Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          YzwJ7ebZIRMtMJ1/mz5+CemdHhL0L8y3LRC50TG90dw=
Subject key identifier:   F1:0C:22:EF:0E:FB:76:2B:3B:19:CA:F9:37:DD:18:C3:F8:31:06:A8
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       019E303B1FF136836088C6AFC90CBCCD1088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          191C
Signing time:             Sat 16 May 2026 10:00:41 +0000
Manifest this update:     Sat 16 May 2026 10:00:41 +0000
Manifest next update:     Sun 17 May 2026 10:00:41 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: S8WoR2nn7OYeuUGpf9Fa5d2xcXwhBZS+MH8VonD+UC4=)
                          2: C6zjpcBdZcRudxtmosvZuextZiI.roa (hash: zfnjDDGxVh2c7H/SnJCHldm/s9nx6Q4NSeuXoVoEuIA=)
                          3: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (hash: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk=)
                          4: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (hash: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8=)
                          5: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (hash: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8=)
                          6: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (hash: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:1f:f1:36:83:60:88:c6:af:c9:0c:bc:cd:10:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: May 16 10:00:41 2026 GMT
            Not After : May 17 10:00:41 2026 GMT
        Subject: CN=f10c22ef0efb762b3b19caf937dd18c3f83106a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:06:f7:e2:fa:1b:04:bc:3b:8b:2d:4e:ce:
                    7b:31:64:e9:03:45:3c:d2:58:30:d7:63:f6:9f:8b:
                    54:fb:f8:f6:49:b9:0e:35:0e:cf:b2:c7:12:1c:1f:
                    ad:10:90:c1:4f:3e:13:12:77:5f:cb:12:39:a6:48:
                    9a:28:c3:fe:3f:f9:dc:43:fb:87:a0:c3:de:c8:49:
                    ce:7a:22:f8:c8:63:e5:f8:85:8a:2a:3d:e5:e0:06:
                    31:50:36:38:ce:5f:44:a7:63:56:8b:93:77:41:60:
                    b8:ed:f7:39:32:21:4b:9b:7f:25:29:95:27:aa:5c:
                    ac:3e:3b:07:f3:e3:80:49:31:f8:44:e6:02:3f:be:
                    e0:21:4b:3e:67:f3:af:4f:2d:a2:03:04:01:f6:0a:
                    8a:67:97:e9:4f:10:ec:6c:b1:6a:00:b9:97:49:fa:
                    e1:69:10:88:21:e9:3b:68:9a:e5:a9:e4:b1:fc:62:
                    a5:b6:e0:8b:bb:79:78:82:c3:65:4d:5f:6c:1c:88:
                    b9:93:a7:fc:b3:be:e9:72:ef:e9:e4:88:51:f1:83:
                    46:c8:7f:78:fa:ad:29:66:f8:95:69:ff:41:fd:7b:
                    08:99:26:3d:1e:1b:38:10:c5:c5:59:ae:08:1a:ff:
                    72:37:6e:17:c6:ea:ce:5e:a4:a6:08:e6:8c:21:21:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0C:22:EF:0E:FB:76:2B:3B:19:CA:F9:37:DD:18:C3:F8:31:06:A8
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:98:a6:d7:06:5e:0b:6b:5b:4f:ea:99:d6:7d:9a:9f:65:
         96:1c:64:17:ba:e4:91:7e:85:a0:5a:b1:c1:14:f5:74:58:f4:
         ef:1b:e8:bd:22:2c:96:02:31:47:67:51:e8:7e:92:a9:7a:24:
         f9:6d:fd:3c:10:b6:53:e5:3d:df:8f:7b:0a:54:27:0b:32:6e:
         60:03:de:74:ad:a5:2d:f4:bf:dd:95:24:35:06:93:a4:5f:ab:
         6e:d3:a4:d5:e5:38:9e:5b:ac:56:43:7a:b0:f5:09:77:48:14:
         b0:d2:2b:4a:9b:cf:d9:b5:e9:cd:d1:c8:3c:18:77:91:c7:c3:
         86:ce:03:cf:6d:21:4f:1c:e3:c3:72:9b:21:a0:63:0c:e5:c3:
         28:0b:98:a7:14:bf:36:9e:28:87:e4:2f:1f:fb:0c:fc:93:fd:
         52:1b:b9:dc:b1:63:d4:53:6d:9e:45:d5:39:f0:98:43:9a:b3:
         f1:b1:7b:b2:32:d8:6b:8e:0a:52:c4:ee:85:16:34:08:5f:66:
         32:05:7a:aa:04:2c:43:dc:a3:3b:1d:c0:94:4e:22:2a:8f:60:
         a7:7c:fb:35:a2:7b:9f:5d:ca:6b:21:82:ce:60:d3:d6:ec:c6:
         88:25:9c:fd:00:ec:54:cf:1d:15:65:bf:60:7a:2b:cd:76:42:
         9a:58:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:12 2026 by rpki-client