Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          DdawidjeTRpbnuldZh6ZarJu77KFcV0r+2uOo/yXO10=
Subject key identifier:   A4:3C:F5:A4:EF:DD:74:EA:B9:26:FB:20:6F:21:DD:F8:BE:07:1C:C8
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       019DFF502017AE3CE299C977D3EEABB39E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          087B
Signing time:             Wed 06 May 2026 22:02:14 +0000
Manifest this update:     Wed 06 May 2026 22:02:14 +0000
Manifest next update:     Thu 07 May 2026 22:02:14 +0000
Files and hashes:         1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: udNCmjFRDx6TW5ktQnigVTRNTm1UuUFheNOmtRrfpOM=)
                          2: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
                          3: ezZ2s7vM_vTGuAjYXi6un0LAHgM.roa (hash: FqUWKm/wtZJygI56D9CwfC5nsdth685XmNZzJnjwPBQ=)
                          4: zkgdKHScYcfkNf_hh7vlGDs0B88.roa (hash: DtYW3iy119fpBsexhV56/OzVqBZUBd8eZdz8luW6zw4=)
                          5: zz2jRWtl0ZmBUMIyfCqK089JqZE.roa (hash: 6YCEfjH+kikFIKbX6N6L9tIisswKqNgalcvAp8ZWIls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:50:20:17:ae:3c:e2:99:c9:77:d3:ee:ab:b3:9e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: May  6 22:02:14 2026 GMT
            Not After : May  7 22:02:14 2026 GMT
        Subject: CN=a43cf5a4efdd74eab926fb206f21ddf8be071cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:69:9b:98:5e:80:8c:df:b3:ea:97:84:6c:
                    08:62:db:26:35:13:da:7d:8b:60:40:8e:f2:78:d7:
                    9b:bd:52:30:ec:df:4c:1d:6e:bc:76:a2:74:d5:fe:
                    a0:37:ad:a0:56:81:38:bf:b7:d2:af:1a:c6:41:4b:
                    06:ae:8f:a6:da:99:40:6c:ef:8a:41:0b:22:0d:a8:
                    0f:5a:4d:5f:a3:d4:15:4b:8e:a3:bf:9b:b4:3e:a6:
                    e6:d2:f8:f2:d4:62:53:d6:3b:f9:1a:af:3a:c0:ef:
                    81:ba:1b:bb:0f:e6:b2:3f:2e:f6:c4:18:24:d3:27:
                    12:94:c1:f1:f0:df:f9:4a:71:bf:a9:e7:10:3d:da:
                    7b:f2:53:da:ff:17:02:21:21:1d:e9:4c:78:ab:b5:
                    a0:00:ca:56:d0:1d:31:8b:8b:52:8f:cf:14:78:12:
                    7a:97:d1:89:79:3f:a6:58:53:40:76:32:3f:7e:36:
                    c7:fa:f0:ca:93:cc:3a:10:3b:c2:58:c0:58:70:8f:
                    18:e8:df:6a:2e:c0:d4:61:87:e9:f2:3a:9e:4a:97:
                    04:69:92:de:68:ef:ce:8a:17:56:bf:17:0e:01:a6:
                    61:28:98:56:fb:87:54:65:a5:45:eb:38:a5:20:73:
                    94:73:62:78:c5:fd:b2:ce:6a:bb:9a:7d:93:95:98:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:F5:A4:EF:DD:74:EA:B9:26:FB:20:6F:21:DD:F8:BE:07:1C:C8
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:08:7e:7d:52:17:4f:02:c2:82:60:85:4a:9d:64:95:d1:
         ee:fd:1f:3e:1a:33:03:f9:71:c3:18:6b:28:8a:87:d1:f0:c3:
         91:27:fc:1d:43:64:c8:4c:2e:70:54:96:e2:01:1b:78:44:26:
         9b:16:70:3d:a6:3b:90:76:0e:e1:2a:22:c3:9f:4e:2c:a6:71:
         5e:f4:5c:1c:61:f3:42:4b:d4:a8:1e:f2:e0:5a:8a:96:9b:ba:
         6c:91:be:40:27:f0:67:be:15:b9:3f:55:70:a4:d4:a9:31:f0:
         8e:de:23:e0:69:6b:bd:fc:ba:19:19:d8:00:fc:42:e2:43:b4:
         56:0f:45:e6:5a:42:0f:2f:e2:fc:e4:47:2c:4e:b3:b1:fe:db:
         ce:cb:6b:e1:45:c9:ac:51:d9:df:8a:84:52:b5:44:7b:16:6d:
         98:f0:94:86:fd:5c:48:b5:a7:77:62:68:03:ea:00:5a:ee:74:
         cf:c7:ce:a0:49:d4:eb:5f:96:93:6b:85:a0:11:32:62:90:a8:
         be:bc:69:c9:dc:fa:4b:7f:83:ad:da:f2:c1:76:2e:1b:11:e3:
         cf:1f:6d:23:be:0a:be:8c:59:30:0c:2b:27:fe:05:e4:85:36:
         da:12:4f:a3:5e:78:fb:68:5c:82:ef:9c:28:42:8d:68:34:47:
         b8:05:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:35:00 2026 by rpki-client