Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File:                     3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier:          JCiG3WHYm04VaBKP7dyXtbuVIy9YXxkerDNpHeSoMxQ=
Subject key identifier:   E8:8E:33:0C:79:B8:C9:FE:BE:2F:FB:19:37:B3:7A:4C:12:C1:01:23
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer:       /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial:       019E30E0F83BFB80F7050CEBABE53B5EECA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:01:50 +0000
Manifest this update:     Sat 16 May 2026 13:01:50 +0000
Manifest next update:     Sun 17 May 2026 13:01:50 +0000
Files and hashes:         1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: e8B7O7U6ufPtc9L86mlkO+2sKQy2rD/EOyMLaloYrUs=)
                          2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:f8:3b:fb:80:f7:05:0c:eb:ab:e5:3b:5e:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
        Validity
            Not Before: May 16 13:01:50 2026 GMT
            Not After : May 17 13:01:50 2026 GMT
        Subject: CN=e88e330c79b8c9febe2ffb1937b37a4c12c10123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:99:b4:c1:25:a2:c4:18:e5:5e:e9:4c:c7:
                    cb:ce:ba:10:5b:ad:33:81:9b:bb:a7:92:5e:87:4a:
                    6b:7d:18:04:99:ee:fe:b3:a0:3a:bc:e3:bf:5e:6d:
                    b2:e0:ad:6e:7a:23:b6:a8:1a:5b:30:6c:55:24:f2:
                    1d:73:54:b7:a4:53:f7:31:d5:e6:93:3f:14:5f:ab:
                    89:82:89:45:d8:ef:9c:7c:65:78:69:c4:f6:51:ef:
                    ae:9f:c4:54:47:69:75:c9:44:6a:7a:04:27:37:91:
                    50:74:5e:f4:81:28:7f:90:6a:1c:ee:c1:62:eb:19:
                    9f:d8:e7:42:da:09:f7:d2:37:3e:05:64:28:88:91:
                    43:20:00:b8:4d:c1:cf:87:c9:fd:36:eb:59:fe:ec:
                    98:55:59:66:68:0a:9c:98:06:44:ec:ef:5d:f6:a0:
                    7c:23:a2:02:41:54:2f:ae:fc:3b:fa:1b:6d:2a:e9:
                    76:d3:f8:bb:94:de:94:cd:a3:fb:3f:b1:81:fc:89:
                    54:72:9a:4d:5f:be:34:60:52:ee:10:9e:63:ca:7d:
                    02:71:16:9f:96:7b:a1:a9:83:1f:7d:6c:e9:1e:a3:
                    7e:76:58:08:fc:d4:d5:8b:cb:07:43:55:37:f2:17:
                    a4:cb:2f:7b:3d:86:a2:9f:22:42:20:c8:4e:58:04:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8E:33:0C:79:B8:C9:FE:BE:2F:FB:19:37:B3:7A:4C:12:C1:01:23
            X509v3 Authority Key Identifier:
                keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:16:80:fc:fc:9e:c1:1e:c0:6b:2e:4d:46:d7:0e:97:03:
         50:2d:3d:ed:59:30:b6:da:f6:1f:f0:98:2f:dd:bc:31:3d:5c:
         70:f6:32:45:06:63:0b:fb:53:b9:b9:72:22:d2:1f:71:2c:88:
         e2:9c:e7:f5:f0:a7:a7:ac:76:ce:c6:f7:4b:da:b9:0d:aa:79:
         13:6c:fd:07:11:86:20:25:f2:2a:9a:d1:82:c1:01:59:8b:3e:
         1b:0f:b5:cd:17:34:26:d8:3d:ed:93:78:99:60:79:2a:ff:91:
         a2:1e:01:71:f4:11:7c:b4:e2:d3:1f:fb:43:bb:97:b7:51:0b:
         7a:3f:2a:0f:67:f7:11:e6:4a:57:d3:81:99:24:56:0c:71:9a:
         cb:8f:39:da:f7:8d:45:b4:18:c3:26:3f:d7:04:b4:cc:0b:23:
         a2:7f:e2:6a:d5:5a:ea:66:f6:c5:4e:3f:89:6e:51:16:17:16:
         66:26:80:ec:a7:5a:e8:41:26:87:bd:02:a1:33:6c:5d:1c:0d:
         1d:99:c5:54:9f:8c:e4:c9:24:72:bb:11:a2:dd:b9:d4:dd:7d:
         ec:b9:ec:6b:63:f2:fa:bb:4d:ec:09:30:c6:8f:28:b8:d8:48:
         fa:be:1c:2c:b7:22:6c:ed:03:dc:20:88:66:02:c2:e6:8c:6d:
         2a:4d:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:44 2026 by rpki-client