Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          Ie9Qy7m4EWQmsd5uxHSj/qe+BikIwsmNBMblqjqjBHA=
Subject key identifier:   C3:F8:D7:07:89:F0:0A:1F:DF:EB:9D:2B:52:46:0F:D0:D9:74:4E:F4
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       019F18307D5A32014143B26BCA6BFB89CB9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0AC3
Signing time:             Tue 30 Jun 2026 11:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:58 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: UvT1gVLZrrJaHoMSKriz/zmonIhLGpgtzWOVRparh2s=)
                          2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:7d:5a:32:01:41:43:b2:6b:ca:6b:fb:89:cb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Jun 30 11:00:58 2026 GMT
            Not After : Jul  1 11:00:58 2026 GMT
        Subject: CN=c3f8d70789f00a1fdfeb9d2b52460fd0d9744ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:a8:e9:d8:fc:93:07:7e:da:23:95:d7:84:
                    a7:a1:b3:e3:9b:e2:f0:ab:dc:3a:81:0b:ea:40:31:
                    93:63:26:35:a2:3d:6b:c5:11:b3:08:c9:33:a8:6d:
                    a7:db:d0:61:4e:b2:ac:1f:75:3d:b7:ed:c9:d5:7a:
                    a2:b5:8e:ef:71:55:5f:33:2f:4a:95:3a:c7:11:dc:
                    f5:c6:58:82:ce:ba:8a:cd:2b:4e:c4:c6:5f:c7:b1:
                    64:f9:81:ab:97:da:23:be:9d:11:21:3d:fb:64:e9:
                    46:ea:98:5a:8b:8e:01:14:7f:38:12:a9:47:1a:4f:
                    1c:bc:00:f0:b3:84:b2:2a:a0:ab:ed:fd:45:8c:1c:
                    76:c5:e1:68:1e:54:40:86:fa:36:42:76:42:92:91:
                    8a:3f:bc:7d:95:79:a4:58:08:c8:11:bd:89:d1:a3:
                    46:82:8d:cc:4e:36:9b:07:c0:03:93:c0:8c:54:5a:
                    8b:3b:2f:68:66:5b:ab:ee:37:e9:55:92:07:be:28:
                    45:59:ea:ae:ac:eb:6a:26:72:73:0c:18:12:e9:2f:
                    b4:0c:2c:01:13:f0:8a:f8:ae:d3:22:db:d7:97:b9:
                    02:41:ab:d5:3b:f1:c4:b7:d5:16:d4:4d:31:6f:38:
                    f8:10:8d:30:54:18:37:63:3c:8d:e6:ae:92:00:e7:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:D7:07:89:F0:0A:1F:DF:EB:9D:2B:52:46:0F:D0:D9:74:4E:F4
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:e1:df:75:34:5b:e6:e7:9b:6c:f0:91:3c:8f:a1:21:4e:
         d6:e7:50:d7:36:ed:ae:08:a0:cb:29:21:b7:74:14:ec:c7:77:
         8c:e2:ed:e2:8b:f9:5c:22:0f:8d:0c:8b:6f:c1:2a:af:6a:96:
         a3:75:05:59:36:82:0f:10:b5:17:04:b2:8a:e6:ec:2c:47:53:
         57:70:11:b0:9f:ce:03:ce:60:8d:ca:4c:8b:12:e5:f4:b4:e9:
         32:69:89:59:74:a0:f4:07:3a:3e:62:c2:b1:5d:15:99:60:71:
         e5:d4:d8:d6:71:1a:24:1d:3b:89:a5:66:89:70:c2:05:09:89:
         3a:6d:b5:66:79:02:5b:be:54:e0:04:68:d1:c7:08:6d:38:be:
         6f:0b:36:10:9c:72:95:3b:c9:80:56:02:00:7a:6a:99:37:76:
         99:b9:bb:2b:c3:ed:da:57:b5:cc:f9:3c:34:6f:f5:82:fe:26:
         40:0f:94:d0:a4:3b:ff:69:70:bc:45:c2:42:d0:3d:89:27:83:
         54:54:17:a4:01:f0:ee:aa:14:88:9f:4c:fd:9b:fb:c2:e7:d8:
         de:82:0a:8a:c0:f7:88:5d:02:ef:e4:13:f9:8e:03:68:5a:f7:
         14:94:02:1c:9e:71:55:c1:6e:4e:16:98:f7:a5:96:77:2b:43:
         e7:98:6c:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMH1aMgFBQ7Jrymv7icubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjYwNjMwMTEwMDU4WhcNMjYwNzAxMTEwMDU4WjAzMTEwLwYDVQQD
EyhjM2Y4ZDcwNzg5ZjAwYTFmZGZlYjlkMmI1MjQ2MGZkMGQ5NzQ0ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d+o6dj8kwd+2iOV14SnobPjm+Lw
q9w6gQvqQDGTYyY1oj1rxRGzCMkzqG2n29BhTrKsH3U9t+3J1XqitY7vcVVfMy9K
lTrHEdz1xliCzrqKzStOxMZfx7Fk+YGrl9ojvp0RIT37ZOlG6phai44BFH84EqlH
Gk8cvADws4SyKqCr7f1FjBx2xeFoHlRAhvo2QnZCkpGKP7x9lXmkWAjIEb2J0aNG
go3MTjabB8ADk8CMVFqLOy9oZlur7jfpVZIHvihFWequrOtqJnJzDBgS6S+0DCwB
E/CK+K7TItvXl7kCQavVO/HEt9UW1E0xbzj4EI0wVBg3YzyN5q6SAOcqrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP41weJ8Aof3+udK1JGD9DZdE70MB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa7h33U0
W+bnm2zwkTyPoSFO1udQ1zbtrgigyykht3QU7Md3jOLt4ov5XCIPjQyLb8Eqr2qW
o3UFWTaCDxC1FwSyiubsLEdTV3ARsJ/OA85gjcpMixLl9LTpMmmJWXSg9Ac6PmLC
sV0VmWBx5dTY1nEaJB07iaVmiXDCBQmJOm21ZnkCW75U4ARo0ccIbTi+bws2EJxy
lTvJgFYCAHpqmTd2mbm7K8Pt2le1zPk8NG/1gv4mQA+U0KQ7/2lwvEXCQtA9iSeD
VFQXpAHw7qoUiJ9M/Zv7wufY3oIKisD3iF0C7+QT+Y4DaFr3FJQCHJ5xVcFuThaY
96WWdytD55hs1g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:04 2026 by rpki-client