Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File:                     3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier:          MEOaVlnnab/57NgGxa07/zoNksXqSFM/h0ouJnz31hs=
Subject key identifier:   14:62:75:2A:2B:35:00:99:C3:A8:24:80:36:2C:10:94:C2:FD:F4:7E
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer:       /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial:       019E2F5FCEF0A738CE292C0B1A68F7E2C077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 06:01:08 +0000
Manifest this update:     Sat 16 May 2026 06:01:08 +0000
Manifest next update:     Sun 17 May 2026 06:01:08 +0000
Files and hashes:         1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: aTDSpc7n+i+QOi+nzsia8KzJ3QM9vw+OsWaipLXIoNo=)
                          2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
                          3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:ce:f0:a7:38:ce:29:2c:0b:1a:68:f7:e2:c0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
        Validity
            Not Before: May 16 06:01:08 2026 GMT
            Not After : May 17 06:01:08 2026 GMT
        Subject: CN=1462752a2b350099c3a82480362c1094c2fdf47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:7e:f3:31:c0:bf:40:9f:a5:11:5f:d8:ca:
                    d0:01:61:e5:84:c7:0a:ea:0e:00:65:e4:3d:4f:ed:
                    a7:27:5a:21:dd:0c:9b:17:9c:34:7e:b6:51:9c:72:
                    9c:c8:f8:cc:24:d7:60:8e:cd:ba:1e:4b:ec:76:c0:
                    f2:10:40:98:40:26:22:b1:b3:0c:07:bb:1d:fb:79:
                    ea:02:64:5c:ba:26:21:2e:2e:cb:52:64:20:65:40:
                    38:37:07:fc:01:8d:f7:20:b2:37:0f:ad:90:32:29:
                    0b:7f:cc:d6:97:27:63:2a:3e:a1:9d:c8:bd:01:5b:
                    30:81:5d:58:af:c8:ac:0c:f9:7a:0f:60:67:aa:a9:
                    dc:e7:80:43:0e:26:c0:b1:ec:78:cb:74:75:75:a8:
                    f2:f1:6a:12:30:e2:73:74:a5:03:b6:c7:e4:47:1d:
                    4e:5e:3f:c4:63:8a:7b:f7:b2:88:d4:f2:22:03:62:
                    8b:a4:97:b0:4d:51:84:4a:04:8f:22:95:bf:8e:5b:
                    34:b8:59:b8:95:d6:75:a7:42:06:fe:c8:93:41:1a:
                    17:ad:af:21:fb:8d:fe:36:1a:e1:28:45:15:e2:68:
                    f6:17:97:6d:ef:f1:9a:75:85:a5:7c:c6:33:84:4a:
                    f7:a3:2f:d6:e6:b4:ba:65:66:ff:40:0d:19:01:0d:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:75:2A:2B:35:00:99:C3:A8:24:80:36:2C:10:94:C2:FD:F4:7E
            X509v3 Authority Key Identifier:
                keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:12:ce:40:10:52:4e:62:5d:af:0e:61:93:f8:1d:b0:7b:55:
         58:8d:c6:87:5a:07:60:d2:cb:5c:71:91:5d:71:36:de:63:e2:
         16:a9:4f:ee:18:8a:9b:48:62:8a:9c:52:af:88:de:e7:92:de:
         1b:75:e7:87:ab:a6:de:02:fc:03:de:58:b4:9c:35:bb:ae:10:
         26:45:fd:10:a6:dc:58:51:30:f0:60:7d:08:9a:56:b4:4e:1e:
         6c:8f:6e:6d:9a:9a:43:1f:7c:8f:6f:30:62:ea:90:68:3b:f5:
         c1:0b:df:d1:47:55:1d:17:39:31:b9:82:88:0d:64:6e:94:39:
         70:90:d7:58:bf:f8:f4:8a:99:b5:7d:75:5c:fd:31:6b:f6:6f:
         c9:c6:20:00:1f:ef:6f:d1:44:4d:6b:e7:84:3e:08:97:09:c9:
         27:97:15:90:d2:c8:a6:83:e0:e1:35:3c:40:02:20:d1:67:74:
         b1:e8:41:b6:c5:97:c2:f0:03:0a:a5:69:1b:43:40:9e:8f:18:
         90:72:03:9a:81:90:2c:b8:59:43:3d:f5:aa:c9:fe:5c:c1:61:
         8d:70:81:58:66:b6:37:0c:a2:88:5b:47:37:a5:1c:26:d3:6f:
         3f:20:c3:e4:aa:c9:e9:8a:81:59:d6:b8:81:64:a4:2d:7b:5c:
         d6:d7:5d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:01 2026 by rpki-client