Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File:                     3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier:          JrKvHbxKoKrfT7Dd6nEoY6Ymf467zmU5jfL3M4SWVyE=
Subject key identifier:   1D:EE:BF:EA:72:40:B2:F0:96:0E:C5:68:D7:B6:98:EE:C6:41:20:21
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer:       /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial:       01A0016EF816427EFB335C018168D2122690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number:          1882
Signing time:             Fri 14 Aug 2026 18:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:44 +0000
Files and hashes:         1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: uX9UOFNSGwlFcTQ1l5OoqB9pBag2crPtBFo4vj1crEk=)
                          2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:f8:16:42:7e:fb:33:5c:01:81:68:d2:12:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
        Validity
            Not Before: Aug 14 18:00:44 2026 GMT
            Not After : Aug 15 18:00:44 2026 GMT
        Subject: CN=1deebfea7240b2f0960ec568d7b698eec6412021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:13:51:08:7f:43:ce:a9:44:7d:74:88:8d:0a:
                    1c:ac:7c:13:64:b2:81:a8:a3:10:5c:30:43:de:aa:
                    04:2d:56:a8:31:3f:96:64:0e:86:0c:8c:45:ce:39:
                    d8:c3:ea:d3:9b:13:6e:b0:da:7c:d0:21:56:62:57:
                    91:7e:70:55:3a:87:c0:49:07:3a:89:83:d4:3d:ec:
                    14:81:ea:0b:24:c0:8f:fe:0a:64:4d:6c:03:13:8f:
                    bd:18:ba:8b:28:ab:38:ab:bc:2f:57:0c:07:e3:46:
                    85:40:e1:99:a6:78:bc:a9:fd:ec:e6:d3:06:07:35:
                    bf:b1:d1:d0:bd:0c:75:81:73:b9:a0:6b:f5:8a:32:
                    48:90:78:75:68:d3:4e:85:f9:9e:cf:0d:af:be:02:
                    13:8f:d5:4d:c5:7f:03:74:fd:5a:d8:ad:a1:67:30:
                    23:23:f8:5d:cc:73:63:3b:fa:2b:1d:bb:df:d6:21:
                    f3:d8:84:46:80:97:65:af:f3:f0:84:b9:ed:4d:f8:
                    bc:57:1a:89:bf:b8:fc:06:36:d6:95:e5:b8:85:9a:
                    46:04:e9:2e:43:a6:f5:0c:4f:46:5e:8a:d3:14:74:
                    89:0e:6b:33:f9:e0:18:aa:f7:c3:bb:90:dd:08:f9:
                    a5:28:1a:91:70:8c:5c:38:bd:e7:34:4b:94:e8:00:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:BF:EA:72:40:B2:F0:96:0E:C5:68:D7:B6:98:EE:C6:41:20:21
            X509v3 Authority Key Identifier:
                keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:b2:4d:d5:e8:53:ce:fe:15:3a:9f:08:2d:cb:94:f0:6c:
         4a:0e:2b:79:24:60:4a:e1:aa:ad:69:0a:65:c5:7e:a5:07:21:
         8c:fa:c3:7b:68:71:29:1e:a4:10:86:99:85:c1:2c:f6:ea:60:
         9b:b7:64:7a:ab:58:e7:01:99:32:c1:b3:32:86:19:f2:03:76:
         d4:7a:d6:e5:3f:d7:0e:45:89:3d:10:40:62:ec:bc:ed:2f:33:
         7a:f1:0a:b0:1c:06:01:fc:ee:07:58:f6:db:95:a9:72:8c:53:
         93:68:49:27:95:30:d1:5b:d2:6c:03:e4:44:a9:89:c1:cb:7b:
         45:ff:6d:ad:b8:8c:06:e3:96:e5:9d:22:84:f3:51:b3:2c:ae:
         37:63:fd:dc:26:92:ea:e0:0e:fb:3a:c4:88:e5:86:4c:df:70:
         ad:98:83:91:15:2b:90:a3:3e:1d:ac:fa:64:d8:4e:62:c0:99:
         6d:2f:68:e5:1c:7a:e8:2d:26:7a:0b:58:8a:b1:86:df:ed:dc:
         73:81:04:7c:77:21:66:19:ca:80:17:56:61:1e:41:1b:64:a7:
         12:6e:fa:d7:38:a4:fc:dd:1b:7e:c0:8c:6e:0e:bd:c1:82:f6:
         89:15:3e:c1:ff:8f:20:bf:0d:4b:e0:9e:1b:2b:28:6b:bc:48:
         20:bb:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:52 2026 by rpki-client