Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File:                     3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier:          ub4m4znaTWYcl3G01Q9A+b8C3QWh3lN5h6g8mCuiY3w=
Subject key identifier:   EF:E1:A4:37:41:B2:16:E9:9A:1B:C3:B0:4C:AD:64:F8:7D:E7:49:3E
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer:       /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial:       019EBEEC469C4DDCD9C74FD090B653F7BCEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number:          17DB
Signing time:             Sat 13 Jun 2026 03:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:15 +0000
Files and hashes:         1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: sHhYC4KUOl+M1P0PvAIyYy4qAkt8g+cCFoyStQJBp88=)
                          2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:46:9c:4d:dc:d9:c7:4f:d0:90:b6:53:f7:bc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
        Validity
            Not Before: Jun 13 03:00:15 2026 GMT
            Not After : Jun 14 03:00:15 2026 GMT
        Subject: CN=efe1a43741b216e99a1bc3b04cad64f87de7493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:f0:20:12:fc:61:ee:d4:32:d0:a8:63:86:
                    5d:c2:8e:ae:89:d9:30:ae:84:59:cb:1b:c7:d4:a2:
                    24:d6:b7:41:f7:5d:32:a0:7f:75:50:cb:a1:83:a2:
                    8f:ff:5b:da:3d:99:5b:da:9a:14:9a:99:38:a9:f0:
                    6b:c6:e7:aa:3a:04:41:c8:ed:33:89:00:3d:50:83:
                    88:fa:8e:df:1c:69:a5:c2:cc:3d:e3:24:20:ca:76:
                    e6:40:7a:f3:4d:96:39:3b:fb:db:32:96:ec:61:30:
                    83:1f:bd:f7:cf:0a:af:87:7d:2b:6b:5a:1c:00:bf:
                    40:60:01:d3:f1:b1:23:de:0e:bf:fe:ec:6c:b8:7c:
                    b2:c3:52:78:01:96:71:9e:1a:39:63:5e:aa:4a:f8:
                    c3:f9:48:c1:8e:34:d7:9b:12:61:cc:8b:2b:e5:1f:
                    5d:d5:4b:07:10:5c:4b:dc:f2:b0:f9:03:29:40:be:
                    2b:7c:19:bf:a4:17:fb:54:61:3e:8b:2d:20:02:35:
                    b3:23:c1:49:a1:1a:a5:be:56:3a:18:00:0a:1c:95:
                    0a:94:a1:f3:16:cf:66:ec:9e:aa:c6:b4:03:f8:52:
                    09:2a:81:14:7a:48:7b:1a:13:4b:f5:65:cd:d0:ec:
                    cb:ac:59:67:85:ca:6a:72:f3:72:73:3f:e4:d5:17:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E1:A4:37:41:B2:16:E9:9A:1B:C3:B0:4C:AD:64:F8:7D:E7:49:3E
            X509v3 Authority Key Identifier:
                keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e5:86:1c:fa:19:4d:40:45:32:53:68:a1:e9:ac:3b:13:8c:
         46:7a:d4:16:49:89:70:25:bd:72:37:2b:f3:1f:21:d2:ce:ce:
         50:be:51:1c:15:b8:b4:4a:c1:ba:a3:42:20:5f:44:dc:78:92:
         d2:20:57:a5:4c:59:a8:5d:58:e3:d3:74:c4:5b:e3:ee:d4:74:
         9e:17:b8:61:8d:e7:cd:e1:7e:3e:f8:ff:8c:c3:27:49:95:5f:
         97:b2:70:30:4d:74:df:f0:87:c1:dc:62:c6:37:e0:26:4b:55:
         f8:61:42:8f:7e:cd:d3:06:eb:d8:ad:9e:69:5e:a1:71:52:ff:
         e9:2c:e7:41:10:73:81:b0:b7:f8:25:48:ce:0f:78:68:32:2e:
         ff:22:3b:57:f0:c4:76:a5:37:70:c2:82:9a:4f:16:75:bc:a2:
         c5:28:ac:bd:09:12:84:4f:9a:bf:73:52:fe:1a:88:51:f2:94:
         1d:74:4f:c9:43:79:cd:41:e6:4e:19:99:ee:01:00:39:4f:af:
         ad:b8:34:d1:18:4e:4a:46:86:20:c9:c1:e8:1b:ef:0f:66:2b:
         04:de:f6:9a:5a:a7:62:97:14:7d:a1:83:a1:65:6e:8f:89:1c:
         33:2e:04:2b:2c:a3:99:2c:56:11:fe:95:dc:11:dc:8d:d4:2b:
         50:5c:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:41 2026 by rpki-client