Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File:                     3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier:          9a/WJJNOxgJzKEySX9a5RMGPAi+58j4Mza8GzL04wAI=
Subject key identifier:   5C:3C:85:82:02:67:C5:6C:3A:70:F2:C9:85:15:64:09:92:91:F6:52
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer:       /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial:       019EF649698812576CCFC9576AE4862FF9A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number:          98
Signing time:             Tue 23 Jun 2026 21:01:06 +0000
Manifest this update:     Tue 23 Jun 2026 21:01:06 +0000
Manifest next update:     Wed 24 Jun 2026 21:01:06 +0000
Files and hashes:         1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: oLG1h+EerIp3ZZTMHIs+E/aTTbIsRHVma34lyAmq+zI=)
                          2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 19:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f6:49:69:88:12:57:6c:cf:c9:57:6a:e4:86:2f:f9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
        Validity
            Not Before: Jun 23 21:01:06 2026 GMT
            Not After : Jun 24 21:01:06 2026 GMT
        Subject: CN=5c3c85820267c56c3a70f2c9851564099291f652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:ca:8a:bc:52:be:c6:f6:6c:ad:e7:2a:c3:
                    c7:1b:b0:19:d0:1e:94:58:b2:54:5e:2b:90:61:b7:
                    c2:36:f4:ca:53:68:d3:2f:6d:66:e6:59:b7:aa:69:
                    01:dc:cc:de:20:25:1c:b8:76:ab:e8:82:85:a0:4c:
                    ff:ff:5e:b1:7f:2e:14:b2:15:27:12:c7:bf:10:85:
                    6a:f2:71:14:f9:25:54:c1:a5:d5:e7:a9:35:f9:ae:
                    69:27:72:f1:e2:63:09:9b:75:43:b6:cd:c4:a4:2d:
                    cc:11:40:6e:0d:84:8f:8f:52:d3:a3:de:9b:98:f1:
                    c3:1a:ad:4f:bc:ab:75:57:46:31:fd:3a:45:14:6d:
                    89:eb:14:d2:08:03:ec:b9:6f:b2:b8:cd:7f:54:b9:
                    46:41:c2:be:16:14:36:73:92:37:3c:c9:1f:3c:c3:
                    8f:2b:c1:d2:f4:c8:60:f7:fb:b8:d7:b3:95:9f:1f:
                    03:f0:32:a2:48:f4:15:6f:c4:3e:50:9f:0c:86:39:
                    4d:5e:c0:2a:da:c2:f8:8f:15:39:af:cf:bf:8f:f3:
                    01:0a:32:76:8b:a4:ff:37:b1:c2:1b:20:d8:aa:48:
                    c8:1c:fb:c8:a3:04:64:86:11:5e:b1:eb:c7:19:09:
                    be:c9:45:10:23:6d:f9:18:d9:b6:c8:be:c6:3a:7a:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3C:85:82:02:67:C5:6C:3A:70:F2:C9:85:15:64:09:92:91:F6:52
            X509v3 Authority Key Identifier:
                keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:43:1f:4f:93:b3:8b:3a:be:66:ff:4b:52:6c:af:f1:35:ce:
         38:0e:76:81:3c:95:b8:3c:db:78:5e:f0:06:10:62:84:26:8d:
         66:66:70:0e:92:a4:03:b7:70:bf:48:ff:85:89:8c:b2:cc:da:
         35:21:33:f1:2e:81:74:a7:da:75:e6:0c:de:a7:bc:6f:70:98:
         09:8b:45:bf:91:e6:ad:9c:31:63:01:e2:ba:40:56:15:f0:34:
         87:4d:8c:2a:91:74:0b:eb:10:be:3b:04:bf:10:3c:74:ef:82:
         8c:e4:d2:c9:3b:3f:1f:16:32:da:40:7b:f7:49:dd:47:e5:c2:
         26:90:de:a3:c5:05:2a:f2:56:9f:2c:c8:7b:96:27:eb:16:30:
         9d:04:20:f0:35:12:e3:5b:ab:84:8d:bb:04:ee:9e:97:49:ce:
         81:51:f6:8c:93:2b:e6:df:6a:42:de:2f:27:06:c6:b7:c3:46:
         da:d5:c4:19:db:13:e5:62:b1:db:c9:cd:c7:9e:eb:8d:77:9f:
         be:9b:db:0c:ff:a2:63:0f:48:3e:53:d2:0b:43:71:dd:3a:f4:
         43:2c:13:cf:4d:46:b0:cc:21:f1:99:d5:23:a6:99:cd:78:71:
         d3:a2:3f:ea:54:d3:ca:aa:fb:06:35:c5:3a:6a:3a:e8:b2:53:
         a0:e1:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:30:03 2026 by rpki-client