Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          Q61jA9OLvZNsP/nkxTBjlmJvGnoFPv3LO9/iznxgIxI=
Subject key identifier:   84:96:38:9B:5E:4F:D0:3E:89:D5:09:4D:BF:32:95:62:27:4D:9A:98
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       019E31174DF1227857989EA67851BCA65AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0988
Signing time:             Sat 16 May 2026 14:01:11 +0000
Manifest this update:     Sat 16 May 2026 14:01:11 +0000
Manifest next update:     Sun 17 May 2026 14:01:11 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: C40d8/1u5IexT41dr1wV/p3h+mVgmlcC6TJEQ7nMab4=)
                          2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:4d:f1:22:78:57:98:9e:a6:78:51:bc:a6:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: May 16 14:01:11 2026 GMT
            Not After : May 17 14:01:11 2026 GMT
        Subject: CN=8496389b5e4fd03e89d5094dbf329562274d9a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:a8:c7:4e:38:aa:8e:5e:46:8e:e5:27:79:
                    a7:1d:ec:e3:17:ce:53:3c:31:e5:8b:f3:f3:bc:4e:
                    e7:9e:53:aa:ba:5c:83:20:7c:0e:91:5a:12:9d:a4:
                    b7:df:d3:ba:aa:98:2c:10:f5:1f:c9:50:27:a6:bf:
                    08:58:4f:25:8f:e0:a4:06:05:61:db:0c:74:df:f7:
                    fd:dd:75:31:21:ec:a3:88:a2:c6:a8:48:6a:3a:50:
                    0e:dc:1e:49:eb:ac:81:49:05:d9:af:fe:00:49:71:
                    95:1c:7e:4a:0c:42:63:7e:42:27:ee:2b:68:04:3c:
                    78:54:47:5c:89:c4:9e:79:96:2a:45:dd:4c:f8:46:
                    fb:f6:21:f2:31:d9:72:67:2b:70:02:51:2e:c6:c0:
                    f7:62:23:f3:b4:01:48:d5:07:c0:de:3a:39:11:36:
                    51:3e:eb:b5:ea:d9:4b:86:e0:fb:9a:b4:ab:08:2c:
                    b6:3c:3b:cb:70:87:73:ab:c6:b4:7b:f0:3b:20:1c:
                    eb:b3:11:72:18:85:75:45:3d:0d:a3:2a:0d:ac:5c:
                    83:4d:32:83:4f:96:e2:0c:16:d3:12:40:9f:c0:22:
                    b9:4c:f0:66:d5:e7:56:ea:cc:40:71:0b:d5:74:60:
                    e0:d2:e5:1a:7c:55:da:58:c1:54:3b:4a:7c:4d:23:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:96:38:9B:5E:4F:D0:3E:89:D5:09:4D:BF:32:95:62:27:4D:9A:98
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:52:9a:42:7f:4f:57:53:35:a9:33:78:56:73:c0:cf:0f:
         11:69:77:6f:4e:6f:07:38:83:59:9f:70:f5:62:36:d3:f7:ef:
         0a:4c:e4:b0:2d:a9:71:9f:2d:c3:e4:13:ae:9e:08:82:92:5b:
         7b:39:b5:18:da:f4:c0:14:02:53:93:ab:33:f1:63:ab:3b:9d:
         25:5b:da:d3:ed:b0:e4:6c:94:c6:6c:7c:27:7d:ca:4e:0d:d2:
         ef:9f:ce:e2:6e:7d:01:9f:5b:9d:30:2b:54:b6:19:2f:31:8b:
         f0:4c:df:86:4b:08:ae:20:e9:62:0e:83:ea:c8:73:30:79:eb:
         a3:45:33:94:b4:27:5d:62:0a:66:d3:02:4e:83:78:96:76:79:
         38:5c:c6:b3:09:e5:e2:bb:cf:4a:a9:7b:0a:b9:13:c4:d2:66:
         e7:fe:3c:89:11:e0:0a:13:83:37:43:56:1a:6d:6a:4e:b2:74:
         f9:1f:5a:93:e5:3a:06:1f:17:96:a6:d8:ab:e0:ec:50:05:92:
         cb:5a:8b:b0:e3:42:89:b0:38:7b:80:c3:49:37:43:58:1e:2b:
         63:e2:f3:bc:72:43:65:0e:0a:f8:e9:89:72:37:a5:06:91:f7:
         9e:2a:b4:04:3a:5b:b9:cc:16:d3:f8:6e:50:07:d4:c6:14:cc:
         08:b4:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:44 2026 by rpki-client