Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          H8Lo6aVBYkos2FkiHEfOvmvEzPiB7rDlt0bto9SioD4=
Subject key identifier:   DE:C0:E2:A0:37:7D:37:72:17:B0:B6:4F:C2:F6:EE:47:A7:3C:A8:BA
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       01A0016FFEE6DB1DACAC9F7D09A8C2A267FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          17B3
Signing time:             Fri 14 Aug 2026 18:01:51 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:51 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:51 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: qmeRGADhb4xk4ZmGhrCtt9hc0wQDuVGOF9cE70mkz3k=)
                          2: ZiWqWZABnq_eiO62wMwzhJ88P8o.roa (hash: QMjkQdLnnhm5XVKipPX5kzLqwqqwc6MMLi86/hK/bzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:fe:e6:db:1d:ac:ac:9f:7d:09:a8:c2:a2:67:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: Aug 14 18:01:51 2026 GMT
            Not After : Aug 15 18:01:51 2026 GMT
        Subject: CN=dec0e2a0377d377217b0b64fc2f6ee47a73ca8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:47:c7:df:c2:79:9a:e8:cf:72:dd:29:3d:
                    96:59:9c:bb:0d:34:da:2c:a0:37:f9:2e:0a:87:54:
                    c2:fa:96:13:9c:ee:fc:1d:ab:0b:3e:38:1a:68:0d:
                    59:bb:3b:c3:94:d7:c0:d0:85:b7:77:a3:59:b6:87:
                    e3:ac:79:67:a3:db:76:ce:8c:1b:e1:6a:a2:2d:94:
                    be:98:69:a4:45:c2:31:01:1f:3a:ff:2c:5e:5e:bd:
                    dc:f0:77:ae:39:9a:dc:a2:a9:1a:a5:cf:9b:d3:c2:
                    34:56:af:f9:83:e1:c3:38:cb:0f:8c:dd:9f:79:c4:
                    81:d4:c1:bf:ae:3c:a6:5a:34:f7:f6:8c:67:d2:64:
                    43:e7:43:0e:80:98:d3:4c:25:d3:3b:79:b4:a1:61:
                    c4:bb:c8:30:b3:3a:ee:9f:53:36:e7:f0:81:66:90:
                    d3:4f:5c:4d:24:1e:ff:b4:d3:e6:8a:d8:6f:12:a5:
                    ca:80:66:1f:36:3d:bf:94:d4:11:5b:37:77:79:7c:
                    66:ce:c2:91:6e:b0:7e:e8:56:13:e6:00:91:06:95:
                    19:bc:7e:fe:e5:a7:bf:11:ae:86:1c:ea:9c:16:db:
                    91:60:17:d1:ad:60:c9:73:0d:44:72:d6:db:cc:9e:
                    14:27:83:cb:b4:bb:0d:9b:9b:25:7c:35:e2:9e:3b:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C0:E2:A0:37:7D:37:72:17:B0:B6:4F:C2:F6:EE:47:A7:3C:A8:BA
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:1d:0f:e3:b3:6b:a4:29:24:01:32:b8:68:85:53:01:2c:
         c1:63:f2:5c:5d:b0:a3:f1:5b:91:8f:24:b7:80:26:70:21:aa:
         68:a1:35:89:bd:fd:00:aa:8b:a6:70:64:75:4f:2f:cf:e7:39:
         47:26:99:98:8f:77:53:9e:ad:fe:2f:e8:2b:16:cf:bd:e7:3e:
         9a:ab:15:72:bc:ef:2b:be:96:de:ec:a5:a5:2e:b6:9b:b0:94:
         29:f8:22:48:ff:47:0d:93:5c:3c:d1:c3:68:cc:a3:a8:38:14:
         c3:08:96:ac:23:eb:c2:34:b5:ad:d0:64:47:13:1a:01:1f:53:
         8e:8f:bf:db:a0:09:46:23:be:90:e2:fe:97:92:fc:25:c3:9b:
         6f:54:03:91:3e:17:23:ae:d3:ae:17:b2:c7:89:0b:02:cb:f1:
         52:e6:e7:68:ff:50:78:63:a9:de:21:26:52:85:74:7b:85:ec:
         b2:0b:a3:eb:27:70:26:2f:8e:fa:6d:7f:9e:63:7a:6f:af:ba:
         9b:b3:cb:f4:f7:d5:f7:a5:17:79:1b:55:dd:b9:cb:fc:9c:c6:
         53:0d:eb:ee:47:ee:0f:75:2b:63:9e:4a:66:6a:59:6a:de:89:
         9a:6f:48:a2:1a:3c:b6:f0:27:9f:9b:46:82:bb:06:2e:91:38:
         3e:56:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:52 2026 by rpki-client