Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File:                     3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier:          tOP7vS3NLdxujNlRMRo3KIUYplI3/ii98X09lOeS830=
Subject key identifier:   ED:DD:01:AE:BA:13:EE:6D:29:7A:60:09:19:E3:8E:C8:5F:73:16:67
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer:       /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial:       019E9A71D1F672F979DC996B1725694781F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number:          13FA
Signing time:             Sat 06 Jun 2026 01:00:11 +0000
Manifest this update:     Sat 06 Jun 2026 01:00:11 +0000
Manifest next update:     Sun 07 Jun 2026 01:00:11 +0000
Files and hashes:         1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
                          2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: r8yN5cggn793zVsQ4ZBogcimrgv+dnw3v3IOZFpcI7w=)
                          3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
                          4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
                          5: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:71:d1:f6:72:f9:79:dc:99:6b:17:25:69:47:81:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
        Validity
            Not Before: Jun  6 01:00:11 2026 GMT
            Not After : Jun  7 01:00:11 2026 GMT
        Subject: CN=eddd01aeba13ee6d297a600919e38ec85f731667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:c2:23:fc:7d:ae:8d:9a:20:8e:9f:ce:41:
                    4b:f6:9c:02:7f:f4:22:34:12:14:7e:ac:38:cf:1f:
                    47:ce:52:43:da:e3:53:f6:77:e3:58:a8:7a:94:55:
                    e7:62:2a:d3:89:b4:bd:60:36:83:09:82:23:21:e9:
                    79:b1:ee:95:c1:34:66:bb:d2:06:92:6b:6f:31:9d:
                    e7:be:74:d0:2a:f3:6d:29:04:51:90:93:21:83:3c:
                    83:5c:65:6a:d6:56:3d:f2:34:b5:94:06:0b:e7:32:
                    8c:94:c8:4e:a7:e8:76:d7:b7:dc:c1:69:73:21:7c:
                    ec:1d:8f:24:96:78:5f:35:5d:79:90:04:b1:30:22:
                    2c:7e:da:10:2e:dc:2d:47:e8:e8:dc:b5:81:57:fd:
                    18:3d:e1:65:79:18:73:10:28:4b:32:39:ee:82:f5:
                    86:44:8e:99:74:09:05:79:ef:7e:da:bb:b1:00:cf:
                    fd:cc:52:59:d6:cd:08:34:ae:68:19:8a:40:57:59:
                    a1:18:8b:0a:2e:32:3d:e5:0e:e1:16:b6:3e:84:a6:
                    15:02:04:11:88:57:1a:91:f5:be:16:01:36:a1:20:
                    92:7a:9c:3c:41:24:cd:ec:e9:67:ce:13:b6:c1:0a:
                    8e:69:60:73:2b:55:76:12:b8:95:c8:1a:6d:37:c8:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:01:AE:BA:13:EE:6D:29:7A:60:09:19:E3:8E:C8:5F:73:16:67
            X509v3 Authority Key Identifier:
                keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:2e:ad:60:69:8e:d6:75:f4:90:7a:ed:fc:9f:d4:ae:44:
         ec:8a:3e:ba:e5:ef:e5:de:da:11:98:d8:71:8a:18:ba:bb:ab:
         dc:b9:3f:33:53:84:15:63:86:ac:7a:81:9d:17:d5:99:4c:04:
         5a:43:eb:3c:d9:8f:94:21:f0:5d:9b:98:1d:cf:8b:2a:96:70:
         ec:f5:63:da:29:00:33:f1:bf:c6:1f:0f:09:32:83:0f:52:64:
         dd:a4:6f:f1:6b:fb:58:e2:cc:be:fd:2d:db:8c:c7:2f:cf:80:
         d6:06:63:45:ba:19:b4:2a:fe:36:70:01:a1:eb:95:77:3d:8f:
         b4:2a:0c:90:f3:9c:94:e9:01:77:41:9c:a9:17:23:85:7c:57:
         9b:f1:a4:b2:69:8b:8f:3e:00:26:0f:a0:ba:f1:93:91:c7:8f:
         d1:63:6e:05:b7:5b:18:dc:f5:fd:ee:d6:e5:98:de:97:4b:85:
         2a:0f:af:2c:d1:bc:e2:f2:a1:2d:91:cc:66:1c:d1:2a:b7:62:
         17:4e:8a:b5:47:3b:05:d1:72:26:8d:21:64:6a:2a:12:fb:88:
         51:3a:5f:b5:f8:f1:dc:2e:73:63:c1:85:38:7d:a3:9d:8c:27:
         4d:75:14:a4:a8:18:33:31:94:02:b4:fa:6b:61:9b:52:4b:d9:
         55:39:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:01:08 2026 by rpki-client