Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
File:                     3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft (raw, json)
Hash identifier:          XJ6a4JpZS3v4p1ODQNBRvy2NC8yKRw+mXFTWgkQMeoc=
Subject key identifier:   E1:DC:FE:42:C2:65:70:44:3A:E0:0C:D2:33:F9:8E:5A:E1:97:4B:A3
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Certificate issuer:       /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial:       019F122EC2AA4812525BF9416C5CA3DC2F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
Manifest number:          18FC
Signing time:             Mon 29 Jun 2026 07:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:22 +0000
Files and hashes:         1: 3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl (hash: /sNIr/0o2DGzxvOk5DcqaqMubrWbSC3HY2tYagonxP4=)
                          2: VFigvxiioVp_z41f3Wvp6F5J9nU.asa (hash: gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:c2:aa:48:12:52:5b:f9:41:6c:5c:a3:dc:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Validity
            Not Before: Jun 29 07:01:22 2026 GMT
            Not After : Jun 30 07:01:22 2026 GMT
        Subject: CN=e1dcfe42c26570443ae00cd233f98e5ae1974ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:0b:7f:ca:ef:3f:6f:d3:c5:ff:d0:84:2c:
                    0a:44:86:33:14:bd:86:e8:2b:ae:03:16:79:31:70:
                    ae:4f:5f:46:b7:71:7d:41:29:bf:3c:bf:c4:3a:ea:
                    26:0f:b6:53:46:df:98:80:15:1f:59:99:95:d8:2b:
                    0f:b6:1c:00:5c:7d:c1:a0:f7:54:4a:f7:1a:6f:57:
                    66:ba:a1:4e:78:47:ae:ec:9e:7b:c2:73:f8:e8:40:
                    3b:c3:6e:88:4d:1b:b2:98:54:a1:d4:ff:70:2a:ca:
                    87:c3:b1:cb:31:12:16:b4:59:cd:6c:23:6f:52:01:
                    4e:90:81:15:c9:23:2d:3b:10:c6:ba:55:05:83:cd:
                    29:64:2b:57:c9:a3:a3:b1:a3:f7:18:c5:db:5c:5b:
                    df:02:b5:a4:aa:56:86:35:99:2a:09:84:60:be:01:
                    c0:86:92:41:ca:72:23:8e:43:0b:d5:a2:35:6d:7b:
                    bd:7b:87:e5:92:f4:b9:57:93:76:ef:ca:c2:1e:5c:
                    3d:a7:ca:74:4c:88:11:98:7e:9e:a8:7e:a5:21:14:
                    4e:e6:d6:4e:a8:ec:c5:70:04:d8:8c:6d:f7:e0:cc:
                    e4:0b:ee:e8:ff:59:4a:11:ab:97:b7:28:48:c1:64:
                    1b:03:33:81:42:7e:07:e3:95:09:ba:01:fb:9b:53:
                    21:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:FE:42:C2:65:70:44:3A:E0:0C:D2:33:F9:8E:5A:E1:97:4B:A3
            X509v3 Authority Key Identifier:
                keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8d:9b:38:04:f1:69:b2:b1:19:8c:4d:39:1f:7a:b5:d8:12:
         1e:ff:ae:4e:b3:00:2c:ac:c5:83:cc:77:1a:50:42:92:28:cc:
         23:10:45:c5:9e:79:d8:8c:2c:46:90:de:f3:34:84:aa:86:a8:
         5c:43:8b:25:e5:f9:70:b4:c1:2d:fb:fc:de:f8:1d:f8:1a:7c:
         90:48:d4:cb:83:ed:5b:3b:60:90:97:3a:38:dc:51:18:39:c6:
         3d:52:54:d4:f1:8d:a4:e1:3b:1f:6e:11:a9:4b:dd:16:dd:29:
         54:93:4b:5b:b8:25:06:de:78:6a:80:ff:8a:ee:ba:4b:fe:c7:
         1c:e7:8f:c2:ca:05:d6:f5:99:c7:e8:da:b1:04:b0:54:39:bc:
         1b:b7:b3:5d:1a:cc:a3:ca:fc:cd:9b:db:28:f0:77:1a:a3:f9:
         1b:c3:1c:ea:6e:dc:9f:70:f3:90:6a:d3:1f:1a:8c:4c:e0:62:
         f5:45:99:68:86:50:4b:f1:90:34:28:e9:46:bf:e5:2c:87:43:
         de:4f:01:45:01:fb:4a:a1:bd:d6:bd:b4:c9:e5:71:3f:92:e8:
         79:5e:95:9a:6e:61:dd:aa:2a:54:d7:92:c0:d0:8d:d6:45:9f:
         a4:35:e4:7d:df:a6:9f:65:03:f4:70:28:73:53:6d:a4:99:36:
         d1:2d:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:23 2026 by rpki-client