Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          Y7Ztnj+hFiAIx+pk7Ct1aUM/hvYwHI+1bO7Tlj7dRs4=
Subject key identifier:   A5:3C:52:77:BD:10:EA:57:41:FF:C3:7A:C4:91:2E:2D:94:BD:6D:F0
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       019EBD6BFFF5E110AEB11E4451115B0101F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          0B2E
Signing time:             Fri 12 Jun 2026 20:00:32 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:32 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:32 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: Obmjo4BSEwa8yZr179+ahzPVsFM7TsM6cDE9G1LoAFY=)
                          2: lRxNEuaM9QpyAjoPeGGqEFp0bP8.roa (hash: IPZ3rABOnomgE8tL9UL1behEamup4e8GPV/2Qwjj8sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6b:ff:f5:e1:10:ae:b1:1e:44:51:11:5b:01:01:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Jun 12 20:00:32 2026 GMT
            Not After : Jun 13 20:00:32 2026 GMT
        Subject: CN=a53c5277bd10ea5741ffc37ac4912e2d94bd6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:85:61:13:22:fe:ec:2c:ce:98:c1:65:e1:
                    79:25:b8:f3:f6:58:85:e7:c5:ee:f6:8b:9c:95:5d:
                    89:17:19:02:6e:89:b9:7e:d5:d8:2f:58:c9:e6:a8:
                    26:e8:ca:65:09:0a:b7:71:a8:70:9a:f0:2f:77:16:
                    34:1e:b8:5e:c8:07:a5:d8:b5:8f:cb:9d:28:33:de:
                    4d:3b:59:cc:07:a0:c4:20:68:a6:e4:8d:84:9a:4d:
                    57:ba:14:9a:0a:6b:fd:c2:79:7d:dc:66:52:e8:15:
                    84:66:65:f1:ee:98:e7:62:aa:34:ab:c4:c5:01:e4:
                    43:af:b6:02:89:fb:72:1a:4a:fe:75:f4:32:3c:30:
                    0a:ba:89:b0:91:a2:7a:f8:9a:e2:ca:d8:b8:21:be:
                    23:0e:a7:88:38:59:a5:aa:ed:0e:33:3d:4d:d5:61:
                    5b:40:9c:41:1f:67:9b:73:07:3d:31:4f:81:7b:6e:
                    2e:04:e2:f4:6f:48:1d:a2:e9:b6:2c:8a:b1:f2:75:
                    28:84:86:03:50:dd:2a:0c:80:91:cc:06:1b:74:10:
                    94:5e:2b:4d:cb:6e:d0:d9:e8:1b:6e:27:e2:8b:11:
                    ef:37:85:34:db:27:a5:30:5f:6e:e1:7b:ce:80:25:
                    1a:76:bd:cc:35:24:35:de:d8:d2:e1:87:dc:64:5c:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:52:77:BD:10:EA:57:41:FF:C3:7A:C4:91:2E:2D:94:BD:6D:F0
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:3e:49:48:f5:8b:6e:39:d4:08:8b:76:0a:f8:50:ea:75:
         6b:65:27:7e:53:4c:f5:12:7e:92:85:37:f7:3c:f4:29:92:2a:
         42:b4:bd:17:6a:55:53:f6:aa:a4:32:8b:75:8c:8e:2f:ab:82:
         39:3a:f3:02:2b:b0:fc:39:51:11:23:f0:a2:57:51:32:e5:5d:
         fc:8d:4d:9d:62:8c:01:f0:7a:b0:fc:6a:86:ce:41:e6:08:ed:
         29:1c:0d:b8:a2:98:c6:2f:ff:6a:0e:26:e6:b6:44:22:cb:4a:
         d4:56:e9:ce:1f:7e:e3:66:03:91:46:76:98:35:49:67:4c:ff:
         53:ad:c7:23:64:87:68:2f:5b:00:f1:25:8f:0d:6d:d1:f4:85:
         86:e6:07:e0:8e:52:e4:53:6c:63:9a:02:34:c4:4a:05:a8:24:
         b6:dc:90:c9:37:25:a9:45:58:d7:83:78:2d:d2:8d:21:2e:a3:
         f4:06:68:cd:3a:31:4f:14:30:c9:53:b3:e7:ce:9a:a7:d2:66:
         d1:46:90:e9:09:9d:d4:f2:04:d4:aa:77:86:9e:b6:f7:10:57:
         1e:41:53:1d:27:12:21:93:67:bf:6b:08:08:25:43:7f:0a:21:
         33:3c:0c:64:e4:6c:6a:05:3a:1a:23:22:08:e2:50:82:aa:3a:
         33:e4:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:42 2026 by rpki-client