Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File:                     3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier:          nC5iSVWFsuVc7VpJLsDE8ujWu4Yy4UPVMP0fz3Rwz1w=
Subject key identifier:   C4:F6:AC:3C:41:DA:73:52:DC:C5:06:63:2E:20:E8:8C:21:73:BA:40
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer:       /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial:       019E30722CEE4930510E6DC70CDA766C024A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 11:00:49 +0000
Manifest this update:     Sat 16 May 2026 11:00:49 +0000
Manifest next update:     Sun 17 May 2026 11:00:49 +0000
Files and hashes:         1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: n03cefWYiAyFWXuyQDuj5BhWTN/26ZbTEhkZA6ZbaKM=)
                          2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:2c:ee:49:30:51:0e:6d:c7:0c:da:76:6c:02:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
        Validity
            Not Before: May 16 11:00:49 2026 GMT
            Not After : May 17 11:00:49 2026 GMT
        Subject: CN=c4f6ac3c41da7352dcc506632e20e88c2173ba40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:65:25:8c:7c:69:fe:30:b4:da:51:ce:27:
                    3c:cc:0d:11:da:47:1d:c1:05:ad:9b:cf:a5:f7:2d:
                    ed:25:68:0a:9a:56:f9:59:4c:d9:65:f6:59:3e:13:
                    31:fe:c1:03:fb:58:d3:7a:a2:dc:8a:fc:60:c3:2d:
                    fb:f7:ae:a3:62:3a:e8:99:61:a2:c6:d0:c0:c7:c4:
                    58:fa:81:eb:9e:f0:6e:0f:47:b9:90:1a:a9:3f:9f:
                    61:b7:00:60:99:a6:8e:12:a6:5e:a5:46:8c:ee:05:
                    5c:9f:38:80:b8:51:97:97:7c:f8:b2:c9:59:b4:e6:
                    35:6e:13:34:ae:46:70:04:b6:e1:50:69:33:7d:02:
                    c4:ab:49:07:2e:79:40:65:de:0b:e8:60:a5:2e:5f:
                    93:bd:bf:5a:d5:24:91:c9:8a:f5:48:d1:2b:f7:28:
                    d3:5f:4a:40:c8:d7:04:4e:34:9d:ba:48:cb:61:9b:
                    d2:61:f5:20:de:77:d6:ba:83:5a:06:57:5d:5a:9b:
                    5d:96:ce:39:5a:13:d7:96:06:f2:a1:d4:72:0b:71:
                    7e:46:bd:47:d5:7b:e0:65:76:66:08:f5:5d:6f:45:
                    59:2e:12:24:e6:08:da:e8:9c:0e:b0:6d:4b:38:37:
                    f4:90:b9:5c:2c:f5:20:c8:1f:d5:a5:2f:f3:67:95:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:AC:3C:41:DA:73:52:DC:C5:06:63:2E:20:E8:8C:21:73:BA:40
            X509v3 Authority Key Identifier:
                keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:da:f9:4f:24:78:8b:5d:e3:f5:aa:d9:2f:5e:82:41:4e:a9:
         15:23:ec:f6:a6:6f:1b:d8:46:ed:45:e1:e5:93:6a:91:d8:ff:
         16:19:e6:98:63:37:48:72:b6:a8:f3:dc:d0:6e:7d:07:50:bb:
         fa:86:ef:02:0f:f6:cd:77:83:74:95:46:b1:e9:72:26:17:c3:
         34:aa:cc:94:4b:82:df:2c:77:35:e2:63:02:71:cd:3c:a7:dd:
         06:aa:37:44:40:b0:d3:a5:1d:d1:96:cb:f9:9a:33:51:36:28:
         cb:f5:45:88:36:6b:a5:62:00:8c:d3:f0:17:b2:d6:91:01:46:
         88:f8:ba:91:28:7d:25:e4:d2:05:f9:f6:fc:d0:1b:9a:76:b2:
         30:ed:a4:ce:af:de:34:51:5a:f9:ec:84:e9:5b:5e:aa:5d:bd:
         33:0d:26:ae:48:01:5f:5d:ff:c3:3c:2f:01:84:ac:3b:89:1f:
         6c:75:0b:38:5f:73:67:5a:a4:3e:5a:a8:fd:83:e3:3e:f5:00:
         b2:95:d3:a1:12:ad:84:18:11:06:4d:7f:d8:e9:83:68:d5:cf:
         8c:60:44:52:49:f8:17:7d:f2:25:ff:9c:80:5f:9e:f1:1c:fe:
         2d:5f:e7:e1:5f:f6:1c:41:59:b6:5b:13:ae:07:55:39:30:eb:
         ef:65:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:14 2026 by rpki-client