Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File:                     3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier:          ydXpGYXmXYHwYUSWrAed50iS1IwPCPyLkXbgoWgY7dA=
Subject key identifier:   21:4E:AA:D3:B1:17:B7:2B:9F:14:D1:BF:48:A8:03:E4:11:0C:20:68
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer:       /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial:       019E2F28CAA7655690A5C996E8DEB0F2723F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number:          1850
Signing time:             Sat 16 May 2026 05:01:02 +0000
Manifest this update:     Sat 16 May 2026 05:01:02 +0000
Manifest next update:     Sun 17 May 2026 05:01:02 +0000
Files and hashes:         1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: peYtXLvYciogYDsyFAXjzG0tfyShUboBIA05YB71Syk=)
                          2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:28:ca:a7:65:56:90:a5:c9:96:e8:de:b0:f2:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
        Validity
            Not Before: May 16 05:01:02 2026 GMT
            Not After : May 17 05:01:02 2026 GMT
        Subject: CN=214eaad3b117b72b9f14d1bf48a803e4110c2068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:16:d4:29:c0:13:7c:73:03:dd:10:e4:05:
                    da:ef:64:ec:75:8b:9c:5d:97:bd:dd:2e:dd:7b:1d:
                    43:d6:58:89:4a:97:a1:cf:44:f8:a5:b2:aa:1f:dd:
                    34:43:da:a0:09:05:3d:1b:95:05:a8:20:02:cc:59:
                    e5:a9:fd:73:66:05:6c:27:8a:18:a7:05:5f:5b:14:
                    49:58:86:2e:63:51:d7:6a:48:8c:1f:8c:10:0e:61:
                    c9:1f:0c:55:b1:20:f3:22:4f:77:4d:9a:44:db:37:
                    c2:47:c1:b4:73:1c:49:56:95:f4:c3:90:e1:53:4c:
                    51:18:71:c8:d3:ee:8d:6c:4d:1c:5f:50:b4:2d:38:
                    54:7d:ef:ae:9a:00:cc:6b:3e:6b:13:ef:71:7d:ac:
                    44:c7:5d:3d:8d:ad:fa:17:b6:a5:74:d6:c4:1e:8b:
                    06:b3:96:c6:09:fd:dc:11:bb:58:af:d9:64:f2:20:
                    cd:08:57:2e:a6:82:ee:e0:3a:d8:a3:ac:da:3e:55:
                    61:d2:c8:80:ed:56:06:52:77:35:7a:8f:06:0b:ca:
                    90:3a:0a:cf:7b:19:9c:0e:03:80:58:b4:ee:88:30:
                    8a:bf:f0:3b:7a:ad:f5:8e:82:cb:ad:e2:a9:26:6a:
                    2b:08:90:03:dc:27:be:6f:45:6a:f3:6f:bd:2b:e6:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4E:AA:D3:B1:17:B7:2B:9F:14:D1:BF:48:A8:03:E4:11:0C:20:68
            X509v3 Authority Key Identifier:
                keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:72:07:05:d9:28:7b:07:7d:1d:54:29:c5:dd:34:c3:4d:
         f9:0d:7f:09:5a:33:8b:29:a6:bb:6a:aa:4f:ba:4d:15:1d:21:
         c3:ad:ef:9f:1e:b7:f0:d8:7e:ca:ab:5f:29:3e:cf:1d:50:51:
         18:52:94:c9:fa:53:0c:71:79:44:b2:1e:63:30:7a:4d:17:02:
         23:bf:db:f5:ca:bf:7d:5c:2f:e4:aa:bb:d6:d2:64:eb:49:86:
         c4:8e:15:17:c5:54:5c:19:59:55:64:4c:0c:28:ea:4c:5c:8d:
         63:c7:ef:db:1a:43:76:27:46:b2:97:22:ec:41:4b:b3:e0:d8:
         ac:44:3e:8f:d3:21:9c:c7:67:2c:53:54:3e:d1:b7:e7:82:e6:
         ad:54:64:2b:90:15:21:08:18:f8:14:31:b0:a7:07:55:8c:31:
         06:62:c2:1e:ca:29:2f:12:7c:72:7a:00:db:42:bd:58:7a:15:
         b9:bc:8f:73:a1:0c:1e:dd:0a:9e:8a:07:27:f4:74:73:61:c7:
         1c:fa:7b:a2:cf:31:ee:43:4b:d0:4e:4d:5e:31:8f:cc:7c:6e:
         6a:f5:64:31:07:c7:c5:75:96:24:75:c8:6b:62:92:13:6d:7c:
         e1:48:ca:b0:f0:0e:cf:bf:31:8b:21:ce:8b:b3:a6:2e:db:8b:
         5a:b0:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:27 2026 by rpki-client