Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          chK0JFDlelaAQIVKESkofXwF0CXWwIrHUnePvefGyVQ=
Subject key identifier:   42:FA:57:89:1D:A3:EE:8E:19:81:22:F6:73:E8:AF:D3:31:52:2F:DA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       019E973AB038D5EA68904A5E98ED29C368E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          150E
Signing time:             Fri 05 Jun 2026 10:01:06 +0000
Manifest this update:     Fri 05 Jun 2026 10:01:06 +0000
Manifest next update:     Sat 06 Jun 2026 10:01:06 +0000
Files and hashes:         1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: tOcATx9erqQwqW3Uy8jWUiptQBQTrDnhuKTa7LVq1sQ=)
                          3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
                          4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
                          5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
                          6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
                          7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
                          8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:97:3a:b0:38:d5:ea:68:90:4a:5e:98:ed:29:c3:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Jun  5 10:01:06 2026 GMT
            Not After : Jun  6 10:01:06 2026 GMT
        Subject: CN=42fa57891da3ee8e198122f673e8afd331522fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:e6:8f:84:d8:b0:28:2a:40:40:10:bf:ca:
                    27:66:4c:08:fd:df:bb:f7:52:1c:11:90:37:d6:52:
                    4b:b5:b4:97:8a:f2:dd:ae:43:45:85:09:c4:00:0f:
                    29:10:c0:6a:d4:42:06:ab:4f:33:5d:66:df:eb:66:
                    9f:91:a2:75:8f:78:45:2c:5d:4b:f7:46:d7:90:80:
                    f7:67:38:cf:08:c1:ed:bf:a9:16:26:ec:6a:04:a5:
                    b3:0f:a3:d8:ff:dc:71:f8:d3:3a:8b:ec:6b:13:c3:
                    71:4b:8f:3b:b5:41:34:64:29:d8:64:a8:f7:1f:4a:
                    87:4c:92:7e:e8:db:2c:ce:80:f1:4c:b1:d7:a6:86:
                    fc:61:41:fc:90:fc:3f:c9:e3:01:db:bb:f9:05:71:
                    fd:8c:31:ff:68:75:09:10:68:68:f6:92:cb:8c:c5:
                    93:69:1c:a8:b9:ab:a8:0a:25:8f:23:8b:c3:26:e5:
                    d3:ee:02:65:36:bc:13:68:2a:0a:f8:80:9b:6e:66:
                    c5:f9:96:ed:cf:05:38:5c:91:4d:87:92:a7:8f:bf:
                    31:e2:3a:21:90:b7:b0:72:55:53:33:d2:29:26:e2:
                    dc:0c:28:e6:46:e1:ae:7d:8b:39:04:dd:29:74:78:
                    f6:a3:16:ca:83:bc:46:cc:68:e8:ae:a9:c4:2d:f1:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:57:89:1D:A3:EE:8E:19:81:22:F6:73:E8:AF:D3:31:52:2F:DA
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:de:ab:88:9b:92:40:ae:6f:75:b0:02:df:63:69:ab:26:
         7e:a5:24:7e:99:a8:05:6c:d4:96:a0:58:d0:3d:1b:56:99:71:
         2e:dc:4c:a4:9c:9f:03:4b:70:c5:18:e5:bb:c3:e0:b8:02:96:
         f5:15:de:d1:f9:a1:de:11:62:7c:54:fc:f2:65:af:81:87:64:
         97:ab:eb:0e:94:a2:6e:3f:a4:15:66:c4:bd:a6:2c:c1:d1:11:
         17:51:5a:ea:10:39:77:67:a8:e8:93:fb:99:e2:0e:28:3a:85:
         c0:fe:4e:5a:65:95:b3:88:bb:28:9b:36:7e:e9:8e:da:7b:3d:
         b6:cc:ec:5c:97:85:93:82:38:ff:8d:d3:d2:d6:5b:7d:7f:5e:
         9d:dc:52:5a:23:45:3c:82:1a:8f:a3:4a:9b:70:f5:9b:14:92:
         a1:6f:e6:95:fd:c0:c2:73:8b:6c:f0:d9:4b:ff:89:d6:2a:ec:
         6e:ab:f4:6c:4f:1d:17:43:f3:1a:e5:0c:b4:69:43:33:c8:56:
         dc:3c:52:b3:2f:c9:86:f4:f0:71:1c:68:16:b7:95:f0:c2:63:
         6d:98:ad:d7:04:64:4d:c1:cf:16:8d:dd:41:c4:f9:ef:83:e7:
         77:6d:93:71:ae:de:53:2e:75:32:09:6e:69:30:ee:68:c5:f5:
         7b:ac:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:47:19 2026 by rpki-client