78:
                    40:55:5f:cf:15:d0:2e:3a:aa:3b:27:be:61:d9:c0:
                    fb:13:29:5f:2a:68:45:fb:80:ac:b3:3c:99:07:3e:
                    53:1a:59:8e:8f:70:bd:eb:7c:90:08:a2:ef:f9:a0:
                    f9:a8:d2:7a:03:9d:8d:c3:42:5a:70:81:ec:a6:bd:
                    81:1f:dc:32:f3:20:d3:39:66:a7:7e:3f:e0:94:f2:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:35:3F:25:2A:05:5A:98:C0:D2:78:9E:E1:25:F0:0D:B1:AA:DD
            X509v3 Authority Key Identifier:
                keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:15:b8:54:22:1d:b7:1b:98:03:5a:3a:a4:e1:93:2c:64:
         87:26:c7:16:01:e8:6c:91:c2:18:b2:34:10:a6:42:8d:c4:87:
         50:dd:04:f0:7a:61:be:f7:02:78:d1:70:94:57:c1:02:f8:04:
         1d:ac:90:8d:4d:84:6b:9a:cd:db:26:35:1f:47:63:c4:87:97:
         a8:f8:b0:3a:c5:12:a8:dc:6d:6e:4d:ed:08:bd:2b:2b:3d:3e:
         c3:82:b3:44:7d:26:f3:6b:0e:6e:b6:33:c7:66:1c:a2:bb:5d:
         48:05:c9:f5:19:2f:9a:7e:8e:79:42:79:95:11:43:cf:82:53:
         4b:05:b5:54:9c:24:44:cd:3b:59:53:16:d6:5d:40:e1:c7:70:
         77:a5:72:8e:36:05:b2:bc:98:a1:47:5a:01:8c:72:5b:ee:1a:
         0d:00:f3:ac:96:f3:23:64:6f:43:7a:ee:a3:ac:2c:9d:33:48:
         03:a4:d4:f1:90:69:ad:3f:ad:41:1c:76:4f:3d:0d:6f:a3:a4:
         74:c1:d5:86:21:92:93:a2:06:7f:6c:f4:e8:f8:51:20:cd:6b:
         58:0c:21:f4:4b:88:42:fe:3c:7a:07:ef:6b:41:22:c1:88:10:
         1a:30:8c:66:1b:9e:86:a5:4f:f5:ef:1d:31:fd:f4:07:35:1e:
         a7:47:96:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyhL6FTsUxCFt9OfRUwcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjYwNjEzMjEwMTIzWhcNMjYwNjE0MjEwMTIzWjAzMTEwLwYDVQQD
EyhmMDZmMzUzZjI1MmEwNTVhOThjMGQyNzg5ZWUxMjVmMDBkYjFhYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq21rPv25XOibcOaDt7V5fnAp/a/v
d3smFRE0QmTpauVGcrVFH4GCPS5vIXdFClu8Rf9zVqkLM52AndY1XwkXeZ5F7btn
s3/y5Z9M5wIg19C9NkyIE+ribwgH6MIazWS947atAs9wxm08/jOx0FKz8Go1KWvX
SpSUChuasTo7cP0oAw28av3xx0dsLl6Nmr/UmwJ2OKUXW9B1wFXepzxrCncXtdZw
U15hFJWNvD/hBzploXhAVV/PFdAuOqo7J75h2cD7EylfKmhF+4CsszyZBz5TGlmO
j3C963yQCKLv+aD5qNJ6A52Nw0JacIHspr2BH9wy8yDTOWanfj/glPLivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBvNT8lKgVamMDSeJ7hJfANsardMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg4VuFQi
HbcbmANaOqThkyxkhybHFgHobJHCGLI0EKZCjcSHUN0E8HphvvcCeNFwlFfBAvgE
HayQjU2Ea5rN2yY1H0djxIeXqPiwOsUSqNxtbk3tCL0rKz0+w4KzRH0m82sObrYz
x2YcortdSAXJ9Rkvmn6OeUJ5lRFDz4JTSwW1VJwkRM07WVMW1l1A4cdwd6VyjjYF
sryYoUdaAYxyW+4aDQDzrJbzI2RvQ3ruo6wsnTNIA6TU8ZBprT+tQRx2Tz0Nb6Ok
dMHVhiGSk6IGf2z06PhRIM1rWAwh9EuIQv48egfva0EiwYgQGjCMZhuehqVP9e8d
Mf30BzUep0eWnA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:15:01 2026 by rpki-client