Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File:                     3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier:          ald/wTUlQLVa0vjfjIIYQu+A3N0pOpYTRhUQlBW8g/E=
Subject key identifier:   08:2D:C3:2C:7E:FC:BF:50:7E:49:93:7C:2A:57:AC:2B:F6:2C:33:39
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer:       /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial:       019EBEED4BFF96FF046BB9FFFF8EE23D6579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number:          187B
Signing time:             Sat 13 Jun 2026 03:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:22 +0000
Files and hashes:         1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: MJ92VcrDUK8+6tApf28T3NAl7l0Yti7y5yWWqtB3Mcc=)
                          2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:4b:ff:96:ff:04:6b:b9:ff:ff:8e:e2:3d:65:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
        Validity
            Not Before: Jun 13 03:01:22 2026 GMT
            Not After : Jun 14 03:01:22 2026 GMT
        Subject: CN=082dc32c7efcbf507e49937c2a57ac2bf62c3339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:e0:df:0e:a9:5c:a1:5e:e2:c7:19:f4:c1:
                    d7:e3:59:ee:dc:ee:87:63:7a:f7:a3:9b:d4:20:a9:
                    79:5f:cb:8f:a2:1e:38:b0:7b:42:db:c7:c8:cf:65:
                    cf:09:23:1d:aa:88:51:f2:fc:c7:ec:61:cc:c8:b1:
                    35:21:18:7e:81:91:8b:96:cf:37:ee:49:f3:09:48:
                    27:8b:03:dc:33:25:9f:07:db:61:94:87:b2:58:42:
                    5f:20:6f:12:65:46:b5:25:56:49:b2:6e:f6:c7:bf:
                    26:0c:80:56:dc:2c:c2:be:86:b3:11:04:c6:64:dc:
                    9f:41:0d:c1:18:7e:76:18:ae:44:81:cd:72:69:bf:
                    1c:d2:a0:ba:32:b8:78:47:cb:ec:f2:d6:7d:00:9c:
                    59:8b:f8:2f:48:7f:f1:ba:75:01:99:97:29:0e:f2:
                    17:5d:ca:1e:0b:5a:c7:67:34:df:97:71:67:3e:87:
                    26:e2:55:0c:89:26:e7:f2:c1:45:c2:4c:bb:a2:88:
                    6d:42:4c:92:c7:9e:d3:e6:cf:7a:9c:e3:6f:ac:ca:
                    3f:d1:36:f3:64:e2:fa:74:ea:84:38:0d:a4:62:8a:
                    12:75:6d:af:dd:df:75:8a:ae:30:b0:37:42:97:ec:
                    ca:72:f1:02:42:94:a6:d0:92:3f:f4:61:30:fa:83:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2D:C3:2C:7E:FC:BF:50:7E:49:93:7C:2A:57:AC:2B:F6:2C:33:39
            X509v3 Authority Key Identifier:
                keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:42:92:0f:f9:bc:e8:7c:c0:6d:ca:c3:e8:36:f8:f6:a2:ee:
         d6:4b:f3:a2:6d:a4:f8:60:53:2f:e0:f1:8b:b6:2a:ac:06:41:
         28:1d:a9:96:1b:48:a2:3f:17:b2:67:9b:fb:b2:f4:af:3a:8f:
         6f:81:79:46:31:9f:80:72:57:a0:bf:26:36:9d:f0:43:7f:66:
         4f:f9:b1:4a:bc:60:80:15:5f:ea:de:5f:9c:6f:c0:ed:9f:56:
         7b:2c:f9:86:af:84:9d:d8:06:39:4e:8c:f8:e7:d8:45:78:54:
         61:be:e0:b9:ae:78:60:55:b4:bb:a5:2e:0a:a1:7c:20:bc:ba:
         df:67:c5:5e:a7:c2:69:d3:7f:a3:cb:71:a8:68:31:63:25:70:
         01:22:d8:bd:e9:65:5d:84:70:4a:7c:d5:8a:84:f4:4a:43:72:
         c8:0a:c3:29:8b:f0:d5:2a:77:06:5e:fa:00:09:7c:cf:a7:90:
         65:79:90:3b:12:ad:81:cd:71:4f:67:2c:31:21:f7:3d:5a:18:
         a6:6c:93:6f:70:1b:87:f6:70:7e:0b:b6:fc:6a:96:5c:72:70:
         d8:d7:1c:b8:6a:aa:80:cd:45:1c:df:9c:3b:6d:30:51:2d:d7:
         e9:42:74:1b:16:c0:1b:0f:29:f3:7d:4d:46:d5:65:3c:aa:43:
         e4:c6:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:27:22 2026 by rpki-client