Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File:                     3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier:          O7PWZTof2V046abp1gOo5T9x5bUKHFcEbxWENUDhqUI=
Subject key identifier:   4E:67:B2:C6:94:6B:78:9E:D1:7E:16:78:5E:90:6B:6D:63:5E:D6:DA
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer:       /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial:       019E30E059B3FDD36CE73B2048953BA5FACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number:          05B8
Signing time:             Sat 16 May 2026 13:01:09 +0000
Manifest this update:     Sat 16 May 2026 13:01:09 +0000
Manifest next update:     Sun 17 May 2026 13:01:09 +0000
Files and hashes:         1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: RvABuPh2jSUskhIH0b9MHMaT0BueZEqA7Byy0meA0pU=)
                          2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:59:b3:fd:d3:6c:e7:3b:20:48:95:3b:a5:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
        Validity
            Not Before: May 16 13:01:09 2026 GMT
            Not After : May 17 13:01:09 2026 GMT
        Subject: CN=4e67b2c6946b789ed17e16785e906b6d635ed6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:7d:04:e0:80:57:4c:f9:bf:d3:09:2a:34:
                    05:11:d7:3e:ee:10:0d:fb:ad:85:1e:81:61:cb:8b:
                    1d:ad:b0:fd:e6:b0:ea:54:40:d1:4b:af:80:eb:2b:
                    c0:62:ac:ec:23:3d:62:62:d8:3a:4f:c0:55:d9:f5:
                    3a:14:cb:14:3b:88:b0:28:ed:4e:b8:c1:3d:c1:c0:
                    ca:f9:74:cd:ae:c2:cc:06:d7:f3:f7:a7:6b:0a:ff:
                    e1:c5:62:ee:79:ec:0d:1e:82:3b:ab:48:15:41:c2:
                    54:66:40:46:05:03:a9:4b:84:14:6c:b1:8c:6c:bf:
                    ab:f0:01:38:22:4d:6b:91:95:84:d1:7c:9b:d7:c8:
                    09:a8:7c:53:ba:04:9c:cf:f2:61:99:63:b0:fd:8d:
                    7b:8b:4c:9d:7b:b7:66:6b:44:96:a3:76:5c:df:52:
                    04:cb:46:5c:51:93:a4:5f:1d:97:05:d2:50:c9:3a:
                    20:04:4a:80:b8:ce:66:a8:60:37:d6:ac:29:52:69:
                    06:0b:d9:af:e8:f9:70:b0:2a:bf:52:eb:4e:08:fe:
                    d7:ce:4d:c9:ae:72:eb:ba:85:d5:23:58:bc:ef:02:
                    ff:3c:d3:51:c0:49:ec:31:08:a7:a9:eb:88:ee:00:
                    4c:38:f4:ec:f4:e8:a2:4e:80:46:c7:e5:54:30:27:
                    3c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:67:B2:C6:94:6B:78:9E:D1:7E:16:78:5E:90:6B:6D:63:5E:D6:DA
            X509v3 Authority Key Identifier:
                keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:d1:61:82:aa:75:18:fe:00:21:0e:f2:4a:0d:d9:2f:cc:
         21:f1:d9:d6:55:48:8b:ee:a6:24:4f:aa:06:c4:4c:a5:1f:07:
         10:2d:a9:95:86:34:85:5b:d9:6b:d7:40:cc:24:61:74:0d:a5:
         86:d0:d9:d2:85:6f:a0:1a:d0:ce:1e:65:c0:ff:ff:ef:33:99:
         e2:75:53:2e:6f:c1:57:f3:d6:fb:13:46:21:25:63:03:a8:13:
         7d:86:c5:a2:be:97:31:38:25:01:b9:72:4e:42:74:9e:34:3f:
         6e:3a:58:df:bb:84:55:7f:e0:78:3d:a6:f2:a3:8e:c2:e5:cb:
         b6:67:a1:a1:06:d4:ab:51:f1:f1:03:32:ae:e8:24:65:da:85:
         33:bb:9f:a8:b3:a1:b3:55:0e:c5:88:ac:e7:42:67:21:97:12:
         41:76:e4:db:39:64:8c:4b:a5:02:4b:ac:7a:1c:f5:b0:9d:3a:
         57:5d:3a:07:6f:3e:13:ab:c1:62:ed:04:0a:14:05:f6:4c:64:
         64:d8:58:6e:2f:84:4a:a7:68:6b:f4:93:99:e5:15:29:ce:4f:
         72:21:ba:c6:f2:ed:19:47:79:be:6d:71:e2:41:f8:31:d1:0c:
         9d:f5:cd:ac:e8:35:fa:98:fa:ac:f4:67:30:22:c4:ec:ce:26:
         d7:e0:ea:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Fmz/dNs5zsgSJU7pfrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjNmMThjNTc2ZDZmYTYwOTEzMzUzM2MwZDBlMzhkNzcz
MmM2NTIwHhcNMjYwNTE2MTMwMTA5WhcNMjYwNTE3MTMwMTA5WjAzMTEwLwYDVQQD
Eyg0ZTY3YjJjNjk0NmI3ODllZDE3ZTE2Nzg1ZTkwNmI2ZDYzNWVkNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy59BOCAV0z5v9MJKjQFEdc+7hAN
+62FHoFhy4sdrbD95rDqVEDRS6+A6yvAYqzsIz1iYtg6T8BV2fU6FMsUO4iwKO1O
uME9wcDK+XTNrsLMBtfz96drCv/hxWLueewNHoI7q0gVQcJUZkBGBQOpS4QUbLGM
bL+r8AE4Ik1rkZWE0Xyb18gJqHxTugScz/JhmWOw/Y17i0yde7dma0SWo3Zc31IE
y0ZcUZOkXx2XBdJQyTogBEqAuM5mqGA31qwpUmkGC9mv6PlwsCq/UutOCP7Xzk3J
rnLruoXVI1i87wL/PNNRwEnsMQinqeuI7gBMOPTs9OiiToBGx+VUMCc85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5nssaUa3ie0X4WeF6Qa21jXtbaMB8GA1UdIwQY
MBaAFN4j8YxXbW+mCRM1M8DQ4413MsZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTct
NWU4NjAwNmUyMGFlLzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTctNWU4NjAwNmUyMGFl
LzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST/RYYKq
dRj+ACEO8koN2S/MIfHZ1lVIi+6mJE+qBsRMpR8HEC2plYY0hVvZa9dAzCRhdA2l
htDZ0oVvoBrQzh5lwP//7zOZ4nVTLm/BV/PW+xNGISVjA6gTfYbFor6XMTglAbly
TkJ0njQ/bjpY37uEVX/geD2m8qOOwuXLtmehoQbUq1Hx8QMyrugkZdqFM7ufqLOh
s1UOxYis50JnIZcSQXbk2zlkjEulAkusehz1sJ06V106B28+E6vBYu0EChQF9kxk
ZNhYbi+ESqdoa/STmeUVKc5PciG6xvLtGUd5vm1x4kH4MdEMnfXNrOg1+pj6rPRn
MCLE7M4m1+Dq5g==
-----END CERTIFICATE-----
Generated at Sat May 16 19:32:31 2026 by rpki-client