Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          zUNeh90cmdY8e+wMvHZ1J/O/VvtQuy+OQGVMM8Z6hbg=
Subject key identifier:   4C:C5:27:D4:44:02:E0:C1:29:1D:4D:5B:61:3A:EC:D9:72:C4:81:DD
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       019E3072067B37C36579241258EF820D4F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0A4B
Signing time:             Sat 16 May 2026 11:00:39 +0000
Manifest this update:     Sat 16 May 2026 11:00:39 +0000
Manifest next update:     Sun 17 May 2026 11:00:39 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: i61C2RyxiPh3NwfOF7HC0oeDQKW9nZhzZtd0O0l5HPY=)
                          2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:06:7b:37:c3:65:79:24:12:58:ef:82:0d:4f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: May 16 11:00:39 2026 GMT
            Not After : May 17 11:00:39 2026 GMT
        Subject: CN=4cc527d44402e0c1291d4d5b613aecd972c481dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:19:c9:77:8e:f9:fc:c3:7f:1f:48:7f:fb:
                    a0:42:d6:c2:d6:b6:11:a4:40:ce:f8:b3:ba:a2:79:
                    78:09:4f:19:4a:28:ac:cb:48:53:49:87:75:35:54:
                    24:bc:dc:99:88:24:44:9e:94:7e:c8:e2:8d:92:a9:
                    95:45:3a:08:e7:1b:63:a7:09:00:b8:79:07:41:42:
                    b1:22:14:86:27:85:b3:d0:72:c4:02:e6:a4:99:64:
                    40:da:c9:a9:c9:82:84:c2:a8:43:98:34:e5:72:dc:
                    2a:d3:40:fd:2b:16:4a:ac:61:b2:fa:e7:77:23:f2:
                    3a:bd:0a:22:f4:06:21:91:a5:82:52:26:8c:99:85:
                    f8:2d:55:b5:99:8a:39:7e:5f:e8:ee:63:1d:83:fb:
                    31:80:9d:7f:7d:36:fc:51:a1:97:57:58:da:16:45:
                    a7:e2:a6:1a:4b:ca:65:0e:7e:b2:21:27:5a:b0:9c:
                    66:41:4f:1f:3e:b1:64:2f:fb:2f:39:af:db:e6:25:
                    9f:fe:f5:1a:47:ed:a1:a6:ff:39:60:ee:f2:36:22:
                    0f:a0:2c:03:16:a6:bb:21:47:83:99:31:3f:d6:98:
                    ee:3f:1c:81:4f:db:cb:e7:51:2b:90:81:25:50:f2:
                    3e:1f:99:44:df:2f:ae:8c:9b:e9:d6:b5:93:88:9e:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:27:D4:44:02:E0:C1:29:1D:4D:5B:61:3A:EC:D9:72:C4:81:DD
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:41:1b:44:a9:a8:b3:d5:b6:19:0b:cf:b6:59:cc:10:b1:
         f9:22:9a:9d:7a:7d:d7:91:73:26:ce:41:93:b6:b3:45:99:55:
         ba:30:e9:d8:a4:6b:17:9b:db:4e:d5:b6:da:b3:89:de:e9:f4:
         b4:bc:f8:42:dc:e8:eb:49:12:3f:dd:a3:2e:ba:53:8a:b6:f3:
         42:95:98:10:c3:ee:16:4a:67:60:92:7e:31:24:48:81:1f:55:
         8f:34:7b:ff:17:29:0d:b9:e8:3a:68:a9:a2:d0:56:e6:66:d7:
         67:ef:02:be:2c:7c:75:8c:d9:79:be:5e:7a:55:52:30:35:bc:
         4d:24:ee:1a:d7:18:79:4b:10:79:63:79:db:9d:ea:4b:c1:6b:
         7d:10:22:39:11:11:ee:34:aa:bf:4b:0b:f7:47:a3:55:25:7e:
         58:d3:be:b9:f2:16:7a:92:76:21:a4:68:c7:aa:9b:9a:9e:14:
         31:8d:aa:73:6e:da:61:74:1a:c8:cf:82:cb:f6:1f:6a:94:7f:
         33:e7:1b:07:f9:33:98:48:19:c3:fc:7a:ce:78:bb:04:cd:d7:
         cb:5d:2e:13:a6:b9:08:d7:25:25:b4:f8:00:e7:1c:df:5f:38:
         c0:32:d9:55:66:bc:36:11:e2:23:92:43:44:e1:be:69:ac:b3:
         12:da:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:16 2026 by rpki-client