Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File:                     3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier:          1ouYIsIXfHH1kM2eOEZrAujY58yGhDV9a6Rf/9YGilY=
Subject key identifier:   51:E4:BC:F4:F9:0C:CF:E5:60:CB:F3:C7:93:B3:04:A8:CF:ED:1D:E1
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer:       /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial:       019E314E4935A1DE4ACC7C31828B825418BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number:          146C
Signing time:             Sat 16 May 2026 15:01:14 +0000
Manifest this update:     Sat 16 May 2026 15:01:14 +0000
Manifest next update:     Sun 17 May 2026 15:01:14 +0000
Files and hashes:         1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: J1y2qb9E3C5GiBk712wiXq1yBbc33p83O83TxYkO9mU=)
                          2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:49:35:a1:de:4a:cc:7c:31:82:8b:82:54:18:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
        Validity
            Not Before: May 16 15:01:14 2026 GMT
            Not After : May 17 15:01:14 2026 GMT
        Subject: CN=51e4bcf4f90ccfe560cbf3c793b304a8cfed1de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:fa:bc:8d:0d:68:9e:7c:be:89:d6:77:26:
                    56:f4:81:3b:92:08:5d:73:9d:4c:0d:9f:1b:6a:df:
                    ad:e3:fd:a1:97:45:e0:18:e3:0a:3b:5e:96:4e:43:
                    5b:c0:34:d3:89:d8:56:ad:d3:c1:8f:72:56:8e:10:
                    b9:fb:af:88:43:97:55:d9:67:79:c4:18:04:57:bf:
                    db:b0:27:83:df:af:97:55:c8:59:cd:ee:5c:f9:5e:
                    49:1c:23:fc:91:36:47:65:77:d1:76:0e:68:ad:ba:
                    6f:95:4a:e1:53:31:02:fa:de:63:88:a3:46:74:72:
                    d2:4c:99:29:3f:51:a0:a6:1f:04:9e:d9:c4:0b:19:
                    fc:f6:12:40:63:0d:75:9a:7c:f4:14:57:52:d8:2d:
                    11:58:aa:03:d2:20:0d:a5:39:5c:08:30:73:dc:b0:
                    af:eb:32:a6:b7:ab:cf:ae:be:b2:88:a9:d3:7e:33:
                    6c:0f:a0:f6:fe:1e:70:be:d7:fa:1b:ba:13:f5:aa:
                    e0:4d:84:cc:17:72:8a:60:26:a8:57:d8:25:16:d1:
                    5f:15:f7:c1:15:f4:db:a8:ec:f8:02:18:11:97:15:
                    7f:ad:86:1a:fa:12:4f:aa:c8:59:72:3a:51:7c:35:
                    23:75:4d:87:ce:e7:96:46:36:82:50:59:11:bb:1d:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:BC:F4:F9:0C:CF:E5:60:CB:F3:C7:93:B3:04:A8:CF:ED:1D:E1
            X509v3 Authority Key Identifier:
                keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:92:f7:28:f1:c8:1e:93:b2:d3:e4:6e:7c:20:06:d3:76:ff:
         a6:9d:44:7c:0d:40:1b:1d:f5:2c:ea:63:41:10:2b:90:af:a7:
         2a:a6:c1:5b:91:73:22:f7:4c:ef:66:db:7b:7d:35:cd:1e:ae:
         3b:90:7d:86:a4:ef:23:04:3f:c9:63:f8:81:13:5d:b7:fc:17:
         09:c2:98:78:2f:c0:58:85:4b:7f:21:ff:9b:e0:bc:03:cd:f1:
         77:bc:4f:6d:54:49:7c:1b:0c:5b:bf:ed:9e:1a:33:dd:1c:64:
         ef:a8:d0:ab:ad:43:c7:e9:4a:12:12:71:54:a6:08:84:81:04:
         d1:5c:1a:20:c3:19:f9:62:0f:14:ea:a2:31:21:bf:bc:97:50:
         c1:ef:02:f9:c9:1c:1b:fe:16:31:c6:88:92:1d:2e:47:00:4d:
         13:db:3a:fd:56:db:1e:e2:7a:69:0b:93:22:7a:e9:6b:38:13:
         1e:1a:0c:2f:70:07:d7:14:85:f7:bc:57:32:89:ce:01:53:c2:
         b9:18:96:53:88:06:8a:7e:92:d6:2f:f0:70:66:a7:20:e3:b0:
         ff:fe:d5:60:09:52:43:0a:f9:3c:30:0d:f7:f3:f3:16:cf:4c:
         3e:49:e9:7e:29:c1:be:67:7f:83:28:80:57:7a:a2:49:78:c0:
         35:f8:93:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:25 2026 by rpki-client