Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          71Aa2XECNlTiZqskPCMBpj0Kqp3oE51shqCtzLCELHY=
Subject key identifier:   1A:E3:73:5B:28:72:1D:A1:05:77:37:E2:D8:54:ED:75:8C:29:22:37
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019E30A975C6B3485D1002C19FBEC2D91CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          16EE
Signing time:             Sat 16 May 2026 12:01:12 +0000
Manifest this update:     Sat 16 May 2026 12:01:12 +0000
Manifest next update:     Sun 17 May 2026 12:01:12 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: Mai2ZO8toMNhnb0dZnhQzw+chdtgUdIr+iDjqfRnUho=)
                          2: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
                          3: Wv3jBQDz94jp90n3YXOm7UR7OY0.roa (hash: nZAkejw3a0YAsJYA9xPdYx6NPiHL+D888pdSk5f6Jys=)
                          4: WwkncKL5VRC13xPV2ZE_H9se7W8.roa (hash: BknD8zU7XCC2nFHasTpI89u/51fYeUQLrTGPpyLxToE=)
                          5: ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa (hash: 4PfqWbbb/AkFI2O3OXjGcGzMpkxwYMJ2P6SIOk3keto=)
                          6: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:75:c6:b3:48:5d:10:02:c1:9f:be:c2:d9:1c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: May 16 12:01:12 2026 GMT
            Not After : May 17 12:01:12 2026 GMT
        Subject: CN=1ae3735b28721da1057737e2d854ed758c292237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:d0:75:93:f1:01:9d:60:54:c0:e6:f6:07:
                    7b:c4:85:f4:db:4e:c9:87:a1:83:7f:28:98:b7:a8:
                    e4:1e:48:54:39:74:50:04:88:08:0b:26:ea:87:cf:
                    57:cf:21:b2:75:69:08:a9:f4:60:34:8a:ec:f1:f5:
                    6d:93:6f:a6:70:a3:c3:41:19:c2:6a:79:1d:58:cb:
                    63:81:ae:46:ac:b0:7f:b0:27:11:e4:9f:ad:c7:47:
                    75:a4:b1:dc:2e:9d:89:d7:53:af:c9:86:25:f0:c4:
                    b4:02:ca:95:be:fe:9d:8e:43:bf:28:bb:fc:90:0b:
                    0e:bc:57:02:3b:a8:fa:25:20:94:38:f4:55:27:50:
                    7f:7f:db:fb:9a:6e:a5:e0:3a:ea:2e:54:fa:cb:69:
                    28:b8:b8:30:19:37:bd:90:9d:97:0d:a7:ca:24:91:
                    13:27:21:67:86:16:e7:28:85:e3:73:6a:ba:78:ec:
                    c2:bf:dd:b8:61:b3:50:1a:9a:9f:56:c6:e8:e2:02:
                    6c:ca:28:56:f1:84:76:c5:94:d1:39:66:63:54:4f:
                    4a:7c:e6:0d:b1:b6:a8:e1:8c:e9:44:1e:09:73:09:
                    13:a2:4c:f8:d3:82:e7:bc:8a:2b:d7:37:0c:18:18:
                    fa:1b:bd:13:cf:37:af:eb:37:2c:cc:03:95:ce:b9:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:73:5B:28:72:1D:A1:05:77:37:E2:D8:54:ED:75:8C:29:22:37
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:63:15:58:e9:89:98:e5:28:2f:a8:e3:c5:fc:99:25:1f:b1:
         98:cd:24:43:a1:d0:fc:01:e7:c4:f4:50:6a:e0:93:f8:d4:77:
         e8:01:a0:0e:75:e5:7d:80:4f:8b:b0:1f:92:de:1f:88:b9:96:
         ad:e5:0a:85:d8:56:0c:0c:c2:c4:2b:18:b6:c2:6d:50:25:97:
         62:92:53:6c:22:64:66:29:4f:2f:0d:68:b7:ed:05:94:2a:c1:
         72:bc:0f:77:01:51:79:41:3c:51:b7:64:e9:bb:c2:79:19:10:
         2c:12:36:9f:ee:58:c4:52:3a:69:a9:57:d1:4a:6a:26:ba:e8:
         04:9b:20:13:af:28:5f:db:93:fb:26:87:d6:4c:56:c7:c6:23:
         2b:ea:5d:e6:e9:cf:8e:1e:08:d2:53:99:da:b4:40:e2:a7:c3:
         e3:0f:61:66:9e:d4:25:94:40:5e:3e:9f:dc:c5:5a:8b:a6:04:
         23:1c:b6:c1:57:94:ee:85:f9:74:4c:eb:bc:47:2e:40:e3:8e:
         29:23:48:66:13:b9:9c:11:fa:36:b5:4d:b6:3e:8c:cd:0c:8b:
         65:46:3f:d8:4a:b3:d3:ff:6f:31:66:b5:70:dc:bf:96:82:55:
         ce:3a:18:cf:f5:e5:db:ef:18:7f:31:6e:8e:5d:96:25:f9:18:
         71:8f:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:26 2026 by rpki-client