Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File:                     3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier:          wtl/OhXb2RBcR/2n+kI3hE/Xnk9W9RCy7CrIXVq0Ou0=
Subject key identifier:   B4:A0:99:A9:B2:E6:EA:51:BE:8E:20:36:96:B1:53:92:DE:31:94:61
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer:       /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial:       019FDE07C890178120D7564055635D8475C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number:          0110
Signing time:             Fri 07 Aug 2026 21:01:19 +0000
Manifest this update:     Fri 07 Aug 2026 21:01:19 +0000
Manifest next update:     Sat 08 Aug 2026 21:01:19 +0000
Files and hashes:         1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: RtL87DNcgTBaKJAULaUxJXRc1Y2sdCL6CTPI2eGnzyk=)
                          2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:de:07:c8:90:17:81:20:d7:56:40:55:63:5d:84:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
        Validity
            Not Before: Aug  7 21:01:19 2026 GMT
            Not After : Aug  8 21:01:19 2026 GMT
        Subject: CN=b4a099a9b2e6ea51be8e203696b15392de319461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:c9:d1:0e:a3:f5:b8:54:55:49:ad:ea:e8:
                    c7:b3:c4:b6:6c:06:f3:2a:15:7e:f4:4a:ad:2d:80:
                    4a:46:13:9d:ee:f9:87:8b:89:34:1f:49:11:6f:56:
                    b1:76:24:1d:9a:ee:5d:04:1e:1c:a1:45:57:d2:61:
                    89:da:be:68:c9:a7:06:d3:d1:89:b9:5a:23:e7:1e:
                    55:d8:ca:c9:e2:d2:98:0b:f0:2f:9c:4c:fb:d7:e2:
                    99:45:35:f6:ff:de:7f:45:58:e4:2d:da:71:a1:dc:
                    14:b3:b2:ee:c0:30:97:f2:d7:ff:20:fa:14:33:a4:
                    34:03:c8:1e:a8:a7:71:d0:0e:13:eb:91:71:5c:b6:
                    c2:69:04:2e:6b:8d:7c:5d:00:3f:77:c4:79:67:50:
                    e8:8f:23:3c:fa:09:d7:0c:83:64:ab:10:f8:e0:aa:
                    6a:1d:7d:f7:e0:3f:2c:eb:c8:12:a6:eb:18:d7:2b:
                    db:91:db:2a:9d:69:9d:9f:d2:02:e0:3e:44:37:00:
                    4a:38:52:fb:ba:13:18:34:e6:5b:13:e2:33:3a:32:
                    5b:03:02:0d:f7:ce:0b:cf:c0:40:39:7e:f3:f8:7f:
                    8b:ad:c9:76:f0:12:44:12:83:77:10:7f:9c:14:f1:
                    b9:9e:9b:8c:12:20:ec:ba:49:8d:05:60:b8:e5:3d:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:99:A9:B2:E6:EA:51:BE:8E:20:36:96:B1:53:92:DE:31:94:61
            X509v3 Authority Key Identifier:
                keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:72:7b:4a:e6:83:4b:09:01:de:b3:2a:bb:05:32:2e:4a:
         0f:05:d2:de:26:f8:b2:30:f1:b3:5e:d2:da:dc:ed:50:ef:95:
         09:69:9f:4c:0a:c9:32:c1:a9:ea:ba:66:fb:a0:b6:09:64:74:
         04:56:49:25:46:d9:a3:0c:97:b4:ef:73:4e:5a:21:dd:11:e2:
         65:27:f6:e4:26:b5:a8:48:17:d7:bc:b6:f9:c6:2a:42:08:39:
         a6:07:d7:0e:c0:13:ae:65:ca:41:5a:e2:0e:b6:8a:ec:9b:04:
         0f:dc:8b:a9:b9:5a:43:e3:89:f9:92:06:5e:3c:02:c6:4f:23:
         dc:80:4a:4f:71:93:34:c5:3b:c9:25:ef:b7:da:8f:2c:2e:1b:
         e4:2d:39:ca:3b:5f:28:ea:7c:00:e8:64:e7:bd:97:2d:b3:b2:
         e1:c1:d2:2a:dd:6e:4a:f5:3a:13:84:99:ca:83:17:79:f6:ed:
         12:fc:ef:c9:4c:67:f6:ca:7f:e8:a3:0d:71:e2:3d:24:cd:98:
         d0:a2:7c:54:59:80:1e:0e:ee:52:b7:0d:a1:4f:54:73:37:45:
         2e:d2:1e:20:90:7c:aa:a2:a5:1e:00:7c:28:9c:0b:ba:69:bd:
         42:7d:6c:60:2e:34:db:85:f2:e1:3c:66:2a:b6:3a:1f:41:99:
         4f:ec:1a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:20:48 2026 by rpki-client