Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File:                     3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier:          tJtI8+saIcYKdmnlUttmWXRfQNh7XIPVT4n5eYIyLN0=
Subject key identifier:   B1:B5:F4:39:C2:71:CB:65:63:C1:FC:55:44:34:9A:F0:BB:C2:92:E8
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer:       /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial:       019DCE2BDB0381FC270C1532AC763301A29C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number:          05D6
Signing time:             Mon 27 Apr 2026 09:01:13 +0000
Manifest this update:     Mon 27 Apr 2026 09:01:13 +0000
Manifest next update:     Tue 28 Apr 2026 09:01:13 +0000
Files and hashes:         1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: N+Qp9qgM3I0Nvw/u0EgPaYev6gPGFplX7hmHjgjkCX8=)
                          2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
                          3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
                          4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
                          5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:db:03:81:fc:27:0c:15:32:ac:76:33:01:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
        Validity
            Not Before: Apr 27 09:01:13 2026 GMT
            Not After : Apr 28 09:01:13 2026 GMT
        Subject: CN=b1b5f439c271cb6563c1fc5544349af0bbc292e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:df:09:f6:d8:02:14:9e:42:bd:ea:3c:5d:
                    9c:c3:48:54:03:3d:12:a0:54:5b:29:bf:f9:2a:f6:
                    1b:19:80:35:b1:88:0c:9f:f3:f1:ba:2b:23:a6:36:
                    f6:6b:a2:54:f9:82:89:f1:c9:9c:fc:9c:fa:c0:19:
                    12:e8:a6:82:47:99:02:aa:fc:6e:4d:34:52:f9:c8:
                    80:95:ea:c6:61:0d:30:6e:e2:9f:98:02:9a:a8:f2:
                    8a:d9:03:6d:cf:de:9a:ef:61:27:81:f3:8d:fd:fd:
                    f2:b2:bc:f8:bf:d9:5e:51:79:8b:52:3a:c0:e5:58:
                    06:3a:11:2d:36:b6:3c:b8:bb:27:f8:5f:4e:07:47:
                    df:4e:dc:9b:4e:78:16:67:15:f6:11:8b:ec:a0:8b:
                    c5:de:33:5a:06:c1:cf:c1:68:7d:52:d8:e7:d1:d3:
                    89:d1:30:78:86:b1:84:cb:a4:39:c3:fa:0e:ab:a0:
                    0c:21:33:47:35:7a:ac:54:5b:cb:8d:93:1e:19:3d:
                    d4:b6:b7:7b:f4:25:f5:4f:31:6b:29:44:e4:0d:58:
                    ca:01:e4:03:fa:c4:8d:5c:18:a9:f1:99:bd:7c:7f:
                    da:29:d6:f3:52:7a:02:7a:90:29:9a:c1:14:40:f8:
                    11:f5:7d:10:ca:ab:87:89:6d:8b:62:cf:a6:91:44:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:F4:39:C2:71:CB:65:63:C1:FC:55:44:34:9A:F0:BB:C2:92:E8
            X509v3 Authority Key Identifier:
                keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4e:16:59:5d:0d:b9:98:7c:45:7c:35:4c:d5:87:5f:7d:fd:
         40:ae:d7:da:20:17:d0:a3:98:ca:9b:07:f8:a7:ac:47:ff:a8:
         d5:eb:60:66:84:17:fc:45:ac:35:dd:8e:4c:61:62:08:cb:fa:
         7e:4b:ff:c2:11:c6:65:2a:26:d8:5a:f2:96:94:25:ec:41:5b:
         10:54:f5:6c:79:7e:3e:9d:02:96:58:3f:6d:06:27:ce:a5:f6:
         a7:81:ae:23:76:1e:4f:d4:19:10:4c:15:40:e4:80:27:de:19:
         6f:7e:a0:3a:f4:7d:41:24:aa:f0:8f:e3:5b:09:f4:a1:fd:f1:
         22:5c:c6:d7:2f:db:75:e1:bd:a1:02:2e:7b:2f:75:53:f3:3c:
         4a:09:4c:c1:ac:93:b8:fc:cb:f4:02:36:37:8e:51:be:b1:55:
         fd:55:b6:c3:8a:2d:bc:c8:bd:bd:9d:37:d9:9e:f1:e0:eb:59:
         28:9c:11:42:44:94:6d:54:3d:56:6d:bb:0e:b0:4d:98:b7:25:
         38:96:1b:22:9a:4e:3b:dc:ee:5c:f2:d5:90:6b:c4:ce:4a:d0:
         63:21:41:95:91:2a:ce:5f:37:0c:5f:35:5f:50:86:9b:83:c6:
         1b:8f:bd:54:c6:66:9e:dd:8b:2a:fd:41:e4:41:d0:a4:9b:f0:
         68:cc:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:04:32 2026 by rpki-client