Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          6EkqfDJLQeBCYQrpsns8wfLvRW/97aVXbDDOkXj3nbs=
Subject key identifier:   50:0D:B1:C3:ED:62:B5:EF:87:44:09:E8:03:83:16:AE:80:49:EF:60
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       019E2F975181821D1A06D7BAED57C75085DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          06E0
Signing time:             Sat 16 May 2026 07:01:46 +0000
Manifest this update:     Sat 16 May 2026 07:01:46 +0000
Manifest next update:     Sun 17 May 2026 07:01:46 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: LGIQaLJBcJ3lgNqbmbTGgOGQYVEFqPg6NI5JTyEvvck=)
                          2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:51:81:82:1d:1a:06:d7:ba:ed:57:c7:50:85:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: May 16 07:01:46 2026 GMT
            Not After : May 17 07:01:46 2026 GMT
        Subject: CN=500db1c3ed62b5ef874409e8038316ae8049ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:5a:9b:62:8b:c7:35:66:da:ea:5a:ec:7f:
                    d5:68:81:f5:e0:4e:58:ed:0d:b0:9c:e6:e1:9f:6c:
                    c9:9f:8a:0a:b5:d9:a6:fd:20:16:43:1b:ac:32:be:
                    32:81:7f:88:d4:cc:32:4d:9b:fa:36:42:31:65:0e:
                    7a:f6:ed:3a:4d:2d:38:a3:50:50:f7:0d:1c:b4:8e:
                    79:8f:76:18:95:0a:79:b6:ae:ca:10:11:21:6d:96:
                    80:c9:92:7e:18:c5:42:32:d8:66:0a:fc:87:83:73:
                    34:d2:eb:af:64:ca:b5:f5:1c:f5:b2:95:65:7f:09:
                    9c:e9:49:bb:ab:a7:6e:44:7e:c4:fe:04:28:07:bf:
                    49:9a:3a:a8:ea:19:f7:cd:68:f0:85:4d:67:77:f2:
                    aa:e1:69:78:4e:3b:ab:8f:32:b8:7d:ff:cb:98:af:
                    b2:6e:65:5f:ab:bb:04:30:bd:8d:d8:e7:cd:0c:7e:
                    cd:03:20:51:24:b0:ca:05:32:d3:54:dd:76:49:27:
                    ea:32:86:da:5b:81:3f:58:0a:21:e6:62:b0:98:85:
                    86:e0:33:f4:3c:f5:37:89:ae:be:d9:54:f5:74:48:
                    c1:cf:79:c5:c4:63:76:f6:19:f7:68:8d:d8:89:de:
                    19:51:9a:88:46:01:e2:a2:a9:c0:26:c4:e5:69:35:
                    a6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0D:B1:C3:ED:62:B5:EF:87:44:09:E8:03:83:16:AE:80:49:EF:60
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:18:7d:3a:a6:cd:84:e5:72:fb:49:b0:66:55:a4:09:15:de:
         6c:c6:45:c4:9f:9f:bb:ff:94:00:70:11:08:31:3a:02:f3:00:
         35:4d:43:f8:ef:82:82:32:1d:c9:fc:cd:72:87:2d:ed:af:d1:
         23:d3:da:77:b2:f1:80:f8:28:09:b2:19:c5:81:7d:91:78:e8:
         90:0c:1d:61:21:db:26:95:04:cb:e6:75:f4:9b:2d:34:c1:c1:
         9a:5e:52:c6:5d:8b:ce:a0:e7:39:7c:04:b2:08:47:78:ef:0a:
         6e:77:fd:a6:b2:98:e7:11:a1:47:a8:fc:ce:9c:8f:a7:32:96:
         cc:b6:50:b9:08:00:18:d4:19:78:84:0c:56:02:04:3d:02:1a:
         80:bc:cb:40:2e:03:08:4a:f7:96:69:75:af:e8:dc:1c:cf:02:
         f2:e9:84:d3:42:2e:bb:bd:20:fd:98:e4:29:b4:71:6c:d4:fd:
         e9:62:c4:b3:3c:42:12:23:79:fe:a3:7c:78:0a:0c:0b:1d:ae:
         61:f9:60:42:c1:5a:ec:1b:7c:e8:50:2c:f4:45:43:7b:e1:07:
         18:29:83:7a:59:28:2a:80:d9:6e:56:f5:80:58:19:0d:c1:71:
         28:10:27:c3:5f:a2:05:ff:a6:74:52:bb:39:1c:0e:65:0d:62:
         ad:d4:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client