Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          bA3PB29VL4eBmFZbjZAvB41qCYpfuFJb8yWi8yXHlg0=
Subject key identifier:   B9:FD:73:2F:70:9F:8D:BB:52:0E:EA:4C:1B:DE:6E:42:50:BA:38:9E
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       019DCF75A9E03F53688A25D77C9690FDAE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          15B2
Signing time:             Mon 27 Apr 2026 15:01:28 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:28 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:28 +0000
Files and hashes:         1: 204umdoIBOqtcTbJI3jfclBQCyw.roa (hash: IwWlQnWIC7tAHQ+uxk+vueYs6Cuvcq1jNuaEjgSin/4=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: s5h8hBexljUH18eLKt/N0RZLlKAnCpHwbKFmxLPI8uQ=)
                          3: 8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa (hash: L+fAM2wTev7jcaaHyppAq65XRuAVybyECH1GJHGUgB8=)
                          4: Y09xLkmt7VHTVYtC64eFlrK6j58.roa (hash: iA768afUcGVOaqrvOSx3MnWnS2M+3J4maoqeEMVN/wE=)
                          5: p0VUng2o1_gaZHh--wu0wK0iIL4.roa (hash: oO1bw6THJUf9h7ZSPQOfZA0dBR3CVemJCl3j27Vlz30=)
                          6: v0q74nFVUklRHXEbX3DfFnuxDhk.roa (hash: G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:a9:e0:3f:53:68:8a:25:d7:7c:96:90:fd:ae:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Apr 27 15:01:28 2026 GMT
            Not After : Apr 28 15:01:28 2026 GMT
        Subject: CN=b9fd732f709f8dbb520eea4c1bde6e4250ba389e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:60:23:c5:0f:22:18:70:33:73:1d:26:5b:
                    77:8f:40:f9:33:8d:5c:22:5a:e8:1f:8e:4d:26:04:
                    14:56:f2:a2:41:63:9e:86:e6:1d:32:cf:f6:06:32:
                    a7:ae:b5:1a:72:fa:1f:4b:34:d5:30:fe:db:df:2d:
                    38:d4:20:bd:74:22:71:9b:fc:25:9d:20:49:3a:19:
                    34:9f:f1:a5:2b:3c:43:3c:ae:7e:4b:9d:6f:90:fb:
                    e5:99:e0:40:07:b2:95:f0:c2:38:ba:11:55:05:a3:
                    0e:a5:8e:49:3c:78:7b:b3:7e:a2:8d:d3:c8:de:29:
                    22:8c:70:05:95:18:f1:47:3c:a8:28:b7:db:4d:eb:
                    2f:3c:dc:33:be:c8:e2:52:b5:68:dc:20:64:57:df:
                    5e:66:af:17:8d:12:6e:dc:06:62:61:73:b0:30:12:
                    a3:ec:ca:3d:65:01:8b:87:97:82:0d:e4:1c:58:cb:
                    1c:25:84:2b:8e:d3:7a:cb:9b:4d:f7:2a:9e:c1:d7:
                    42:6a:ad:25:55:c0:43:9e:56:10:95:2f:57:5b:f4:
                    fc:42:72:7e:06:a0:4d:54:81:c0:3c:68:19:95:02:
                    76:d4:8e:a7:30:31:f9:00:04:cb:fa:83:5c:f2:a9:
                    f2:37:a3:05:dc:52:d2:af:25:f9:5f:69:83:72:37:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FD:73:2F:70:9F:8D:BB:52:0E:EA:4C:1B:DE:6E:42:50:BA:38:9E
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:11:dc:71:9a:8b:39:53:59:2b:f2:cf:11:31:d4:c6:10:bc:
         58:e6:f1:02:4a:1b:9d:c4:45:a1:de:1f:a5:62:1e:9a:d5:e1:
         6b:8a:01:68:f6:7c:8e:84:1b:1b:e6:d3:52:eb:b1:d1:ba:f3:
         5b:b7:5b:57:e2:4d:e6:10:ff:96:b0:61:96:c8:7e:0c:06:7b:
         ab:b0:71:7f:01:bc:5d:74:6b:6a:bd:7d:fa:81:57:02:61:f0:
         af:c8:f7:34:f8:89:aa:eb:fe:b0:ab:82:58:d5:fb:b4:6e:ce:
         58:9c:2f:a0:91:72:2d:d1:0f:74:ce:f0:d0:93:b5:19:a7:ab:
         10:ac:e2:eb:e3:2a:33:56:33:14:60:ca:50:07:f0:57:b3:27:
         05:f2:1a:b9:2a:02:da:92:61:66:83:75:6c:46:07:b1:73:d1:
         9c:e8:6d:13:d4:92:d0:a5:fd:9f:fd:53:63:11:9c:e6:57:d9:
         57:30:bb:92:40:ea:aa:8d:f4:f1:74:44:21:cb:c4:a9:5c:b6:
         36:27:a4:b5:b3:26:65:0b:bf:d1:01:b3:ae:24:77:18:dd:a1:
         12:e9:af:5b:81:8a:cf:7e:46:ad:8b:a4:56:df:7b:78:13:6c:
         3b:bc:90:4f:d2:52:a8:52:be:9c:36:a2:da:d3:3f:e9:d4:28:
         db:67:e9:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdangP1NoiiXXfJaQ/a5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5
OTFjZWMwHhcNMjYwNDI3MTUwMTI4WhcNMjYwNDI4MTUwMTI4WjAzMTEwLwYDVQQD
EyhiOWZkNzMyZjcwOWY4ZGJiNTIwZWVhNGMxYmRlNmU0MjUwYmEzODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu9gI8UPIhhwM3MdJlt3j0D5M41c
IlroH45NJgQUVvKiQWOehuYdMs/2BjKnrrUacvofSzTVMP7b3y041CC9dCJxm/wl
nSBJOhk0n/GlKzxDPK5+S51vkPvlmeBAB7KV8MI4uhFVBaMOpY5JPHh7s36ijdPI
3ikijHAFlRjxRzyoKLfbTesvPNwzvsjiUrVo3CBkV99eZq8XjRJu3AZiYXOwMBKj
7Mo9ZQGLh5eCDeQcWMscJYQrjtN6y5tN9yqewddCaq0lVcBDnlYQlS9XW/T8QnJ+
BqBNVIHAPGgZlQJ21I6nMDH5AATL+oNc8qnyN6MF3FLSryX5X2mDcjdl/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn9cy9wn427Ug7qTBvebkJQujieMB8GA1UdIwQY
MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt
ODI2NjBlZTRlYWM0LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0
LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhHccZqL
OVNZK/LPETHUxhC8WObxAkobncRFod4fpWIemtXha4oBaPZ8joQbG+bTUuux0brz
W7dbV+JN5hD/lrBhlsh+DAZ7q7BxfwG8XXRrar19+oFXAmHwr8j3NPiJquv+sKuC
WNX7tG7OWJwvoJFyLdEPdM7w0JO1GaerEKzi6+MqM1YzFGDKUAfwV7MnBfIauSoC
2pJhZoN1bEYHsXPRnOhtE9SS0KX9n/1TYxGc5lfZVzC7kkDqqo308XREIcvEqVy2
NiektbMmZQu/0QGzriR3GN2hEumvW4GKz35GrYukVt97eBNsO7yQT9JSqFK+nDai
2tM/6dQo22fp9Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:32:26 2026 by rpki-client