Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File:                     3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier:          8VggLFyLzQFh4lFxkMwX5i4wgarqt8LAjJGD2cU5t3U=
Subject key identifier:   7E:EB:AB:EC:F8:17:AC:F7:63:1D:D4:60:90:C0:C0:74:AD:75:D8:73
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer:       /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial:       019E30A95B7AF3944480353A70C663799B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number:          0F0C
Signing time:             Sat 16 May 2026 12:01:05 +0000
Manifest this update:     Sat 16 May 2026 12:01:05 +0000
Manifest next update:     Sun 17 May 2026 12:01:05 +0000
Files and hashes:         1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: CqriuODigQrUdZKCLcGK3za4IWgDeS7tCp5fNcBakBA=)
                          2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:5b:7a:f3:94:44:80:35:3a:70:c6:63:79:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
        Validity
            Not Before: May 16 12:01:05 2026 GMT
            Not After : May 17 12:01:05 2026 GMT
        Subject: CN=7eebabecf817acf7631dd46090c0c074ad75d873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:b3:7a:3e:66:10:08:e8:91:c0:df:21:be:
                    5f:38:41:3a:f9:64:1e:00:58:69:a6:ff:12:64:2c:
                    6e:5d:40:f3:d8:ec:0f:7f:02:ff:99:31:9c:61:b2:
                    cd:ae:25:bb:71:fe:0a:c6:19:63:35:40:94:3b:50:
                    cd:d2:65:81:c0:8c:95:bd:57:b3:e0:c4:6a:0d:39:
                    ac:90:5c:46:ff:d5:af:a6:5b:46:ee:99:e1:02:42:
                    2d:9c:d9:da:13:85:0b:3c:43:45:87:a1:bd:d3:74:
                    c9:5a:2f:ea:52:67:98:13:60:90:be:40:2e:10:e5:
                    cc:71:01:17:65:92:43:3f:89:27:57:0f:a4:0e:14:
                    a7:60:49:7a:ec:28:ca:ab:3f:80:70:8d:a6:f1:39:
                    23:79:f5:88:e0:47:15:e6:12:86:bd:6e:02:fa:6b:
                    95:c3:24:2b:0d:71:0f:a7:4d:cf:3c:02:cc:62:1a:
                    d6:28:12:da:5d:f4:e6:ca:85:67:da:d1:19:04:f9:
                    95:b9:df:5d:40:b1:06:bd:86:d3:ee:58:22:94:d1:
                    71:4c:38:d7:89:16:b5:94:8e:2e:62:43:60:4f:8d:
                    e9:d7:89:53:cd:e0:7a:c6:6e:0d:2c:48:fc:a4:7c:
                    8a:2e:90:59:00:27:26:00:c3:d3:d1:85:c0:4b:c1:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EB:AB:EC:F8:17:AC:F7:63:1D:D4:60:90:C0:C0:74:AD:75:D8:73
            X509v3 Authority Key Identifier:
                keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:99:47:e1:0c:bf:59:42:fe:ab:21:40:4e:df:a8:d9:e5:
         5c:a6:c5:6c:de:03:ee:fb:34:b0:cf:5c:c0:69:02:19:fc:c2:
         88:46:a3:35:72:0f:2d:a4:3e:82:74:11:e5:ac:19:39:22:81:
         e7:75:2f:8b:f3:b0:fd:29:46:04:2a:69:fe:07:27:60:fc:e5:
         4f:41:7b:ff:e8:e9:3c:1d:6c:e1:0e:93:44:74:1e:7f:a8:69:
         e0:7e:21:e8:80:30:31:21:e4:d7:b7:3f:30:be:0a:3f:75:bd:
         fd:cb:c8:8e:65:8e:1e:32:93:67:38:da:28:48:6b:40:8b:e4:
         76:9d:5e:16:e5:cb:67:d5:bd:43:a0:65:52:7c:57:a2:63:6b:
         1d:c9:b8:1e:9d:20:4e:ad:2a:75:51:2d:45:26:65:16:5f:19:
         ae:72:29:1f:5a:ae:44:10:cb:22:6d:99:35:25:59:ad:85:17:
         ab:96:0f:02:c4:24:9f:96:cc:db:d1:14:42:0a:3f:1c:58:26:
         7f:9b:53:c2:2a:61:41:58:67:df:69:37:52:15:92:04:6f:d9:
         fe:00:11:02:85:ca:0c:c1:94:c0:5c:d7:d5:da:0c:ba:ab:80:
         c0:37:67:9a:9c:59:d7:43:00:1d:40:b7:00:3d:47:f6:ec:74:
         d1:7e:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:08 2026 by rpki-client