Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File:                     3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier:          5FzPsMu6yOdvaVZAY0hDxXlV5L8dXKec+PAS5hYXMsE=
Subject key identifier:   49:B8:90:76:97:0D:AB:5E:76:63:22:94:8E:F1:CA:05:87:9B:BC:CF
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer:       /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial:       01A000931AF728505D26C1741EFA5BF24C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number:          0E05
Signing time:             Fri 14 Aug 2026 14:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:35 +0000
Files and hashes:         1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: ATuC0XEDlo8TM0VSDt96MdMJ493zsvetEsiPKa5guVY=)
                          2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:1a:f7:28:50:5d:26:c1:74:1e:fa:5b:f2:4c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
        Validity
            Not Before: Aug 14 14:00:35 2026 GMT
            Not After : Aug 15 14:00:35 2026 GMT
        Subject: CN=49b89076970dab5e766322948ef1ca05879bbccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:d5:07:cf:fd:b8:42:a2:ef:2e:d9:34:c6:
                    44:11:f2:c9:1b:26:45:2a:36:57:4b:d8:39:e9:2f:
                    0a:2d:08:c1:52:02:a3:5c:dd:d4:d4:0a:92:9f:08:
                    3c:fb:6a:c9:80:21:31:e6:fb:50:bd:d1:ef:2f:47:
                    fb:11:16:40:f8:82:d9:67:6e:f7:b3:68:f1:14:14:
                    be:d5:30:68:61:11:47:d5:14:d2:f0:13:79:5a:e1:
                    7a:9a:23:97:f0:b3:60:14:89:b5:35:77:c5:71:49:
                    53:ae:c9:4a:6e:85:28:d0:4d:19:2a:52:b4:9c:73:
                    a7:99:4e:78:84:f4:cd:02:67:a0:8a:71:e1:b6:85:
                    97:7e:73:9c:88:47:bd:1a:d3:18:cf:0b:75:6a:ec:
                    5a:9a:68:2e:20:6b:2b:07:dd:bd:cf:5c:43:c4:6f:
                    a8:8a:fe:e1:00:28:a3:39:84:c6:7f:67:cc:94:43:
                    67:75:34:e6:6a:4b:55:4c:5d:6c:8e:71:82:41:0f:
                    49:c4:1f:56:90:13:e5:9a:46:ec:05:9f:35:c7:82:
                    c7:30:7c:0b:28:2a:93:b1:92:9e:90:45:e2:22:cb:
                    e2:60:56:55:df:4c:71:b3:d2:26:6d:b5:fd:59:ef:
                    db:50:4c:06:d7:aa:05:42:58:30:ec:50:a2:56:5c:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B8:90:76:97:0D:AB:5E:76:63:22:94:8E:F1:CA:05:87:9B:BC:CF
            X509v3 Authority Key Identifier:
                keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5f:8a:37:40:1f:9e:c0:ea:f5:da:ad:36:5a:36:0f:86:44:
         9c:58:e5:6d:27:69:b7:9a:e2:1d:8d:31:20:bc:06:41:d4:f7:
         3c:a3:31:21:1e:27:66:22:ba:18:e5:27:7c:32:69:b1:0f:f0:
         e0:82:2a:4e:84:96:ee:c6:c5:07:a5:23:c2:f0:29:e3:0d:fa:
         51:ff:6f:8b:e2:63:9b:a5:b4:8d:56:1b:53:62:92:b7:5c:c2:
         e2:ab:92:e2:0b:a2:6a:fe:85:08:90:38:11:ac:56:2a:78:5b:
         ff:5f:02:7d:62:2c:db:0c:cb:1a:fe:43:5f:00:03:03:44:27:
         ce:9c:60:4d:71:de:63:31:a5:78:ee:7a:d3:06:20:6f:f8:51:
         be:c8:33:62:47:3d:7f:55:6c:e4:44:eb:51:8a:85:36:82:87:
         aa:b2:d4:e6:72:4e:c4:78:e8:a1:7a:1c:f6:41:21:eb:0e:94:
         ff:29:de:74:53:06:3a:0b:0d:16:85:a4:c7:94:f7:c4:ea:13:
         1b:0c:b7:1b:45:26:c6:3b:36:27:f7:c4:a3:fd:c2:df:78:05:
         dc:3b:16:06:a2:13:65:75:4b:69:8a:69:07:39:1d:e6:f8:79:
         20:99:48:81:d3:ff:f5:4f:82:88:e2:f6:70:e3:aa:e6:cd:69:
         90:f6:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:52 2026 by rpki-client