Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          a0IeOABKcWsv7w+SBjzYo01mXLYHxbim3sAgUEnIdY4=
Subject key identifier:   DF:4A:DF:61:E9:69:61:3E:7F:DD:5A:FA:4B:1F:99:F3:D8:17:C0:BC
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       019E295DB85538D8CFB49A1E356CE8677B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          1910
Signing time:             Fri 15 May 2026 02:01:08 +0000
Manifest this update:     Fri 15 May 2026 02:01:08 +0000
Manifest next update:     Sat 16 May 2026 02:01:08 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: GHZHM6SDjzT0X/0rXaKSkw0GelTv8q6U2qVQAwsNARw=)
                          2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
                          3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
                          4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
                          5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
                          6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
                          7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
                          8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:b8:55:38:d8:cf:b4:9a:1e:35:6c:e8:67:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: May 15 02:01:08 2026 GMT
            Not After : May 16 02:01:08 2026 GMT
        Subject: CN=df4adf61e969613e7fdd5afa4b1f99f3d817c0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:6b:13:c1:38:f7:fd:79:ff:6d:72:b7:05:
                    ce:79:ec:d2:43:0c:a1:d7:8c:73:b2:77:b2:ac:d7:
                    b9:90:ea:b3:1e:e8:45:80:39:fd:92:3b:1d:89:1e:
                    d7:27:ec:ed:bf:d9:d4:b2:d8:86:cf:fe:92:ed:e5:
                    6f:55:d7:3c:b4:3e:b4:6a:29:9c:43:02:c9:b0:46:
                    7a:88:b5:30:63:d0:30:2b:a3:08:ee:ed:73:89:b9:
                    08:72:a0:e7:65:46:5a:51:b8:c2:ca:0c:16:d5:68:
                    c8:d9:60:9d:ea:7c:5d:04:80:c0:0a:85:e9:01:56:
                    ec:61:89:a1:f1:dd:16:64:94:6b:36:f4:c3:be:56:
                    ee:f8:f2:d7:36:ab:d4:d1:5c:29:14:db:21:82:f4:
                    bf:a3:40:9c:72:e9:b8:fe:37:b1:35:9b:a5:8e:c6:
                    49:c1:69:0d:81:46:4d:cc:41:ae:59:3f:cd:30:11:
                    de:87:08:29:93:54:5b:8b:6e:2f:da:54:8b:42:e4:
                    d2:09:61:97:eb:3c:c6:f3:68:a3:93:a8:b9:b1:14:
                    d2:71:4b:b8:92:b8:62:70:00:f9:25:e8:9c:88:98:
                    7e:b3:e3:98:b2:5f:15:b5:54:e6:51:98:52:78:f2:
                    b2:91:9a:c6:3b:1d:d8:62:bf:67:42:13:e0:83:86:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4A:DF:61:E9:69:61:3E:7F:DD:5A:FA:4B:1F:99:F3:D8:17:C0:BC
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a2:57:5e:b3:8c:30:c5:87:54:75:14:30:42:3d:57:e9:a8:
         c8:0d:22:8a:e1:27:d3:a1:ef:03:2f:f3:35:d4:c2:d4:90:a5:
         ad:1e:86:bd:45:07:76:96:f2:58:fa:5d:3c:77:01:49:68:e4:
         f9:7e:80:c0:c1:91:14:a6:86:ba:b6:7c:1c:ca:98:d1:15:c8:
         7e:cb:7e:f4:ee:5f:27:8d:92:27:d4:58:d6:52:f1:48:ee:c1:
         8a:9e:b3:76:3c:3d:e8:42:50:92:3c:d3:6b:b4:67:19:07:88:
         98:9c:24:5e:67:8d:f6:49:82:31:bd:bf:11:38:0f:d2:ea:53:
         dc:e1:e2:72:ed:2e:c2:db:c3:73:a0:6a:0e:15:22:2b:52:6f:
         73:7a:24:db:f9:fd:d7:3e:0a:b6:d8:94:31:2a:a0:33:dc:f1:
         a6:7e:46:b8:12:ae:c8:fb:bb:a1:20:16:42:fe:1c:a2:5e:e7:
         70:9e:33:5f:13:bc:85:0b:0c:3f:14:64:12:24:62:4d:f3:40:
         c1:e1:c0:02:78:fb:74:3d:fd:3e:8f:70:e5:72:b3:d9:97:e8:
         1a:60:ed:a3:40:7b:f1:32:78:24:7a:7e:c3:eb:63:0a:55:15:
         47:3a:b5:1b:a4:63:28:b8:e2:87:b5:eb:a6:1e:9b:ee:5c:31:
         31:b9:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:55 2026 by rpki-client