Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File:                     3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier:          qIVKSM+nQol/DYDU/BcY5ZDnCOe/ORqlH6vAZc39Ero=
Subject key identifier:   CA:51:9D:9A:23:B3:6F:81:72:38:4A:7D:88:CD:94:3D:E6:68:00:2A
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer:       /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial:       019E3004E16CC19279ADFA389602C42B3E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number:          0714
Signing time:             Sat 16 May 2026 09:01:26 +0000
Manifest this update:     Sat 16 May 2026 09:01:26 +0000
Manifest next update:     Sun 17 May 2026 09:01:26 +0000
Files and hashes:         1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: ihbGqMp725keyNxWjL34RYRSADLvl7Ui7P8xfySlM90=)
                          2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:e1:6c:c1:92:79:ad:fa:38:96:02:c4:2b:3e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
        Validity
            Not Before: May 16 09:01:26 2026 GMT
            Not After : May 17 09:01:26 2026 GMT
        Subject: CN=ca519d9a23b36f8172384a7d88cd943de668002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:47:b0:81:9c:ce:fa:13:eb:3e:80:31:51:
                    37:0d:19:ed:b5:3e:cc:44:e3:9b:f8:b9:9f:5d:28:
                    b5:14:4b:55:bb:fb:f3:2f:b3:c1:cd:05:d3:a9:7b:
                    64:89:79:43:3a:62:01:92:b7:c2:7a:07:16:8f:41:
                    92:18:09:c9:43:0d:c0:09:b4:57:9b:d8:31:fd:1e:
                    30:d7:11:0d:f7:8c:e9:1e:69:5c:1e:16:eb:2e:22:
                    1f:81:2b:c0:d8:6f:02:7a:56:25:b8:4c:b9:c3:bb:
                    da:00:e8:98:9e:69:02:d4:78:1a:53:76:cc:1e:b0:
                    59:8c:b1:7f:91:2e:0b:8e:79:8e:6f:55:d6:f4:7d:
                    b5:6c:24:45:c4:8c:31:24:15:e4:fc:3e:57:79:d5:
                    eb:f9:ec:8c:0a:d8:7c:e4:f7:69:43:29:c5:8d:1c:
                    50:14:e3:84:37:74:3f:c3:2b:81:ea:76:5d:49:73:
                    02:bb:df:63:6e:c8:47:e3:95:3d:af:2a:5a:b0:ec:
                    52:29:97:0c:fb:3f:e0:d3:57:5d:22:39:12:1a:59:
                    34:a9:3e:24:46:18:95:b3:82:96:ef:c2:fb:bb:1b:
                    50:e3:88:ff:26:56:40:de:53:14:07:d3:a5:d2:2c:
                    9d:b7:79:da:95:08:ef:5e:fe:9b:fa:5e:0e:21:f0:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:9D:9A:23:B3:6F:81:72:38:4A:7D:88:CD:94:3D:E6:68:00:2A
            X509v3 Authority Key Identifier:
                keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:ac:ec:7c:36:59:fa:1c:54:2b:c1:d0:a7:2f:83:a7:80:
         c6:6d:a4:a4:99:58:59:a9:f3:88:21:04:f1:1a:8f:90:47:06:
         be:cc:70:95:46:f9:4c:12:00:49:34:92:c3:94:5e:30:ef:06:
         df:83:22:4b:f9:8d:a3:1c:4c:9c:f7:8d:dc:8f:fc:68:ea:a3:
         c1:22:60:a7:57:fd:5a:63:ee:de:b0:83:47:69:d8:1a:0c:8e:
         08:5a:6d:b0:b7:5a:9c:6a:8a:21:3c:1e:bf:70:9a:58:24:15:
         66:fe:35:04:11:4e:13:89:eb:2a:ee:d2:05:95:b4:a3:dd:e4:
         bc:67:c7:3b:e5:32:14:b2:32:e9:87:07:e1:60:55:f1:67:5d:
         0f:f6:61:cc:5c:72:cf:dd:13:be:bd:cc:80:71:e5:f0:32:9f:
         2d:dc:ce:27:69:78:ae:62:65:c9:a0:a7:17:a9:c2:0a:38:be:
         60:e3:e7:bb:72:55:81:ef:12:04:9f:f3:6c:b8:1d:ac:8c:78:
         15:3b:2b:4b:06:64:8a:7b:76:a0:54:f2:c2:7c:68:cc:08:e3:
         88:d2:53:ac:56:45:c1:51:1d:ad:e3:9f:7f:d0:7e:b0:fa:67:
         12:20:e3:db:fd:62:bc:11:2c:a9:44:6b:35:9f:0e:78:51:cf:
         3a:a2:04:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBOFswZJ5rfo4lgLEKz4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjYwNTE2MDkwMTI2WhcNMjYwNTE3MDkwMTI2WjAzMTEwLwYDVQQD
EyhjYTUxOWQ5YTIzYjM2ZjgxNzIzODRhN2Q4OGNkOTQzZGU2NjgwMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5pHsIGczvoT6z6AMVE3DRnttT7M
ROOb+LmfXSi1FEtVu/vzL7PBzQXTqXtkiXlDOmIBkrfCegcWj0GSGAnJQw3ACbRX
m9gx/R4w1xEN94zpHmlcHhbrLiIfgSvA2G8CelYluEy5w7vaAOiYnmkC1HgaU3bM
HrBZjLF/kS4LjnmOb1XW9H21bCRFxIwxJBXk/D5XedXr+eyMCth85PdpQynFjRxQ
FOOEN3Q/wyuB6nZdSXMCu99jbshH45U9rypasOxSKZcM+z/g01ddIjkSGlk0qT4k
RhiVs4KW78L7uxtQ44j/JlZA3lMUB9Ol0iydt3nalQjvXv6b+l4OIfC9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpRnZojs2+BcjhKfYjNlD3maAAqMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE6s7Hw2
WfocVCvB0Kcvg6eAxm2kpJlYWanziCEE8RqPkEcGvsxwlUb5TBIASTSSw5ReMO8G
34MiS/mNoxxMnPeN3I/8aOqjwSJgp1f9WmPu3rCDR2nYGgyOCFptsLdanGqKITwe
v3CaWCQVZv41BBFOE4nrKu7SBZW0o93kvGfHO+UyFLIy6YcH4WBV8WddD/ZhzFxy
z90Tvr3MgHHl8DKfLdzOJ2l4rmJlyaCnF6nCCji+YOPnu3JVge8SBJ/zbLgdrIx4
FTsrSwZkint2oFTywnxozAjjiNJTrFZFwVEdreOff9B+sPpnEiDj2/1ivBEsqURr
NZ8OeFHPOqIE2Q==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:45 2026 by rpki-client