Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File:                     3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier:          dHtOIyLMLez0MTbkyYD31dudMf/Y9skLq2aqHN7FmdY=
Subject key identifier:   00:35:02:4B:49:97:D4:86:FA:D4:BC:EC:87:F6:6D:1F:76:8C:9E:49
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer:       /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial:       019EC1B74DEC68D4FFF57133105A3E396D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number:          0500
Signing time:             Sat 13 Jun 2026 16:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:16 +0000
Files and hashes:         1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: ebwtut5wyTxKQnO47av5iIHL5IdzAMrZAXHNpjGPrzI=)
                          2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
                          3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
                          4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:4d:ec:68:d4:ff:f5:71:33:10:5a:3e:39:6d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
        Validity
            Not Before: Jun 13 16:01:16 2026 GMT
            Not After : Jun 14 16:01:16 2026 GMT
        Subject: CN=0035024b4997d486fad4bcec87f66d1f768c9e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:99:88:dc:b4:90:16:fe:d8:db:6f:67:ad:
                    c1:d4:30:f0:40:55:dc:d2:fd:97:07:d5:04:e7:30:
                    ec:86:da:ec:e1:71:7c:2e:93:a9:d7:42:f1:d3:85:
                    ea:53:8b:26:d3:9d:33:f4:f3:84:0d:ff:19:10:3e:
                    e2:34:cf:05:4e:3a:ca:f8:9c:29:d4:7d:5e:4d:24:
                    66:29:a3:e6:21:1b:ce:2b:2f:86:d9:91:28:68:f5:
                    aa:d4:d5:f4:1b:7b:a2:ee:3d:01:b4:c0:6b:27:69:
                    42:50:92:a0:03:ce:a8:34:76:9b:3d:f9:f4:75:6b:
                    d5:3b:d6:d9:6d:12:5d:ff:a2:0e:da:50:2c:3c:00:
                    9d:8d:b3:41:4b:c1:99:1c:33:a6:10:53:c7:a4:60:
                    f5:07:1f:16:cd:c5:b3:79:42:cc:cb:4a:a6:1d:a4:
                    ba:e6:e7:05:99:e9:e2:a2:51:56:89:6f:d0:7a:f6:
                    57:24:80:53:53:25:e3:ae:45:91:71:e7:ce:99:3e:
                    08:f7:47:e4:c1:ed:1a:d7:dd:b0:eb:c8:c9:2d:c2:
                    7a:0c:4d:23:70:84:2c:a6:62:b5:fa:77:b7:30:59:
                    e5:2a:bc:de:bd:95:fb:cd:4d:61:c8:7d:b5:5c:43:
                    4e:67:8d:c3:ca:49:f3:2e:08:80:43:71:80:25:82:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:35:02:4B:49:97:D4:86:FA:D4:BC:EC:87:F6:6D:1F:76:8C:9E:49
            X509v3 Authority Key Identifier:
                keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:d1:c6:f1:be:46:7f:b7:3f:da:36:d0:77:1b:39:cb:f7:
         8a:48:ec:25:8c:b3:2c:ea:79:8d:38:97:a5:b9:1b:c9:86:c7:
         92:1f:97:3f:35:9c:58:57:5a:e2:f6:57:0a:12:56:18:93:f0:
         d5:4a:f7:52:45:93:56:61:b2:97:9e:ae:c0:fc:15:4f:9d:ab:
         12:fd:78:68:04:0d:b8:0b:5c:2f:00:61:7f:49:23:47:87:e4:
         21:ee:be:df:33:26:4c:c3:f9:bc:60:40:fd:21:73:aa:c2:bd:
         c8:53:67:8e:af:d4:dd:bf:ad:fd:f7:8c:ff:58:49:bc:ed:94:
         d2:46:a7:4a:cc:d8:47:34:1c:d3:8a:5c:59:4e:d9:7f:ce:be:
         8f:6c:05:58:14:05:92:3f:1b:af:f6:22:75:2b:f3:b0:3d:0d:
         39:54:0b:eb:7c:9b:45:a4:19:db:dd:cf:cb:08:25:94:f8:5d:
         4f:4c:e0:52:c6:bf:ea:ce:dc:d0:c6:61:58:d7:80:c9:c7:3c:
         07:d0:3b:1a:f5:53:79:ae:bc:74:9d:95:32:59:8b:6e:ef:0c:
         a1:76:dd:e7:b5:c9:79:7e:1d:cb:9c:84:8e:8a:78:26:96:fd:
         2b:e8:9a:ba:e5:2d:bc:af:37:c6:95:ae:e8:2e:60:04:01:6e:
         c5:2f:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:00 2026 by rpki-client