Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File:                     3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier:          ehqY+EJ/BmwiLVZ/KyK5gRYeVImYE99xsd7EgvcW9lI=
Subject key identifier:   25:36:21:58:1E:59:DB:C0:D5:CA:92:7B:90:86:F8:D9:F8:B7:CD:F1
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer:       /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial:       019E3117A836502AB8D02A1245629ADE16D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number:          18EC
Signing time:             Sat 16 May 2026 14:01:34 +0000
Manifest this update:     Sat 16 May 2026 14:01:34 +0000
Manifest next update:     Sun 17 May 2026 14:01:34 +0000
Files and hashes:         1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: hssFrFI6y+hWGCCSlV2X/EmVadAb4akpOCkY2mxgCAA=)
                          2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:a8:36:50:2a:b8:d0:2a:12:45:62:9a:de:16:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
        Validity
            Not Before: May 16 14:01:34 2026 GMT
            Not After : May 17 14:01:34 2026 GMT
        Subject: CN=253621581e59dbc0d5ca927b9086f8d9f8b7cdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:cd:16:90:3f:80:b7:54:a9:fd:88:2a:62:
                    45:e6:a9:19:72:a4:ac:20:fd:25:bf:fd:6f:f6:23:
                    92:1a:4e:5f:0c:68:55:05:21:ca:15:45:95:6d:34:
                    b7:d0:7b:b2:9c:4f:ab:f3:24:c6:b6:86:62:9f:2e:
                    6f:91:06:9c:17:06:3f:fb:42:ea:e4:80:42:2d:14:
                    fc:2d:08:05:4c:86:cf:ab:a1:6a:36:6a:e4:56:07:
                    51:87:6c:0e:64:16:17:4b:1d:e4:8e:4d:3e:6a:34:
                    7c:e3:8f:13:93:62:cc:4f:72:33:e4:f4:aa:61:1e:
                    27:a8:05:6f:fd:95:2b:0b:10:6e:f1:ec:ae:42:a7:
                    ba:e0:8b:b9:8c:a0:5d:17:30:36:f7:c0:c4:30:4c:
                    c3:8c:b0:60:c8:9f:43:59:cd:cf:ea:0a:19:fa:7c:
                    95:73:ee:c2:2e:e6:8a:7e:d7:78:bf:89:a0:d0:99:
                    ea:27:cc:e9:f9:9b:9f:ae:e1:58:50:4d:28:fb:d6:
                    c8:d9:a1:7c:f1:8c:46:5f:dc:4a:f4:96:bd:0a:47:
                    e4:18:7a:44:21:55:4f:71:c0:30:54:b4:9b:31:bd:
                    ec:70:54:7a:70:c7:28:cd:f2:33:3e:26:6c:8c:41:
                    b3:94:56:28:56:d1:72:f0:e8:29:f0:d9:0d:b1:e4:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:21:58:1E:59:DB:C0:D5:CA:92:7B:90:86:F8:D9:F8:B7:CD:F1
            X509v3 Authority Key Identifier:
                keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:40:7f:f5:1d:4b:1f:ad:83:52:7a:f8:16:98:7a:29:67:
         6f:e7:a2:f6:e5:0d:35:b3:09:92:97:dd:db:e3:d8:2c:f1:17:
         62:1b:3c:ee:10:5b:f0:24:0b:01:b0:6a:31:6c:13:7e:c0:75:
         aa:1c:f6:d6:b6:ac:42:9d:91:86:6a:32:1d:6f:94:27:3a:2f:
         6f:1e:83:0b:cc:4f:af:18:93:a8:b5:15:78:11:d3:b8:f5:7f:
         1d:2e:9b:c8:a6:08:8d:9c:bc:64:e4:88:9e:32:36:28:82:dc:
         35:f6:55:19:ad:5d:78:fb:57:79:fd:a5:2f:15:2d:26:b5:03:
         60:48:94:66:e1:ab:94:47:13:79:36:59:ab:85:af:fd:20:a3:
         e2:dc:33:06:7e:6c:b1:99:62:30:f6:d7:03:7a:43:1c:a5:c5:
         bf:e0:77:7f:e1:03:c1:9d:47:1e:1f:d5:9c:2c:42:f8:e7:51:
         ba:df:10:64:e9:cd:cb:a2:6a:ab:f8:6d:51:4e:a3:95:3f:80:
         9d:8a:db:ec:f5:cc:b9:c8:3a:b8:63:bf:19:dd:3c:75:7e:ee:
         f3:6d:a6:cf:cc:6e:90:6d:aa:54:f5:62:28:c1:e1:5b:b7:9a:
         40:90:83:32:77:a9:30:3d:c8:fd:52:4d:9b:0a:ad:c9:79:59:
         c0:a9:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:54 2026 by rpki-client