Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File:                     3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier:          Y+jr+/f/lIdQigsEV0sbyxp7+shZ5iNnjtJk3uUZw54=
Subject key identifier:   01:0E:8F:02:05:64:E2:59:E5:9F:F1:CD:39:C1:ED:14:DB:11:3B:B9
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer:       /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial:       019E30A997B88EF891FF6E8973FCBBB9E9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 12:01:21 +0000
Manifest this update:     Sat 16 May 2026 12:01:21 +0000
Manifest next update:     Sun 17 May 2026 12:01:21 +0000
Files and hashes:         1: 3WnIK5pGF-1--NMSUgNLB0NnZ1o.roa (hash: +wFNRw8hcoZ6lDMDvj2KA/bLV+BywMnIzYTLMw+xb4I=)
                          2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: 6INzqJpBEooKJppXhtGqq/pGKU4Q6micUoORQEs2nmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:97:b8:8e:f8:91:ff:6e:89:73:fc:bb:b9:e9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
        Validity
            Not Before: May 16 12:01:21 2026 GMT
            Not After : May 17 12:01:21 2026 GMT
        Subject: CN=010e8f020564e259e59ff1cd39c1ed14db113bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:dd:03:7c:83:ec:b9:fc:89:bb:a8:ee:10:
                    d5:87:49:c5:a6:bc:4e:66:9d:84:2e:2d:8d:e5:76:
                    46:e3:71:be:90:37:6c:34:db:1c:53:e2:4d:7c:a5:
                    69:71:e1:08:9c:1e:60:ee:fb:17:25:10:2f:40:9e:
                    a2:a5:f3:f0:f1:58:37:28:ce:3e:d3:ed:af:d5:af:
                    98:6a:0d:d3:be:48:71:1f:80:36:ac:0b:ec:2f:cd:
                    86:67:b6:2d:d1:02:60:5b:43:6c:22:54:79:3a:67:
                    49:5e:a7:a4:f2:95:aa:a7:fc:52:12:88:43:69:e1:
                    53:1f:d6:e4:e9:1a:0f:e3:6f:d1:22:6a:bd:37:87:
                    20:a7:48:81:31:da:91:91:c3:f9:41:a8:e0:8a:96:
                    5b:71:68:4f:9e:e8:70:e7:67:d1:a7:6d:81:76:7b:
                    6b:f6:2d:64:76:6d:a9:21:05:19:80:82:b1:ea:ec:
                    98:37:ab:28:55:43:e3:44:63:a7:f0:d5:b3:66:23:
                    49:37:e2:20:20:e1:b5:23:10:40:72:f7:58:bf:08:
                    32:ec:8a:8f:6f:96:5a:66:5a:5e:f2:8b:e9:c3:68:
                    fe:19:e0:a3:5b:12:fc:ff:d4:41:e3:76:3e:24:81:
                    ee:af:fc:7a:6b:8e:36:12:9f:1e:c5:ec:91:69:16:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0E:8F:02:05:64:E2:59:E5:9F:F1:CD:39:C1:ED:14:DB:11:3B:B9
            X509v3 Authority Key Identifier:
                keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:13:94:3a:86:63:5d:d3:05:cd:50:7b:41:17:00:0e:24:
         02:1a:87:fe:f8:74:8b:52:bf:f6:0d:fe:62:0a:01:7e:f5:cf:
         42:e4:cc:a6:5f:d2:1d:6b:3d:74:7e:4c:27:a2:cb:0c:70:1c:
         83:56:6b:0e:b6:66:0c:c7:9b:b3:c4:e1:1d:95:e8:db:8c:ea:
         44:2c:3d:dc:57:6d:2e:f4:da:8e:36:5e:3c:82:69:86:1c:eb:
         48:5f:a5:92:12:36:f4:33:f5:9c:90:1b:e2:36:5a:48:b7:21:
         7b:26:12:a5:59:b3:92:32:46:b6:5e:bf:19:80:9c:61:a7:79:
         96:1d:2c:ea:43:69:bb:d7:e5:78:8d:b8:00:6e:49:89:9d:66:
         78:2b:05:c8:31:98:5c:4b:2c:df:6f:9d:09:a9:48:82:46:95:
         52:c9:86:01:8e:f4:8a:fb:d1:fd:e4:ef:59:12:93:e5:1f:cb:
         23:d3:f2:86:f4:03:3b:54:2d:88:e2:32:08:bf:0a:72:4b:04:
         e6:c9:01:f4:fb:58:04:6b:d2:8f:d8:c6:e3:97:46:a6:e1:f7:
         78:7b:4c:d4:e3:3d:a3:a2:ac:f3:80:49:62:f0:a5:7a:b2:21:
         c5:f6:80:60:06:67:f9:82:9b:c5:bd:3e:24:6d:5b:37:d1:0e:
         34:17:97:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqZe4jviR/26Jc/y7uenbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw
YjliN2UwHhcNMjYwNTE2MTIwMTIxWhcNMjYwNTE3MTIwMTIxWjAzMTEwLwYDVQQD
EygwMTBlOGYwMjA1NjRlMjU5ZTU5ZmYxY2QzOWMxZWQxNGRiMTEzYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CjdA3yD7Ln8ibuo7hDVh0nFprxO
Zp2ELi2N5XZG43G+kDdsNNscU+JNfKVpceEInB5g7vsXJRAvQJ6ipfPw8Vg3KM4+
0+2v1a+Yag3TvkhxH4A2rAvsL82GZ7Yt0QJgW0NsIlR5OmdJXqek8pWqp/xSEohD
aeFTH9bk6RoP42/RImq9N4cgp0iBMdqRkcP5QajgipZbcWhPnuhw52fRp22Bdntr
9i1kdm2pIQUZgIKx6uyYN6soVUPjRGOn8NWzZiNJN+IgIOG1IxBAcvdYvwgy7IqP
b5ZaZlpe8ovpw2j+GeCjWxL8/9RB43Y+JIHur/x6a442Ep8exeyRaRY1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEOjwIFZOJZ5Z/xzTnB7RTbETu5MB8GA1UdIwQY
MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt
MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh
LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKsTlDqG
Y13TBc1Qe0EXAA4kAhqH/vh0i1K/9g3+YgoBfvXPQuTMpl/SHWs9dH5MJ6LLDHAc
g1ZrDrZmDMebs8ThHZXo24zqRCw93FdtLvTajjZePIJphhzrSF+lkhI29DP1nJAb
4jZaSLcheyYSpVmzkjJGtl6/GYCcYad5lh0s6kNpu9fleI24AG5JiZ1meCsFyDGY
XEss32+dCalIgkaVUsmGAY70ivvR/eTvWRKT5R/LI9PyhvQDO1QtiOIyCL8KcksE
5skB9PtYBGvSj9jG45dGpuH3eHtM1OM9o6Ks84BJYvClerIhxfaAYAZn+YKbxb0+
JG1bN9EONBeXag==
-----END CERTIFICATE-----
Generated at Sat May 16 17:07:09 2026 by rpki-client