Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          A/5gacShv50QMxdoE7wl+8YM5a7pRNgpj5tN2wKLSPM=
Subject key identifier:   62:94:ED:00:52:F3:6F:46:4D:07:BF:22:68:63:9B:B7:35:D1:75:3C
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       019CAD597B9F9D3C16F754E48B45C5599D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          1843
Signing time:             Mon 02 Mar 2026 07:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 07:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 07:00:48 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: GdS6bclij8yTZzZB+JddAsJHP96tm6xxmk+3sBPyr+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:7b:9f:9d:3c:16:f7:54:e4:8b:45:c5:59:9d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Mar  2 07:00:48 2026 GMT
            Not After : Mar  3 07:00:48 2026 GMT
        Subject: CN=6294ed0052f36f464d07bf2268639bb735d1753c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:ee:83:9f:9d:ed:32:ef:5d:eb:02:d3:e3:
                    fb:ac:c9:04:4e:6c:4d:03:61:0c:29:cb:50:f7:7c:
                    da:b2:7c:48:a6:4c:bc:6a:35:dd:c4:00:9b:2f:7a:
                    ea:0e:e4:8b:b0:d7:37:8f:49:91:e3:8b:18:a2:a7:
                    6e:f2:36:9f:db:20:1e:e1:91:0a:27:5e:85:74:d7:
                    7d:33:34:a9:be:03:0b:cd:06:73:fb:ef:e7:1a:99:
                    95:70:85:13:73:75:14:27:3c:82:99:06:4f:e5:22:
                    6a:be:53:6c:79:64:20:28:b3:db:d4:a9:a9:e8:68:
                    76:d1:0e:db:8c:b4:b1:e5:f0:57:e0:4b:74:c3:d6:
                    85:5b:77:3e:92:df:3d:68:76:8a:7b:09:89:88:38:
                    de:1c:18:93:81:62:e4:a6:65:40:91:f9:01:57:ca:
                    ef:37:2b:fe:f0:05:c8:71:7a:e5:5a:41:ed:99:64:
                    23:ea:5b:d7:9a:d5:92:79:c6:b5:1b:e2:a9:44:54:
                    ed:98:2d:e8:43:33:32:c1:79:96:be:41:b2:89:c2:
                    e7:22:95:0d:ff:b9:ab:aa:b5:4f:63:cf:71:d2:dc:
                    b6:4b:13:6b:2c:bd:8f:30:b3:7a:41:ec:9f:e0:e9:
                    87:2e:52:5d:f2:f9:a7:d2:81:c2:9a:6e:5a:bb:e3:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:94:ED:00:52:F3:6F:46:4D:07:BF:22:68:63:9B:B7:35:D1:75:3C
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:69:37:ce:d5:65:50:11:b0:b1:97:52:bd:93:bf:f2:98:b3:
         6f:ba:7c:c6:97:24:7c:8d:7b:bc:af:3f:06:af:b4:de:07:14:
         54:8d:9b:86:5e:39:86:5a:af:46:20:3c:21:83:bc:20:9a:82:
         74:9d:7c:18:10:d7:f2:59:f2:9f:b1:59:99:7c:88:4f:f5:43:
         ff:e4:68:e9:43:3a:fc:f8:f8:f8:4b:fe:8f:ee:cc:8b:6a:d4:
         dd:23:58:04:0d:84:59:90:59:6e:aa:44:58:0a:0f:14:80:db:
         3c:05:fe:15:e0:11:d2:a8:1b:bc:5c:7f:80:9f:94:2a:c9:8a:
         b7:c4:ac:c0:bf:e7:f0:ae:6f:ac:31:fe:e0:51:84:0f:95:ce:
         89:32:70:a6:c4:43:4b:a3:2b:12:73:f2:3d:fc:33:c8:7a:01:
         21:08:08:35:e7:90:63:d9:c3:cd:e0:d5:71:fd:aa:29:60:78:
         3f:5f:92:7e:be:21:3f:18:a5:6c:62:9c:da:86:e5:32:d4:71:
         ca:7c:da:ee:29:cb:ba:5b:f1:35:52:40:fb:78:c3:7b:02:89:
         13:8e:5f:e4:fb:8e:97:32:af:f2:cc:d5:92:10:79:6c:1e:a1:
         e7:a0:10:58:49:0f:69:93:53:ef:63:64:a0:25:22:ce:79:bd:
         42:20:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:15 2026 by rpki-client