Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          Aad/ND80DdO0JjuFS8zf8r05q2qIsPkqzRmav5rohgc=
Subject key identifier:   B7:F1:2A:DF:FA:A0:98:65:FB:2D:5E:72:AA:6F:5E:0E:65:C9:45:2F
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       019D3866772669892BCCCF582AA66D411619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          188B
Signing time:             Sun 29 Mar 2026 07:02:12 +0000
Manifest this update:     Sun 29 Mar 2026 07:02:12 +0000
Manifest next update:     Mon 30 Mar 2026 07:02:12 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: gXbSe4QLOCvQpN6AcDIEYOyz4UD7ptc+ds2eJptGGGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:77:26:69:89:2b:cc:cf:58:2a:a6:6d:41:16:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Mar 29 07:02:12 2026 GMT
            Not After : Mar 30 07:02:12 2026 GMT
        Subject: CN=b7f12adffaa09865fb2d5e72aa6f5e0e65c9452f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:af:e9:5f:07:c5:21:38:ce:41:1c:01:43:
                    10:bd:af:d8:72:cd:b1:30:99:51:c5:36:dc:f9:6e:
                    73:8d:9c:6c:88:37:bd:72:4a:4e:53:1c:c1:bb:fb:
                    36:7e:b7:43:61:6e:57:ad:50:fc:d7:fa:eb:44:d6:
                    f9:c8:ce:e6:d0:7b:aa:b7:57:34:96:af:af:19:95:
                    67:eb:ac:72:4d:10:95:37:3a:43:9a:8d:1b:ac:08:
                    15:03:d5:bf:43:6b:78:3f:ca:16:b5:8f:eb:87:ac:
                    fe:02:9d:fc:2e:a5:de:1b:0f:f0:0b:de:eb:c7:b0:
                    0f:a0:c6:3f:9f:f6:ec:f2:ac:a0:ef:e7:f6:de:6b:
                    73:b8:b9:bc:30:d5:59:59:51:81:50:03:0e:41:24:
                    d3:62:1b:e3:b8:97:78:5b:7e:db:b3:66:70:69:8f:
                    46:ac:47:66:f0:b2:f5:14:26:a3:94:29:69:31:b5:
                    01:85:80:7f:87:98:44:a6:27:36:29:a6:a3:66:aa:
                    22:58:47:6b:2d:e8:86:36:d5:bc:3a:8e:67:22:b1:
                    a1:87:39:85:fe:3f:bd:e3:45:a9:f6:c0:9e:b8:11:
                    78:cd:2d:88:3d:c6:9f:e6:65:60:2f:77:8f:82:87:
                    12:a9:7c:33:7e:f5:15:26:3d:ce:9b:c6:0d:f4:b4:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:2A:DF:FA:A0:98:65:FB:2D:5E:72:AA:6F:5E:0E:65:C9:45:2F
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:48:0a:f8:8a:f8:c7:43:ac:78:20:d2:bb:7a:d0:f2:2c:
         2d:95:b2:ca:66:9f:71:a9:07:17:4a:14:41:43:9b:0d:c5:08:
         fd:c4:6f:51:c1:20:f8:d0:a1:f9:05:29:0b:aa:bf:68:43:25:
         f3:94:cb:b6:7f:17:4d:6f:18:d8:88:01:50:4d:4c:d2:17:5d:
         ec:31:e8:3d:b5:cf:09:e0:83:67:17:28:1e:19:71:1f:0c:02:
         da:0f:0f:30:ef:70:45:11:03:34:a0:31:85:4b:8a:be:7d:35:
         d7:2a:79:78:4f:03:6b:d6:36:a2:fa:b5:10:07:c2:50:10:d8:
         5f:c5:34:d3:e1:96:91:2f:57:b1:c4:17:4a:54:a8:1d:f0:29:
         13:8a:66:3e:89:ed:61:c9:61:cf:b2:4f:90:be:b4:b8:69:be:
         a7:0f:3d:39:cf:ac:9d:59:ef:2d:f9:25:51:c5:7c:56:3b:ac:
         50:ce:f0:48:54:fb:31:da:a5:b5:9f:1e:6f:7b:00:09:50:ac:
         50:7f:05:d1:80:2c:9c:a4:98:f2:78:cc:0b:9b:12:d0:bd:02:
         29:b4:c0:32:34:6b:9f:74:42:fb:d3:f5:e0:d8:14:be:7c:cb:
         0c:c2:35:63:ef:99:b5:94:11:d9:f9:87:d7:60:7f:a2:6b:35:
         f2:05:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:35 2026 by rpki-client