Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          mb8HdcFZzQ9dX0K+d0lZKXucvwGeDr6sVAgJi7dy4yI=
Subject key identifier:   40:3A:BC:99:A1:77:17:FC:A5:C1:F9:CB:73:14:0C:5F:0E:BA:77:D1
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       019E322A154D41EB2DD1E933752B1E8E958E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 19:01:19 +0000
Manifest this update:     Sat 16 May 2026 19:01:19 +0000
Manifest next update:     Sun 17 May 2026 19:01:19 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: pn3rSH0kir7MUmzBmcLzS4crWDaDhoIQeRDwhC/vHlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:2a:15:4d:41:eb:2d:d1:e9:33:75:2b:1e:8e:95:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: May 16 19:01:19 2026 GMT
            Not After : May 17 19:01:19 2026 GMT
        Subject: CN=403abc99a17717fca5c1f9cb73140c5f0eba77d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:2f:86:0c:75:3a:6a:f9:8a:e4:28:0c:64:
                    ba:6e:b9:ca:d5:b1:6d:2b:43:73:22:df:63:9d:a2:
                    7d:90:89:17:50:5b:6b:dd:fd:af:ae:ad:46:a2:fc:
                    62:b1:61:d5:38:fd:1b:1a:ed:1a:fe:f2:ce:85:28:
                    82:8a:de:9c:78:ed:a5:8c:ef:73:d8:0c:cb:d4:9e:
                    f2:f1:11:39:43:18:92:87:29:75:4e:4b:48:eb:bf:
                    5f:4b:38:e2:90:2b:62:df:56:86:87:0b:1a:d0:ce:
                    82:7d:14:20:cf:1e:c3:66:ac:c3:a6:d6:6b:cb:b7:
                    7d:5d:06:9f:a7:27:28:41:a5:4e:e1:5a:f2:bf:b4:
                    61:a3:cc:ac:3e:10:9f:4e:20:5a:29:2c:bb:28:2a:
                    ed:20:03:3d:3f:90:b3:dd:b2:73:12:d4:26:17:3f:
                    ad:6b:17:03:14:4d:6f:99:ac:90:19:84:b9:43:2b:
                    e7:92:ef:32:b3:d0:4c:9d:bf:04:f1:97:92:a3:8f:
                    58:73:66:38:fc:21:52:ec:84:ba:63:b0:41:f9:46:
                    ac:55:fe:68:de:11:33:8e:0d:6e:1a:a7:36:7f:8a:
                    eb:84:f0:9a:1f:76:55:54:56:3d:91:e0:82:25:31:
                    1d:f5:0e:74:24:ce:b7:e0:c4:d2:0f:0d:1d:0a:f6:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3A:BC:99:A1:77:17:FC:A5:C1:F9:CB:73:14:0C:5F:0E:BA:77:D1
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:66:a2:17:9c:45:40:c1:74:34:20:83:6a:54:1c:64:cb:52:
         83:20:93:99:ad:b6:12:d3:99:a9:f0:c3:e3:11:0d:2a:94:20:
         62:72:7c:a4:33:02:92:d2:55:09:a0:f7:ee:77:43:72:f1:c2:
         7a:98:77:33:98:4e:7c:67:96:22:68:e8:8e:e4:46:2b:c7:72:
         95:35:d2:33:49:7d:79:42:a4:ec:64:a5:be:4b:e3:1a:6a:4d:
         32:c5:4e:0a:7a:46:7a:ce:69:cb:26:f0:65:6a:d3:85:03:57:
         c1:86:e1:62:bd:ad:9d:30:31:54:01:bf:15:aa:ce:a1:42:7e:
         87:88:0b:ff:c6:e1:30:9d:d9:5d:02:3d:68:ce:89:31:cf:92:
         a2:ba:ce:60:87:39:b3:a2:15:2c:2d:2c:33:44:67:6c:eb:62:
         97:c4:6a:3d:3c:7b:8e:95:46:5a:09:58:88:5d:c9:3e:05:0a:
         54:42:cb:94:ab:e7:2a:d6:a8:67:73:58:69:71:6b:fc:32:a6:
         5d:13:5f:0d:fa:5a:4a:95:68:66:6f:2b:92:21:47:b8:77:88:
         61:f6:35:6f:da:87:70:88:63:74:56:24:7d:78:e9:5a:d1:28:
         d5:c5:ef:ea:ec:01:79:66:fe:5b:7a:99:b6:07:34:90:05:af:
         73:5d:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:50 2026 by rpki-client