Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File:                     3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier:          4Z+fMMaluD7+A6pVhGanKedP0mA3t44tb32GgKw4Yv0=
Subject key identifier:   B7:B7:17:3B:A7:9B:93:4F:57:F4:6E:74:90:16:E4:A2:8B:D0:FA:52
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       019DA78C720EF4C05A5B298806EE381EF0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number:          14C2
Signing time:             Sun 19 Apr 2026 21:01:32 +0000
Manifest this update:     Sun 19 Apr 2026 21:01:32 +0000
Manifest next update:     Mon 20 Apr 2026 21:01:32 +0000
Files and hashes:         1: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (hash: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE=)
                          2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: drG9ng85vs1vDmCjNJYIjYNmHJ+rMHjFMnkLYULXsc4=)
                          3: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (hash: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo=)
                          4: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (hash: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ=)
                          5: Ki5lgptZeKqxkVY1rSUS3fFpdNo.roa (hash: wCDh26IbseWW9odw6/4vFdpDTBtddnVSe0afNNR63xE=)
                          6: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (hash: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8=)
                          7: XcFzjI2uuV84oN4qh53dtgVk0G4.roa (hash: vDuNqlBbw47k7/TAAtk4TmMaBj19DDFnRfvi0NtLZ1E=)
                          8: XjB8pSYFTRWu3aeuPZfoCPdtSU8.roa (hash: clM1FhXerIaxDZVMbA4484QAmARB0GCCeaDtZ15BS4A=)
                          9: _CwOTtU3okI82pLwtmx5rCYmqBw.roa (hash: mdVcgR96055cvSGaX98e3jUXv5Q46o7z7n7mSva9LM8=)
                          10: eWht4CqsRozCLydJERnRuTN-Adw.roa (hash: rBx2jxtcduhOc94/W12cQD59jQKweQjaDhzj2mHD0e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:8c:72:0e:f4:c0:5a:5b:29:88:06:ee:38:1e:f0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: Apr 19 21:01:32 2026 GMT
            Not After : Apr 20 21:01:32 2026 GMT
        Subject: CN=b7b7173ba79b934f57f46e749016e4a28bd0fa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:2a:9e:dc:f9:ba:59:86:38:ef:6a:94:dd:
                    df:c2:50:7c:9e:8d:f9:fc:0d:27:a5:98:9d:8b:2a:
                    b5:28:d8:1d:39:9f:f6:b2:ee:5e:a9:e9:bb:b4:dd:
                    46:de:7e:9b:da:e8:00:1c:9b:51:04:9e:d3:07:81:
                    ab:a6:67:24:2f:1b:ae:75:65:c7:14:1b:47:9b:66:
                    19:d3:d8:b3:fb:b2:81:75:5b:ec:0a:33:4b:a0:11:
                    cf:5c:07:47:55:42:6a:0f:d7:73:12:f5:5a:19:4f:
                    63:da:ee:79:3e:c5:01:73:5b:6f:0e:33:70:80:3a:
                    58:e0:6d:25:17:b2:4a:b4:20:d3:fa:6a:42:97:23:
                    4f:e0:b7:b8:74:f8:76:0b:9b:ee:61:7c:15:28:15:
                    c9:d0:5f:ca:84:ad:53:eb:9c:e8:36:43:55:3e:ef:
                    c6:1d:ac:49:cc:b0:2d:10:f7:15:1e:80:f0:d0:bd:
                    28:ab:94:4c:5d:9f:62:80:93:2f:5e:02:70:d7:53:
                    55:72:ef:06:5e:bc:f0:22:1b:52:51:d4:73:b4:5e:
                    69:84:08:b4:c1:0a:1d:ad:5c:62:da:a4:d6:23:dd:
                    df:d5:26:2e:0f:96:9a:ee:fa:2a:6a:18:09:64:5a:
                    2b:cf:da:2c:40:d9:d0:a3:20:df:43:dc:75:fd:22:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:17:3B:A7:9B:93:4F:57:F4:6E:74:90:16:E4:A2:8B:D0:FA:52
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:3c:1b:96:a7:18:fe:51:a5:20:74:26:79:ce:cc:08:9d:
         ab:c1:5d:05:ef:cd:cb:5a:5d:e6:37:6f:ed:cf:cf:d7:7f:72:
         65:cd:e6:f7:e6:89:bd:60:e4:95:9e:f6:2c:7d:ec:a1:08:34:
         f0:82:cd:dc:5a:0d:7c:bd:78:59:2c:27:84:3b:36:7c:77:c8:
         39:39:f7:49:3a:97:8a:6a:73:fc:ca:d7:87:26:3a:3c:73:35:
         5f:aa:49:3d:93:8d:b5:9c:7a:43:a9:69:bb:52:4c:d4:02:fc:
         7c:e2:e4:c6:80:32:43:a9:67:a8:fa:53:2b:73:ae:7a:fe:ca:
         50:62:0a:60:bb:b7:a3:c5:33:15:3f:3f:5c:27:7a:7d:f4:cc:
         27:6f:ef:5e:6a:ae:05:0f:3b:81:00:43:15:1b:08:8a:23:dd:
         be:68:ce:f3:d8:5e:59:fc:0c:9e:71:48:f5:32:00:90:26:95:
         5b:bf:02:e0:d8:85:8b:d3:81:3a:46:63:3a:ed:38:de:22:d6:
         24:37:57:93:48:4a:08:69:fd:6e:31:ee:6b:b3:e1:3b:96:33:
         cd:99:92:a9:25:c9:d3:fd:be:45:25:8a:48:69:fc:12:0c:28:
         c4:af:df:5d:24:18:5d:43:6c:88:e3:d7:a9:2e:27:be:aa:8a:
         1e:d3:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:36 2026 by rpki-client