Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File:                     3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier:          teU3n5wajl42EdT9UuaF65KdOXodX/URUS8FIcJS3zU=
Subject key identifier:   E8:2C:46:E8:6E:1A:6C:DE:42:D7:BA:15:B8:AA:14:83:A9:E5:B9:45
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer:       /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial:       019EC1121B364C5846F098555A5B06A21CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number:          140E
Signing time:             Sat 13 Jun 2026 13:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:49 +0000
Files and hashes:         1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
                          2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: Xx6XX6sxcJUvttQez65MqHs8pcgoYj6tlY6+qbHjpCU=)
                          3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
                          4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
                          5: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:1b:36:4c:58:46:f0:98:55:5a:5b:06:a2:1c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
        Validity
            Not Before: Jun 13 13:00:49 2026 GMT
            Not After : Jun 14 13:00:49 2026 GMT
        Subject: CN=e82c46e86e1a6cde42d7ba15b8aa1483a9e5b945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:df:c5:60:27:a6:cb:48:91:24:6d:b0:e6:
                    af:b7:69:c9:56:ab:4b:a6:ba:92:fc:ce:c0:51:eb:
                    75:a9:69:33:3d:8a:74:03:fa:46:02:9d:f7:97:c5:
                    90:3c:d9:13:fc:ff:23:e0:b6:af:05:60:61:a5:0f:
                    a7:af:b6:de:64:f9:61:bc:b7:15:7a:1f:3a:84:b5:
                    52:b6:13:1f:24:ec:c2:dd:cf:15:9d:72:4e:f0:60:
                    31:12:bb:77:fa:9f:09:61:91:a3:64:ba:8c:1a:ef:
                    cc:06:c1:45:71:e5:53:dc:d2:83:37:92:70:ab:7d:
                    6a:b8:41:c2:e8:2b:81:da:8d:f2:de:2a:a3:64:e1:
                    c4:e0:6f:fe:99:9b:2b:c6:47:92:b8:e4:de:93:3c:
                    41:d4:5e:e1:f0:dc:42:b4:27:c0:4e:9d:a6:ea:76:
                    08:5b:19:45:37:dc:12:bf:01:00:a5:5e:91:e5:f7:
                    40:69:db:ef:57:0e:e1:37:b7:18:4a:1a:74:04:fe:
                    bb:d2:5b:92:ef:d5:af:ad:d8:a4:03:2b:43:6c:7c:
                    58:71:3c:2e:1b:04:5c:47:81:cb:6e:b7:53:9e:01:
                    2b:51:98:88:0b:85:c1:ab:07:11:6e:6a:80:b1:45:
                    fe:4b:7e:b1:f6:67:c7:e7:52:da:55:e0:a6:28:06:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:46:E8:6E:1A:6C:DE:42:D7:BA:15:B8:AA:14:83:A9:E5:B9:45
            X509v3 Authority Key Identifier:
                keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a2:22:c4:76:a6:73:b0:0a:02:48:62:e8:fd:f5:69:3d:59:
         bc:bc:37:d9:63:df:f0:1b:bd:ff:d9:cb:95:1d:be:a1:e8:99:
         9f:cc:75:52:7e:43:83:37:ec:44:ee:66:bf:24:f7:48:18:0b:
         a5:9f:fb:82:21:b9:4e:68:6d:7d:af:41:f6:6a:9e:7f:4e:6d:
         15:43:25:6c:92:fc:5d:77:36:00:77:72:ba:75:16:ce:55:60:
         2d:ed:44:f9:02:42:58:88:18:40:d5:ef:49:77:e0:59:c7:a3:
         cf:01:9b:10:c2:0c:6b:fc:c4:9d:55:4d:f3:39:92:11:87:5a:
         33:78:cf:4e:3f:78:8b:45:71:c6:ed:a3:0f:46:9f:e2:0a:ef:
         63:c5:4e:f9:48:e1:c8:1f:ae:85:00:7c:e6:b1:14:c2:dc:00:
         18:38:31:21:73:1a:81:f1:ec:81:53:3b:cf:dd:d0:49:33:c0:
         5e:2a:9e:99:68:09:3b:1e:26:23:3c:f0:d5:84:cc:b4:96:d7:
         ea:00:84:32:c1:f6:1d:82:7b:c9:83:c3:0a:a9:fe:77:37:ca:
         a9:b2:7b:ee:3c:c3:d2:b3:82:f8:df:3b:12:fb:b0:25:7a:70:
         94:37:b4:bf:1a:67:d3:52:cc:29:21:76:50:c8:a3:60:3c:5e:
         32:aa:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:00:38 2026 by rpki-client