Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          0k1bK6N3aztW5DLwZxN9ximAfCRb9JKdVRSg4+Kfd/A=
Subject key identifier:   A2:AC:5B:B9:75:61:23:AA:12:17:29:4F:5F:DB:9C:D7:89:D3:85:F7
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019E91DD71D5B471D927581B00A866E78C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          10DE
Signing time:             Thu 04 Jun 2026 09:01:09 +0000
Manifest this update:     Thu 04 Jun 2026 09:01:09 +0000
Manifest next update:     Fri 05 Jun 2026 09:01:09 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: 0xvkEUBAT8J8JLHBctWcUDoq4XP+/xuMFo37AQhbCP8=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dd:71:d5:b4:71:d9:27:58:1b:00:a8:66:e7:8c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jun  4 09:01:09 2026 GMT
            Not After : Jun  5 09:01:09 2026 GMT
        Subject: CN=a2ac5bb9756123aa1217294f5fdb9cd789d385f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:d5:fd:87:7b:76:47:68:3f:56:16:4a:f3:
                    b5:ee:76:a2:b5:02:9d:14:05:88:e3:3b:76:f2:ec:
                    d0:3c:d3:42:a0:6d:83:01:06:47:9d:8f:0c:6d:e2:
                    dd:69:59:fc:ec:00:eb:82:ed:35:9f:e2:63:d6:18:
                    ea:1f:66:90:4a:2b:e3:e1:a0:6f:c4:3d:c5:84:1f:
                    04:1a:fe:a4:45:8d:40:5f:f8:29:46:5e:83:47:73:
                    35:30:13:2c:f6:f8:10:dd:72:e0:f6:ab:de:23:36:
                    74:35:7c:50:f5:98:93:52:b5:78:31:54:70:4e:4b:
                    83:2c:e3:f1:48:5e:47:f9:32:78:a5:56:f5:6a:0f:
                    2c:55:cf:5a:cc:69:21:09:da:f0:e6:2d:ab:54:9a:
                    4b:97:8d:f3:de:90:87:e2:2a:f5:7c:56:81:cc:38:
                    9e:7a:7c:ec:2f:aa:1b:a4:73:10:63:c1:39:14:1d:
                    96:6f:fe:a6:ab:47:dc:64:8b:46:d9:1e:30:f2:f1:
                    83:f2:32:f3:62:2c:0b:11:30:0e:85:35:c5:15:a4:
                    04:d6:9b:d9:bf:64:77:59:2e:d2:fb:e6:5f:e3:72:
                    f5:77:9b:8c:2b:68:d1:23:fe:2d:28:df:0f:83:76:
                    57:42:3e:da:34:c2:05:22:07:38:d1:9e:bc:91:3d:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:5B:B9:75:61:23:AA:12:17:29:4F:5F:DB:9C:D7:89:D3:85:F7
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:19:d9:7c:4c:f1:26:1c:f4:c3:cf:22:e4:50:b1:1b:03:19:
         a6:d3:c0:4f:1c:ca:11:e9:bc:39:eb:c3:a4:dd:03:b6:64:21:
         c2:46:07:e7:15:2d:69:1b:86:53:3a:a6:e3:d4:bd:4b:6b:31:
         03:cb:7d:4a:52:fb:b1:1a:ad:ef:50:6e:a7:91:70:4e:14:dd:
         92:02:9c:79:16:a2:de:29:27:16:26:35:28:c1:8d:13:a1:cf:
         43:fe:a8:91:9e:b9:71:3d:9d:5e:48:bb:d3:5a:79:86:74:ba:
         6e:09:72:b5:a7:e0:96:47:ad:9d:e0:eb:e4:1f:4e:27:72:c4:
         1b:c0:24:94:ac:19:84:45:cf:63:18:c1:55:ff:56:c4:e2:f1:
         ee:b9:09:91:48:90:0c:86:5f:63:2e:0b:c2:66:a4:ce:b4:c0:
         bc:3f:cb:b4:71:3c:e9:35:9a:9d:3c:d5:2f:0d:21:0a:96:3c:
         cd:e7:b3:e4:63:a0:ec:99:2d:f8:1b:06:9e:1f:ce:84:90:c2:
         58:02:a2:13:f1:25:dd:ae:de:ae:a3:9c:78:18:4b:67:9e:25:
         f0:44:05:34:36:09:88:40:78:3d:54:fe:f5:a2:b4:a6:3f:39:
         77:15:22:99:0c:ac:96:f9:d1:a1:14:b7:ce:2f:35:36:62:96:
         46:84:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 18:19:10 2026 by rpki-client