Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File:                     3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier:          m4kyYqOHD7j98nrAzdCnh6ln2wqVx4Q0cWlKVH5a5UU=
Subject key identifier:   8B:70:0F:BE:32:19:19:22:3E:75:24:AD:3E:4D:36:80:09:D6:9E:9B
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer:       /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial:       019E2F9681D1C63D4BBB4326B3B800A3C421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number:          1281
Signing time:             Sat 16 May 2026 07:00:53 +0000
Manifest this update:     Sat 16 May 2026 07:00:53 +0000
Manifest next update:     Sun 17 May 2026 07:00:53 +0000
Files and hashes:         1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: wGrWiI6bAGutZrrsL5fecgdgYWub7Q2hGke0EpDaS8o=)
                          2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:81:d1:c6:3d:4b:bb:43:26:b3:b8:00:a3:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
        Validity
            Not Before: May 16 07:00:53 2026 GMT
            Not After : May 17 07:00:53 2026 GMT
        Subject: CN=8b700fbe321919223e7524ad3e4d368009d69e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:7f:75:4b:3a:25:60:15:63:b0:ce:b4:86:
                    83:44:55:02:65:eb:8d:40:14:00:f3:ba:71:7d:e4:
                    c9:cb:83:28:b5:5d:7c:48:b3:bc:74:85:7c:bf:72:
                    07:28:05:ce:66:a9:0e:5d:b0:50:ec:35:59:5c:b7:
                    c0:3f:7a:be:bc:2e:4c:4b:8b:ac:49:c8:3b:15:cf:
                    e6:7b:af:1b:a3:b1:31:8b:7c:ed:dc:49:f3:a8:54:
                    53:63:00:5e:50:a1:c4:cd:81:ea:33:4e:1e:db:b1:
                    32:4b:ba:f8:85:73:13:47:88:ad:6f:47:7a:42:69:
                    cc:69:9c:6c:fa:69:fd:a7:d6:ff:e3:08:38:61:aa:
                    91:02:82:12:df:c7:70:38:ec:eb:71:48:29:cf:c6:
                    b5:6a:3d:f7:aa:86:de:07:90:c6:72:66:01:57:cb:
                    5c:e5:73:39:2f:a4:1b:d0:a1:24:e5:10:61:92:10:
                    be:d2:3c:20:c8:72:2e:68:92:08:89:05:6b:1a:2d:
                    16:dd:c9:3d:4c:3c:c7:20:26:3c:4d:6d:1e:77:ff:
                    3f:3d:67:9e:23:f2:bf:fb:f0:ab:b5:48:ba:02:ab:
                    fe:62:2e:0a:c6:0b:20:39:4c:67:4f:82:8d:39:69:
                    91:56:02:33:55:98:8d:3b:dd:e6:f0:1f:d6:40:7b:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:70:0F:BE:32:19:19:22:3E:75:24:AD:3E:4D:36:80:09:D6:9E:9B
            X509v3 Authority Key Identifier:
                keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f8:4f:6b:37:91:aa:34:fa:32:9f:9e:d2:d1:11:c0:7e:ff:
         06:c2:01:69:48:0c:0a:f5:00:2b:b9:01:9c:83:f4:8c:90:54:
         57:12:d1:1c:d2:a1:5a:48:bf:61:c0:7f:a8:d7:60:6b:7a:79:
         ec:cc:93:6b:04:75:d8:62:5a:74:1c:f5:7c:05:16:8b:f7:9e:
         c3:1a:61:b7:a3:80:77:13:1d:cd:f2:d0:af:37:39:31:ee:19:
         f4:75:fd:07:3c:a6:56:2f:17:f8:90:11:5f:da:44:e1:55:1d:
         24:de:a5:f2:74:5c:de:0a:dd:12:bd:9d:7e:84:da:ea:5f:ae:
         4f:42:70:2b:90:7c:cf:95:76:bf:c1:d0:dc:bd:40:5d:86:a3:
         49:59:76:8d:a7:c7:4f:ec:a5:12:6d:b3:92:b7:07:d7:29:10:
         9e:96:24:77:1c:c6:c0:b0:a6:eb:79:6e:f3:eb:93:e0:7e:60:
         ea:a4:95:81:5d:49:d4:b4:a0:f7:83:4a:aa:71:59:22:cd:a9:
         28:44:a7:c0:82:c2:fc:6e:be:22:71:0d:bc:0d:f7:80:4c:91:
         e4:e4:03:2d:eb:fe:bb:b1:ea:bd:53:f5:af:e1:b9:cb:55:78:
         dd:0a:ca:6c:b7:41:e7:e3:6d:b0:9a:de:a0:79:39:ba:94:63:
         b7:0e:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:34 2026 by rpki-client