Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          X8erTVuYCmmvxh8FzHMm/tazb0E9gYS6rjIpIGZVsvc=
Subject key identifier:   78:56:CE:40:E4:D6:2C:B7:30:10:7C:73:61:4D:D7:74:88:7C:5D:DA
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       019EBE109A7646561801E7AB416E6BA40968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          196A
Signing time:             Fri 12 Jun 2026 23:00:19 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:19 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:19 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: JMWa2vvI0F5UCRbtmRUCSLLjy/+2a14aEGkgtv52Ak4=)
                          2: 3Yx2vfa7XpKGoKje1_1k7pHSStk.roa (hash: 4SXl0Toh/4xYp5qzMatRJXmfZoTd3stX8dho8IkBhRc=)
                          3: O_zLKAo-ZMO-tgxP2QAdS4mIV5k.roa (hash: exFmvEBwttF4QN/C/nqEjfx58jhXHu21SMR83NxxCYg=)
                          4: ZcXPev5XSqeCfOjCRaC4jLAvk3w.roa (hash: tC1vsSl2lFcihSUrAMnGtV0LC1FxIGsGqNLEW5eQ5Gk=)
                          5: jVDrmBIoje6iRSObfGXaCjLz0xo.roa (hash: RXvov2OHxeC7UMuJbvYcTyuiz8VJj0AFn2lQavBDDFc=)
                          6: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (hash: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc=)
                          7: yBmSRS9b5lz7_xzd3NgvPyLBW94.roa (hash: 8pKcmdD26fnU0KVwOwv225VvvZWRzrn5qkT1zOJvfrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:9a:76:46:56:18:01:e7:ab:41:6e:6b:a4:09:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Jun 12 23:00:19 2026 GMT
            Not After : Jun 13 23:00:19 2026 GMT
        Subject: CN=7856ce40e4d62cb730107c73614dd774887c5dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:79:34:97:a2:d5:89:08:ad:39:26:a7:16:
                    c0:7f:91:40:5d:56:e2:86:87:d1:98:df:42:1b:10:
                    23:62:15:c0:be:ae:86:78:0c:85:ff:f8:80:0d:ae:
                    c5:55:f5:08:2f:2b:fc:ea:eb:0c:39:87:47:fe:61:
                    6a:66:53:62:44:f2:f3:86:30:af:65:4b:cf:7d:da:
                    4a:9c:74:f4:dd:0d:5d:f7:31:68:9f:d6:0c:76:0a:
                    43:b3:17:86:3b:37:45:d7:ac:11:68:99:15:64:26:
                    3d:65:36:83:10:dc:ea:e7:9f:11:d3:fc:9c:67:15:
                    3e:8d:77:1a:48:0c:ec:0d:1f:03:c9:87:e0:38:2e:
                    35:19:83:22:06:8b:37:d1:99:80:d8:15:67:0c:88:
                    34:66:8f:e5:da:a7:0b:51:c2:10:e7:67:af:41:99:
                    d1:bc:e4:e8:d9:fb:db:ad:c6:63:52:81:9f:9d:2e:
                    e9:5d:d3:5f:b3:96:62:e1:f9:c7:39:9a:2c:c2:69:
                    5a:4c:f0:e3:44:c1:b5:de:ef:f0:13:01:f0:6c:eb:
                    10:f5:76:e6:0f:8b:a6:d9:2a:a7:5f:13:68:67:cd:
                    e4:94:40:0e:ec:de:e2:9e:bb:f4:99:a0:45:32:cd:
                    69:52:d6:b4:18:b1:b7:da:a5:20:93:bb:e7:a5:69:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:CE:40:E4:D6:2C:B7:30:10:7C:73:61:4D:D7:74:88:7C:5D:DA
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cb:14:3b:1a:69:e9:50:07:45:cc:43:eb:8b:4b:63:82:c9:
         b8:71:c8:75:e2:23:64:b4:d6:5b:e8:7f:72:6f:df:69:25:15:
         c5:ab:4f:23:c0:62:08:0f:3c:6b:8a:2c:10:8c:7d:b2:d7:77:
         b7:1c:12:ce:70:46:04:f7:4d:c1:73:77:56:55:8a:4d:01:12:
         40:af:d8:7e:67:28:af:9b:d8:32:3b:fe:5e:76:67:5f:ff:43:
         c2:60:9f:86:0e:6d:91:60:32:3a:d5:5d:5e:7d:bc:c7:22:6d:
         fd:79:e4:c7:54:38:63:1d:0c:f5:dd:80:7c:b9:11:18:3d:52:
         31:18:d1:90:93:64:b3:46:da:af:f8:bf:83:34:d6:24:61:90:
         92:4e:c1:b8:64:a1:ba:24:8f:68:26:08:cc:9f:a6:a9:12:ad:
         65:4c:c7:c1:ec:c3:49:2e:20:3c:04:d2:75:26:32:a4:9d:d8:
         ea:75:2a:82:92:c2:f1:85:4e:01:19:b1:ca:1d:fd:5e:3b:43:
         eb:61:bb:f6:ca:1b:24:bd:2c:e6:14:6e:37:82:15:e4:04:18:
         61:4a:27:ff:fd:5f:11:3f:20:b6:92:8e:72:16:4b:57:42:8f:
         ba:bb:e4:a6:58:37:8f:14:51:f7:fb:f7:57:11:46:36:d8:40:
         53:4e:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:19 2026 by rpki-client