Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
File:                     dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json)
Hash identifier:          6efpHZx0OwDt3nVPXi7gz3QdybtoiP1INCRyTurusIg=
Subject key identifier:   3E:24:EF:35:3E:51:FD:27:E8:9B:E2:8C:D3:33:55:94:D1:C3:7F:2A
Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0
Certificate issuer:       /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
Certificate serial:       019E8FB7D89CF9E8D595771AC0FD0AE45B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
Manifest number:          01B9
Signing time:             Wed 03 Jun 2026 23:00:50 +0000
Manifest this update:     Wed 03 Jun 2026 23:00:50 +0000
Manifest next update:     Thu 04 Jun 2026 23:00:50 +0000
Files and hashes:         1: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: SDxw2FONRMXEE+j9DdWUun3D1ZPlyJSL1ezIfPd9BC0=)
                          2: xtgzbsY4RQgAHqGjGSJ0iMYk8Y4.roa (hash: z72ZDa/NMuWUT8gblQL7edLWi92ZNQzGqAeFXRe+TZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:b7:d8:9c:f9:e8:d5:95:77:1a:c0:fd:0a:e4:5b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0
        Validity
            Not Before: Jun  3 23:00:50 2026 GMT
            Not After : Jun  4 23:00:50 2026 GMT
        Subject: CN=3e24ef353e51fd27e89be28cd3335594d1c37f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:b3:92:4c:6e:c7:65:72:a2:67:eb:8d:7c:
                    92:0f:7d:b2:17:dd:f5:e4:e2:5d:16:54:f6:b0:68:
                    e6:b4:5b:f7:91:09:c3:8a:4b:21:2d:39:6e:5c:49:
                    8a:90:3c:07:21:96:cb:ac:d8:ec:05:b0:f4:8d:56:
                    0f:66:18:0d:da:a3:ce:2b:54:b2:6c:e0:49:a5:64:
                    5a:c1:a2:f6:6e:e4:2b:ba:f3:d5:79:b4:b2:98:56:
                    29:7b:9a:67:d4:03:e2:47:f7:38:22:58:e7:13:bf:
                    92:1e:4b:0d:d3:98:43:70:94:16:70:31:08:2a:88:
                    d9:b9:7d:77:57:de:56:50:1e:c6:80:6d:3d:2d:41:
                    70:b3:93:a7:37:4f:02:18:f0:4b:b8:d5:b0:30:7f:
                    ee:5d:e8:a1:36:de:6f:d0:0f:2a:5f:5b:6f:b9:57:
                    46:28:c3:55:6b:e8:a5:43:bb:18:a9:d9:70:21:d8:
                    77:82:4c:6f:98:c9:ba:c1:7d:e4:12:9a:53:44:82:
                    78:ce:5c:c6:5c:89:92:fe:1c:e1:95:28:ee:ef:8a:
                    b6:a8:6f:77:27:63:59:cd:49:fb:50:25:a6:06:7d:
                    f4:eb:45:8a:99:bd:53:0f:b1:23:9e:b2:d9:06:47:
                    51:c5:b8:76:8c:7d:ab:14:41:a8:3a:d7:5f:54:df:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:EF:35:3E:51:FD:27:E8:9B:E2:8C:D3:33:55:94:D1:C3:7F:2A
            X509v3 Authority Key Identifier:
                keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:06:d1:70:56:04:b3:01:fc:8a:9e:f9:49:be:09:9e:86:
         77:59:db:d5:28:77:0d:f5:e6:ed:3d:e7:e5:6f:58:da:d4:02:
         1b:a0:09:aa:eb:2a:85:57:17:92:02:7e:7f:6f:f3:82:ae:66:
         35:58:78:d3:e5:33:1c:6f:f1:16:a6:c9:86:b4:e3:77:20:ac:
         31:2d:4c:e9:3e:36:97:7f:2a:f5:49:ef:ef:20:e4:4b:ef:a5:
         01:ae:24:71:cb:79:1d:39:cf:62:cb:96:d0:51:e0:25:fa:b6:
         1e:d3:2b:d4:f0:ed:4a:38:f7:67:3c:ce:98:22:0d:84:06:7e:
         3c:a9:3f:97:3d:05:a4:85:93:c0:63:94:f6:54:26:d0:9f:4b:
         51:ff:0e:94:79:ab:e6:29:50:96:5a:42:83:04:b3:da:f5:77:
         91:01:76:70:2a:69:5d:cc:6e:0c:21:a4:95:29:50:de:0d:7a:
         b5:f3:ae:c4:65:81:a2:69:7a:4c:8d:db:ce:9b:83:a3:a3:2b:
         88:7a:b3:e8:8e:85:a8:d1:e1:ce:ed:7b:ad:d1:e6:78:75:1b:
         bc:25:67:e5:89:21:99:32:40:67:cb:1f:c9:d1:cf:6b:99:17:
         a0:6e:e7:dc:67:9b:3b:ce:11:7e:6b:38:c7:ff:4e:d0:ce:82:
         f3:ca:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:58:32 2026 by rpki-client