Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File:                     3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier:          z7IQkd5sa2XFQsBuc1JEwLdQikk1s29HwL8fLU2STmA=
Subject key identifier:   22:78:99:D6:63:0F:46:57:BA:AD:0A:57:F4:26:A0:9D:6F:AE:71:B7
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer:       /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial:       019E3005774111471506A1811D79476036F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number:          0E36
Signing time:             Sat 16 May 2026 09:02:04 +0000
Manifest this update:     Sat 16 May 2026 09:02:04 +0000
Manifest next update:     Sun 17 May 2026 09:02:04 +0000
Files and hashes:         1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: AwD3uGvlZDkp+IsZ7Fm4rLsOIqwy/NoZb/0wZe45isg=)
                          2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:77:41:11:47:15:06:a1:81:1d:79:47:60:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec756af77dafebca10684d68556baacd7173617
        Validity
            Not Before: May 16 09:02:04 2026 GMT
            Not After : May 17 09:02:04 2026 GMT
        Subject: CN=227899d6630f4657baad0a57f426a09d6fae71b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:8e:b9:de:f3:6e:e0:c9:38:ef:b6:dd:3f:
                    27:cc:9e:b8:5e:f4:61:e3:47:fe:04:e7:47:c0:a7:
                    bd:55:ef:cc:2a:67:4f:17:71:53:4f:64:5a:62:68:
                    4f:02:35:d2:63:cf:61:ef:d7:ad:c7:3a:b2:d2:6f:
                    8e:24:4c:23:b7:bd:ae:86:fb:9d:35:3c:4e:32:a5:
                    39:85:e3:71:84:4c:08:77:2f:90:23:d1:d0:e0:da:
                    0e:4c:e8:4d:20:8d:5c:45:fe:c4:a1:27:10:c1:72:
                    c3:3b:83:e2:91:49:3d:e5:96:c5:ae:7b:44:8b:21:
                    5e:38:f5:84:3a:50:a0:0b:3a:9e:a1:ea:51:24:d6:
                    90:74:00:64:4b:01:4e:22:d9:d5:26:6d:ae:5a:cc:
                    88:07:20:18:5b:81:08:49:47:4a:91:30:ec:5e:21:
                    07:73:c9:2d:68:27:44:f1:12:f3:96:08:ac:85:9d:
                    08:2f:0f:b1:c8:ff:9b:51:a1:2d:9c:3c:85:c7:95:
                    a6:19:03:0a:f7:56:ac:56:f3:5a:96:7a:f4:9a:c4:
                    3c:dd:17:19:4d:ed:23:b3:d9:ef:f1:a7:ef:61:8b:
                    6e:0f:6a:25:1d:ff:05:89:98:0a:53:54:15:f0:08:
                    78:ab:4d:e8:81:5a:fd:39:ca:8f:e7:eb:d8:12:6e:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:99:D6:63:0F:46:57:BA:AD:0A:57:F4:26:A0:9D:6F:AE:71:B7
            X509v3 Authority Key Identifier:
                keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:17:e5:23:84:b6:a2:9e:3a:71:e8:a5:a8:93:fa:06:58:
         f2:77:90:d1:5c:8e:bd:f8:e4:0b:02:52:c6:ae:2f:75:a1:66:
         64:8b:c8:18:02:fb:a2:91:38:d7:14:3a:23:2e:15:be:9e:a2:
         61:3e:4c:69:ec:8c:3d:56:71:c6:e6:b8:fc:c5:a4:c1:7b:6c:
         6a:90:7d:bc:21:aa:e8:88:bc:30:e7:f0:1c:c4:a1:52:39:18:
         65:26:a5:4b:51:f6:54:b5:8d:31:49:ef:ff:0e:70:c8:c1:fb:
         52:03:a9:95:8f:e7:d0:1f:9c:9e:bc:3e:f9:2f:26:36:33:e9:
         de:09:12:b5:3f:75:3e:d7:ed:08:ed:c1:78:73:dd:cc:da:26:
         63:ec:78:36:41:13:16:b4:a2:79:21:50:36:8b:b0:7e:97:c1:
         e5:7f:8c:4b:49:8c:40:25:1a:15:db:e1:05:72:37:e1:88:09:
         c1:91:0b:71:d1:ea:51:19:c2:5a:7e:8f:f7:f1:a6:1c:a9:d3:
         e1:92:94:31:16:0f:68:9c:d4:6e:2d:b8:bc:68:1a:78:4a:ad:
         4b:21:48:15:a3:b5:6f:1b:e7:cd:60:81:de:00:57:1d:f4:31:
         cc:18:75:5c:81:be:c2:b3:31:d6:4a:f7:4f:b1:dc:10:28:50:
         c1:ee:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:59 2026 by rpki-client