Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File:                     3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier:          sezMq6pHdLB6xzPq701/n2efhAka+zLBtXz28SVjPaM=
Subject key identifier:   8D:81:62:27:4F:F0:BF:FB:78:C5:1E:B4:E6:33:3E:0F:70:46:97:0B
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer:       /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial:       019E300528A15CE465B33A38260E707D6C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number:          0FA0
Signing time:             Sat 16 May 2026 09:01:44 +0000
Manifest this update:     Sat 16 May 2026 09:01:44 +0000
Manifest next update:     Sun 17 May 2026 09:01:44 +0000
Files and hashes:         1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: 7ZAW22wE3Ydj9hEZNZOKVP/aIzbvL0GRzsuClGm2jCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:28:a1:5c:e4:65:b3:3a:38:26:0e:70:7d:6c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
        Validity
            Not Before: May 16 09:01:44 2026 GMT
            Not After : May 17 09:01:44 2026 GMT
        Subject: CN=8d8162274ff0bffb78c51eb4e6333e0f7046970b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:94:b3:41:73:59:30:c3:8e:c4:4e:20:0e:
                    7c:6d:c0:c5:39:d9:b6:0e:12:7c:5a:f2:b8:46:f9:
                    ef:71:01:f0:78:5d:82:c7:6b:d7:04:d7:6e:fe:93:
                    a5:29:89:0d:df:f4:cb:2f:1b:30:1f:45:4a:0e:6a:
                    85:5e:16:ec:fb:9d:f9:0c:f7:a0:82:a8:6b:2d:20:
                    49:1e:dd:04:73:3c:57:cb:50:ab:99:1b:25:3f:e2:
                    5a:87:18:03:63:9c:02:1e:6c:4a:80:89:6a:0e:3d:
                    f4:70:fe:58:94:96:a4:e2:ff:29:bc:d1:32:bd:7a:
                    8b:9d:a2:45:be:c8:f4:9e:36:25:d9:25:30:08:f1:
                    bf:bb:31:6e:a1:70:8d:35:03:17:b4:c6:8f:c4:7e:
                    1c:c7:cb:59:96:a3:a4:11:66:8b:42:8e:7b:f1:6f:
                    2c:70:09:b4:ee:8b:07:7f:2d:1f:2d:65:e3:52:91:
                    af:f7:5f:00:dd:11:2b:0f:01:ed:f1:c8:94:05:74:
                    89:b6:46:b5:0d:4c:a6:02:93:3c:57:2e:ab:8c:54:
                    68:23:5b:d0:6a:50:e7:25:2b:7d:91:53:0c:d2:f4:
                    74:42:9e:28:eb:d8:6e:d2:17:b9:18:1f:8a:cf:a7:
                    df:40:01:cf:b0:83:fb:02:a6:0e:06:ac:e0:29:12:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:62:27:4F:F0:BF:FB:78:C5:1E:B4:E6:33:3E:0F:70:46:97:0B
            X509v3 Authority Key Identifier:
                keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a6:04:3d:ce:14:15:f8:a9:ad:33:e8:d9:1f:7b:e0:72:b8:
         34:58:15:6d:0e:b9:e8:51:6a:57:bf:10:c3:93:8b:37:1b:be:
         46:ad:03:88:a2:00:c4:5c:2c:85:ff:f5:52:98:3a:3e:94:e8:
         c9:83:f0:81:3f:ac:44:c6:25:2c:eb:99:b1:c8:31:69:8f:b7:
         ba:8f:15:d4:5e:a7:51:f5:93:a3:c7:63:45:8c:e6:4d:f4:51:
         34:14:8c:5b:e3:da:2c:52:69:c2:2d:be:11:08:ee:84:e6:db:
         9f:33:31:60:d0:df:70:e1:90:c2:9b:9a:a6:55:f5:44:17:89:
         9a:51:e5:c6:ef:17:26:43:f5:47:d3:05:b8:0a:db:84:2d:94:
         b6:2b:75:31:b1:54:9b:0a:f1:b1:b6:51:09:60:9b:fa:e7:e0:
         2b:7e:56:5a:f8:65:f2:0d:2f:2f:1a:9a:68:27:21:37:51:b6:
         00:6f:8b:96:49:e1:70:12:ed:15:d7:96:2f:c5:19:5b:90:67:
         a3:d3:a6:2e:5d:c1:34:38:07:cb:ce:24:f2:75:52:bb:11:74:
         62:78:2b:3d:40:82:de:96:38:1d:39:99:f5:7a:f8:cc:8f:76:
         5c:0d:17:b5:c9:69:bb:08:77:22:10:b8:2f:3f:ec:cc:4d:e7:
         c4:d7:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:54 2026 by rpki-client