Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          OIS3Thp9L5Lo2AMCY9SyIHAbhI4KulaTLXvUsychJGw=
Subject key identifier:   80:06:A1:C9:CC:CF:B5:03:63:44:1D:5E:EE:C2:27:30:8E:D2:3D:64
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       019EBE7F27ADE23AA11BC60E08E32EBB518F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          103E
Signing time:             Sat 13 Jun 2026 01:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:04 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: g78PAvbZHHLeaMesmyz2TNcIp+0RmVLObdtUCrKudSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:27:ad:e2:3a:a1:1b:c6:0e:08:e3:2e:bb:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Jun 13 01:01:04 2026 GMT
            Not After : Jun 14 01:01:04 2026 GMT
        Subject: CN=8006a1c9cccfb50363441d5eeec227308ed23d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a9:08:ad:2b:37:00:bb:ca:57:a9:c3:da:82:
                    7d:5d:18:1d:40:f1:70:c0:29:8d:1a:7d:05:ce:2e:
                    94:dd:48:11:2c:38:80:d8:e5:83:20:63:e8:52:07:
                    83:91:3d:6b:c7:9b:69:71:91:47:31:69:44:61:1f:
                    4d:b5:c7:17:da:2b:f8:81:fe:44:79:3c:aa:70:69:
                    32:dc:13:fd:48:46:33:ef:45:83:06:86:f8:32:68:
                    d3:d4:a6:d1:ff:b3:81:db:28:b7:53:9c:d0:25:21:
                    f5:f9:2b:19:ae:cc:e9:f0:72:24:09:55:7b:7f:6b:
                    a4:24:ff:5e:a2:6d:d5:34:6e:6f:cf:b3:73:01:25:
                    c1:e9:6f:40:f1:1e:f6:f6:3b:71:6c:20:f7:1e:87:
                    f6:e6:fe:85:1b:9e:78:8a:1b:17:3b:9c:c1:04:19:
                    88:59:5e:4d:05:ad:d9:13:e9:85:b4:28:f2:c4:b0:
                    1b:8f:57:d3:f0:52:47:97:a7:06:9d:ca:fd:59:5b:
                    6a:86:b7:e3:87:43:6b:06:e2:d6:80:42:6b:0f:33:
                    9c:39:91:ae:ad:bc:fb:7a:c6:56:57:9a:e2:74:3b:
                    c0:37:91:1b:1c:3b:82:c5:d9:db:d1:6f:3b:f2:04:
                    6c:1a:d1:8b:4b:06:40:13:c3:60:39:62:1f:5d:57:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:A1:C9:CC:CF:B5:03:63:44:1D:5E:EE:C2:27:30:8E:D2:3D:64
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:68:1d:95:5d:46:2c:1d:3d:89:fe:74:b2:36:c2:a6:60:39:
         d8:f2:b1:56:b5:07:60:9c:36:c5:03:0b:b7:21:0a:b7:ae:bd:
         28:67:09:4a:d1:cf:38:cb:12:db:b5:a8:ff:13:e4:5a:0e:fc:
         b2:f3:2a:e5:75:7e:cc:9a:57:ab:4e:d6:1d:39:76:ce:cc:67:
         44:22:99:35:e1:47:f6:72:05:60:ad:e8:c4:48:bc:5c:53:76:
         39:4e:6c:c0:a6:7b:54:18:e6:52:f0:55:72:db:16:8a:1c:b0:
         cf:f6:65:4d:55:eb:82:8a:67:8a:be:88:4c:2c:53:41:ca:1b:
         fd:ac:cc:c3:79:d1:8d:02:fc:78:d5:06:9b:b2:1e:97:c5:66:
         50:36:62:35:79:88:09:e9:0b:9a:d6:f0:21:e0:27:8b:8b:7b:
         eb:44:7a:a9:ec:3c:cc:d0:f5:01:35:97:af:4c:e2:b9:56:9c:
         84:8f:51:d2:cc:37:e1:c5:96:48:9b:bc:71:44:84:b7:0c:8a:
         15:39:f3:84:4f:37:49:0c:d1:cb:9a:21:95:37:34:e5:a0:57:
         7a:52:f8:75:dd:ff:3d:60:9a:8f:60:20:d2:34:1e:da:79:ff:
         54:e0:1b:9a:c4:fe:01:a7:50:b9:bd:ba:d9:dd:99:b7:79:99:
         87:78:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:54 2026 by rpki-client