Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File:                     3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier:          Q9RufNakTwkWNOXPF/NfmalFZ5wj0yGZoowu6uo3vn0=
Subject key identifier:   40:79:F3:60:12:1B:10:9C:A9:53:77:C6:5E:31:03:75:60:86:CE:21
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer:       /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial:       019E2F60280B856574F794AD2E133D5B7D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number:          0A1E
Signing time:             Sat 16 May 2026 06:01:31 +0000
Manifest this update:     Sat 16 May 2026 06:01:31 +0000
Manifest next update:     Sun 17 May 2026 06:01:31 +0000
Files and hashes:         1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: POBrm8mn/Vgf4OOCGrlpiism5dAroxSjuzJ2/evJ9zI=)
                          2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:60:28:0b:85:65:74:f7:94:ad:2e:13:3d:5b:7d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
        Validity
            Not Before: May 16 06:01:31 2026 GMT
            Not After : May 17 06:01:31 2026 GMT
        Subject: CN=4079f360121b109ca95377c65e3103756086ce21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:5b:09:63:82:08:82:4d:be:d1:74:96:c3:
                    41:21:69:d0:5f:1e:6b:23:38:67:cc:04:f0:37:23:
                    d1:6c:b3:37:e4:ee:00:4f:2e:29:68:84:f0:e4:a0:
                    5d:be:c1:18:78:aa:3e:29:c7:d9:d9:bf:ff:3c:4e:
                    65:c8:db:92:35:9d:c0:e0:c2:20:f8:cf:64:4b:27:
                    50:d9:92:a8:c8:ea:2f:60:3c:54:ae:ac:eb:9c:60:
                    85:d0:19:04:1f:c1:e7:4b:9d:46:4c:58:70:53:c5:
                    d7:34:b5:d7:3e:e8:54:19:01:f4:57:0c:03:4d:81:
                    2a:e0:2b:07:3e:78:60:ab:cf:5f:5f:5d:59:d8:92:
                    3f:51:85:6c:7c:e0:e7:01:e1:4e:8f:cd:90:5e:d8:
                    64:7b:c5:78:76:03:b6:72:25:ca:0c:f0:20:a0:6b:
                    22:7c:47:4f:02:bc:b9:bf:9f:68:6c:31:d5:40:3d:
                    f2:c3:22:14:a0:c9:2f:85:48:d7:ae:e0:3c:17:cb:
                    ff:70:5e:89:fe:b8:22:73:3e:77:ff:34:92:da:91:
                    a3:bd:bf:49:20:d4:81:ff:88:1a:db:f6:7b:21:86:
                    e0:ce:6f:d5:2a:2d:ca:be:51:0e:ac:16:d9:0b:11:
                    6d:c5:0d:fa:da:72:1e:0a:2f:e1:2b:ae:18:f7:36:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:79:F3:60:12:1B:10:9C:A9:53:77:C6:5E:31:03:75:60:86:CE:21
            X509v3 Authority Key Identifier:
                keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:69:b3:a5:52:c5:e8:94:06:b3:39:58:0b:d2:69:36:50:
         7f:4e:31:fd:3f:56:1d:a1:49:a8:12:a9:3e:66:97:6c:4e:55:
         4b:7e:4b:41:ee:86:e6:34:84:2d:c0:17:96:2b:50:b7:2d:51:
         1d:31:a0:db:23:d3:ca:80:4f:65:4b:9c:10:ed:01:9b:ef:3f:
         29:cb:3d:7b:3b:ee:25:9d:a5:b8:00:0a:b1:75:46:57:ce:7e:
         3c:10:21:cb:4a:12:43:2b:97:d2:fb:6e:92:d4:4a:0d:7c:8b:
         b6:93:f3:c1:5a:79:0b:22:21:56:16:e0:ad:62:02:5a:2f:7b:
         cc:cf:19:aa:ea:d3:ad:0c:aa:c4:0f:92:de:90:32:a4:df:5e:
         de:c5:16:75:d9:97:b2:96:8e:4b:13:a5:44:f6:b9:4f:8f:e0:
         a6:f2:cc:fd:85:fa:04:44:47:62:f7:1e:ae:36:ed:bc:d2:e8:
         70:60:17:8c:c8:87:c3:61:76:56:58:d9:6d:fe:96:da:48:75:
         88:60:fe:f2:6a:f8:12:15:7d:b7:21:5e:92:2b:c3:9f:11:06:
         24:d3:cf:16:55:9b:d3:58:95:08:24:9b:ae:41:b1:86:b8:32:
         18:30:ba:ec:b1:8f:a8:ff:3d:31:fd:69:2f:6c:d2:5c:02:2c:
         2d:1c:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:33 2026 by rpki-client