Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File:                     3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier:          uHbFE299CXJg9afYwiANVa/IOITAphhzfpV9c/J5FNI=
Subject key identifier:   7D:F5:1E:A5:BE:1D:58:4F:89:B5:E0:7D:6D:66:51:7D:67:AE:36:88
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer:       /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial:       019E2F5FDF2BE6ACBD4A11D3EFD3B74025C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 06:01:12 +0000
Manifest this update:     Sat 16 May 2026 06:01:12 +0000
Manifest next update:     Sun 17 May 2026 06:01:12 +0000
Files and hashes:         1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: vri48GONtePjrIUpc8pGXYkD816FluPcJYE4LHKOPHQ=)
                          2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
                          3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:df:2b:e6:ac:bd:4a:11:d3:ef:d3:b7:40:25:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
        Validity
            Not Before: May 16 06:01:12 2026 GMT
            Not After : May 17 06:01:12 2026 GMT
        Subject: CN=7df51ea5be1d584f89b5e07d6d66517d67ae3688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:f0:01:b5:e4:f4:e1:a6:a4:be:a0:6d:11:
                    35:80:00:5a:00:79:91:5c:71:c9:c1:2a:05:38:ad:
                    3c:d7:21:32:15:ad:a5:77:df:54:a0:02:91:2c:ee:
                    45:bc:7b:a4:0c:0c:3d:4e:fa:a5:a6:5e:3a:ae:be:
                    7c:3d:29:15:3a:43:56:20:d0:81:fd:e7:28:b4:73:
                    52:65:81:35:1b:2e:83:b4:46:2b:19:a2:ff:58:48:
                    58:49:d7:d4:d7:6e:bd:06:50:01:1c:20:44:4c:31:
                    e2:05:d3:4c:c7:1a:e9:2f:94:7d:c4:16:e8:09:4d:
                    cb:71:31:a5:60:51:eb:07:e7:ba:63:61:6b:d2:57:
                    d6:cd:10:37:3c:75:7e:6e:c7:fe:e6:1d:44:19:7b:
                    d8:0a:46:9b:84:16:af:19:6f:02:32:b0:1a:5a:19:
                    14:63:ae:46:bc:72:64:1e:0a:2d:c8:bd:b9:24:f5:
                    33:31:cd:c2:de:5b:9c:c6:68:ca:77:87:dc:54:90:
                    66:89:f1:b9:2a:d0:3e:ee:f2:d8:51:6d:64:c1:84:
                    fd:2f:bd:20:7c:31:11:ac:c6:93:78:21:f0:1f:8c:
                    97:f0:48:97:32:b8:58:08:05:5a:19:a5:7e:3d:94:
                    51:0a:bf:2a:fd:8e:3b:52:c6:0f:e6:4e:60:d5:d1:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:1E:A5:BE:1D:58:4F:89:B5:E0:7D:6D:66:51:7D:67:AE:36:88
            X509v3 Authority Key Identifier:
                keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:bf:1e:47:ac:38:6a:17:cd:56:ae:4a:64:71:72:69:a5:
         2b:95:53:ad:a0:9f:5c:63:93:1a:6b:39:94:4a:3f:31:e7:6b:
         6f:16:8d:8f:b1:c8:1a:40:b4:cf:d6:0e:7e:dc:f0:93:43:94:
         8b:f1:85:0a:b9:99:66:bc:b1:97:a5:e2:8a:28:24:d4:7f:45:
         8e:a8:47:8b:b5:8e:bb:b6:f7:0b:c2:2e:94:ea:2c:f6:ba:58:
         aa:54:f0:1c:04:a7:b7:f1:ba:8f:f4:8c:f7:b3:93:75:58:98:
         b7:60:1f:74:8a:72:f1:de:1a:09:65:78:2a:96:7e:d8:4b:af:
         44:ca:98:01:c5:c1:df:13:72:b7:7d:13:16:5e:55:75:dc:03:
         e6:96:c1:17:fe:a5:cb:a9:cf:2d:bb:68:53:6c:86:4a:a9:c3:
         91:e8:54:fc:74:11:ac:fe:5d:0d:8d:e9:10:b1:ce:45:78:3b:
         df:b7:8e:2c:ac:32:2f:09:65:92:6c:cf:b0:cd:b0:f0:cb:b6:
         a6:27:2a:7b:df:98:de:2f:b0:8e:6f:16:5d:a2:e4:f4:06:26:
         05:1a:ad:ce:85:12:f2:53:9d:6d:bf:c5:e5:a5:a8:cd:bd:62:
         20:76:f6:01:5c:93:95:46:61:93:10:89:f9:28:ef:a6:cb:a4:
         60:96:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:46 2026 by rpki-client