Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File:                     3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier:          Duey1xG+Oa3Ex9KuDgbe8NnhQ/EnGAWaWDbBCTmNx7M=
Subject key identifier:   61:7D:6F:47:34:1D:E8:FB:0C:4D:CC:31:42:BE:9A:D1:D5:1C:05:90
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer:       /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial:       01A0005CB37D38934343058816B4E7B6B3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number:          180D
Signing time:             Fri 14 Aug 2026 13:01:10 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:10 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:10 +0000
Files and hashes:         1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: SK4I83LHqf86s5jZnyleiUNlRKj2dtfzyzDrf1WWkgc=)
                          2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:b3:7d:38:93:43:43:05:88:16:b4:e7:b6:b3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
        Validity
            Not Before: Aug 14 13:01:10 2026 GMT
            Not After : Aug 15 13:01:10 2026 GMT
        Subject: CN=617d6f47341de8fb0c4dcc3142be9ad1d51c0590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:da:51:a9:32:9c:70:61:b1:7f:d1:77:46:
                    b9:2e:a9:e5:d3:01:9a:59:b6:d8:e0:ac:ed:a9:f3:
                    a4:a1:cd:18:15:c9:af:ca:9e:3c:80:c7:e8:b6:77:
                    41:1d:3f:d0:64:b1:c3:a6:f2:55:02:61:4b:63:39:
                    9b:d9:32:6b:2a:f0:6e:90:e1:0c:07:3f:ea:f1:5d:
                    8a:1f:5f:33:f3:12:50:67:fa:17:00:87:4e:17:95:
                    35:23:a8:b4:7a:67:e1:fb:a3:f6:f9:b8:e5:8d:32:
                    1f:10:d9:98:20:69:9f:ca:e2:ee:bc:ab:f3:d4:ea:
                    97:8f:df:7e:a7:8d:95:19:10:b5:a9:3e:1f:f5:8e:
                    c8:36:b0:bc:4d:45:f8:a6:90:85:12:a8:80:00:e4:
                    55:b2:cf:ad:ec:f1:cf:2a:90:d0:6b:b3:63:1b:03:
                    08:7e:59:e4:fa:e9:b3:8f:72:1c:eb:ff:45:6c:b1:
                    3f:0b:8a:cc:bd:b3:35:08:85:3a:c8:7e:7f:5a:f7:
                    c2:a4:53:35:74:fc:d2:4c:fb:5e:7b:3b:9f:37:c9:
                    69:b2:60:21:69:74:fb:c2:d0:cd:b4:4f:1e:09:27:
                    aa:ca:0a:93:97:87:76:90:5c:b3:d2:96:9e:d9:95:
                    9b:40:7f:34:bb:38:84:10:81:ca:ef:e9:a3:b9:df:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:6F:47:34:1D:E8:FB:0C:4D:CC:31:42:BE:9A:D1:D5:1C:05:90
            X509v3 Authority Key Identifier:
                keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:e7:cb:bc:70:65:69:11:83:83:50:2f:a7:e6:49:97:58:
         d7:42:3e:f9:e2:0b:f1:76:50:81:e9:09:c3:25:ca:ee:a6:b4:
         77:7f:43:f1:06:d9:a9:ee:53:64:31:c8:f3:ec:bc:27:02:1d:
         f5:e9:ed:c5:e8:2b:c8:d9:1d:72:54:a5:68:a7:e8:bb:e0:69:
         3a:04:b6:ac:32:be:18:03:0c:cf:e8:19:62:f2:2d:ab:c8:91:
         9c:64:96:fe:50:c7:6d:ca:05:b7:5f:98:83:4f:10:e7:a6:63:
         8a:06:20:7d:65:16:b0:0d:f4:c7:da:1e:b3:2e:88:a4:bf:20:
         1e:22:02:85:67:47:9f:72:74:3b:78:36:66:c7:51:4a:b4:e2:
         ef:ac:d5:17:6c:9b:fc:61:e4:93:e5:07:f5:a4:f8:69:b2:9a:
         6d:c5:31:d3:20:61:8c:f2:03:60:ab:a6:1e:3a:bc:9c:2b:e2:
         3b:26:56:1e:6f:58:85:a0:3d:ca:47:e3:f5:56:8e:03:96:42:
         a4:f2:19:60:4f:bb:54:f7:48:08:75:5b:b8:cf:4e:45:fa:e6:
         46:0b:30:90:19:83:5b:e9:22:ea:d1:09:c1:7f:39:9c:f8:d5:
         e8:0e:bc:1a:b2:70:24:23:d4:b3:72:6a:ce:ee:d4:95:64:ef:
         e1:c1:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:13 2026 by rpki-client