Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File:                     3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier:          gXUwnPfvNsqbVCoNQiUuKadyzmCBGESTgG1Q08UGcKw=
Subject key identifier:   D0:1F:67:64:2D:64:C7:C0:A0:DF:FF:B2:62:17:1C:35:B3:88:DB:55
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer:       /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial:       019EBEED0B28D698FCFF92DE864BFEED3A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number:          0DCF
Signing time:             Sat 13 Jun 2026 03:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:06 +0000
Files and hashes:         1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: bICSOD5QO8N3Cyu1VZycjNxE/WSDdUZHdd7kK83g6Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:0b:28:d6:98:fc:ff:92:de:86:4b:fe:ed:3a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
        Validity
            Not Before: Jun 13 03:01:06 2026 GMT
            Not After : Jun 14 03:01:06 2026 GMT
        Subject: CN=d01f67642d64c7c0a0dfffb262171c35b388db55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:44:34:dc:dc:65:b8:d4:96:ee:b1:55:ab:
                    10:13:b8:d2:12:19:d7:5d:01:98:90:aa:ca:ba:ae:
                    67:07:01:1a:13:0f:e7:ff:06:5e:eb:b9:a3:0b:ac:
                    00:2a:92:a3:4f:0e:3a:85:23:92:a8:e2:87:1a:b2:
                    b2:76:e5:52:93:fb:cf:a8:61:9f:2f:e2:0c:f9:7d:
                    94:a9:cb:61:45:32:88:50:f1:d5:f3:d7:31:97:1e:
                    00:88:cb:e7:9e:29:b0:cf:ae:7e:d0:6a:da:d5:37:
                    9d:ba:70:e9:96:1f:a4:c1:1f:d7:6d:3a:1e:15:4e:
                    d6:3c:c8:4b:07:44:6d:49:59:c2:70:6f:85:35:ee:
                    da:17:76:16:6d:8c:e2:70:53:ec:e1:9b:f6:8a:8f:
                    f9:84:0b:6e:f2:31:2f:5a:bd:51:39:57:64:70:0f:
                    8e:40:d0:e7:e8:c9:00:53:9e:f9:7a:68:60:7f:e9:
                    20:d4:26:7c:95:11:28:2d:a5:63:c5:0c:98:e7:f3:
                    28:b9:d2:ad:92:a4:2d:75:1e:0e:4a:df:d8:ea:45:
                    f8:ff:03:e7:6e:28:38:f1:91:f4:ef:27:b2:ac:77:
                    a0:94:0d:db:60:04:36:77:1d:13:f7:23:2a:9c:9b:
                    f8:81:a7:44:e1:34:e5:12:aa:1f:33:49:72:32:2d:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:67:64:2D:64:C7:C0:A0:DF:FF:B2:62:17:1C:35:B3:88:DB:55
            X509v3 Authority Key Identifier:
                keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:74:c0:81:f1:96:63:82:01:68:32:69:85:7d:f0:65:1c:
         81:b5:52:ad:38:0a:7a:35:85:a1:1d:e4:6e:ff:f5:14:c0:60:
         c3:49:e7:65:83:77:e3:43:ec:9d:00:a6:bf:91:3a:7d:36:6f:
         c7:bb:44:e7:ee:4a:ba:4d:df:41:c0:3f:8a:59:fd:63:41:fe:
         6c:dc:9b:f8:12:7f:8f:5c:2b:8c:77:80:9a:cb:b1:b0:a5:f7:
         ef:90:60:6e:f2:49:68:a3:c3:af:45:e0:9a:5c:ef:5e:2d:d8:
         ea:5a:9c:94:97:c6:ec:a7:ba:8e:a2:b7:35:67:2f:48:6e:48:
         86:66:10:a3:a5:db:3c:7c:cb:d0:4f:57:8e:7e:a3:32:58:40:
         84:1b:6e:1b:9a:31:9c:7d:03:f7:5d:e3:b8:76:e8:f6:dd:26:
         10:b1:0b:93:ff:bc:e9:ee:d4:fd:e6:a5:7c:d8:db:d4:47:11:
         c2:1c:83:6a:c9:ff:96:1e:d0:bd:50:e3:1b:3a:77:22:46:a6:
         7f:e2:b8:fb:8d:5f:95:56:0c:41:fa:83:d7:45:23:ef:6c:0d:
         d5:2f:f7:18:51:a0:8a:bb:54:a4:52:7e:be:a8:e0:d9:50:b6:
         46:08:a1:e2:d7:bd:d4:3f:2e:40:d2:55:61:82:6e:6b:5e:b1:
         7e:c4:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:07 2026 by rpki-client