Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File:                     3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier:          dir/10eTS6QdsxcPDQzhiM0olX/54LFZ4irBMx9OO9Y=
Subject key identifier:   C5:CE:80:54:B8:EE:83:8B:A9:44:F8:56:D6:BB:35:CA:83:F1:77:BF
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer:       /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial:       019EB7D7C99D7D9D1BF83BB8B85C9E247507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number:          064F
Signing time:             Thu 11 Jun 2026 18:00:32 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:32 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:32 +0000
Files and hashes:         1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: /oRwA7feQoYgckmjMJy6cVM7ovJ4AKeBX3fpf2gQ2SQ=)
                          2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
                          3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
                          4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
                          5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:c9:9d:7d:9d:1b:f8:3b:b8:b8:5c:9e:24:75:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
        Validity
            Not Before: Jun 11 18:00:32 2026 GMT
            Not After : Jun 12 18:00:32 2026 GMT
        Subject: CN=c5ce8054b8ee838ba944f856d6bb35ca83f177bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:be:f2:5c:38:8f:04:a7:dc:05:56:93:8d:
                    a0:6e:e1:11:5f:84:75:fa:68:36:b1:90:e1:32:53:
                    f3:12:c0:1a:3d:04:f9:4e:60:4f:15:cd:7f:14:cf:
                    41:95:a1:39:4a:12:4b:b0:40:fa:60:99:90:12:5d:
                    93:4a:da:3e:e0:37:23:52:56:94:c0:b7:27:09:06:
                    06:3a:84:61:53:ee:4c:25:45:27:6d:51:0b:a0:df:
                    c1:cc:6b:bd:18:be:1f:43:0d:fa:e2:aa:69:d7:a5:
                    f0:10:93:02:29:50:e2:9c:8c:ae:ce:0a:79:89:ac:
                    d1:d1:ae:b6:da:26:2b:2c:bb:bf:12:e8:b6:ea:81:
                    84:f3:dc:ad:e6:26:33:11:7d:3b:a4:bb:6b:48:63:
                    ce:70:c5:69:68:16:26:8e:ad:64:e2:07:18:64:0f:
                    3d:03:7d:fd:c5:e8:48:ac:32:52:21:93:da:8e:9c:
                    a1:f7:28:d0:e9:5b:34:a5:02:61:02:f7:ec:7b:0d:
                    b3:cd:c5:52:63:f1:e8:d7:9c:57:5a:60:1e:bf:ac:
                    07:5a:39:ee:36:49:83:fc:64:a0:fb:e2:c7:5c:bb:
                    4d:c1:aa:3f:21:57:5b:bb:7c:e2:f2:0d:06:a9:7d:
                    51:58:45:9a:e1:00:8e:42:01:aa:e6:35:be:e6:17:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:80:54:B8:EE:83:8B:A9:44:F8:56:D6:BB:35:CA:83:F1:77:BF
            X509v3 Authority Key Identifier:
                keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1b:9c:48:b1:a3:cf:05:42:a5:f3:00:3c:47:e4:c8:d0:9c:
         9f:c7:73:4e:f7:95:91:b7:03:d7:ab:9e:64:ce:77:c1:c1:8d:
         da:2d:de:a1:9e:ca:3d:36:44:3f:fb:97:aa:26:5a:23:95:7b:
         34:26:15:d5:5f:72:f4:ce:01:e6:9b:3f:18:41:d7:42:18:db:
         89:c2:7d:91:cc:04:8e:2f:03:64:3d:b7:35:01:85:41:d9:4d:
         1c:28:7a:66:ef:7f:1c:7d:c6:60:da:a8:b2:51:4f:a8:a1:46:
         f5:f5:59:0e:cd:5f:a3:6b:3f:fc:8f:35:c3:de:6f:56:ea:f9:
         b9:8a:7c:6b:a6:7c:8d:ea:26:f8:33:8a:c6:50:79:35:8b:76:
         b7:d9:21:25:ac:28:f9:58:4c:af:4b:00:c1:cd:a0:6e:30:51:
         14:40:b0:9a:04:b2:29:ca:18:68:67:59:1c:5b:91:7c:55:5d:
         86:bd:a3:ba:c8:3c:17:ab:88:2c:b2:bf:2c:12:a4:4c:60:1e:
         62:34:67:ba:1a:49:0f:3f:c6:fc:b5:f7:87:71:fb:ff:78:ce:
         80:7f:ec:97:23:8a:6f:48:32:30:a6:50:3f:5e:6f:83:b0:33:
         6e:99:d5:4f:96:da:37:a6:eb:cc:71:91:ac:74:93:8b:d2:bd:
         cd:a9:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:27 2026 by rpki-client