Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File:                     3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier:          kuhR+Q19954aRga4aEQrmypOY+NU14r8pukcsYXoN9w=
Subject key identifier:   99:ED:7A:CB:8F:33:DF:CB:F2:0A:7C:6D:E1:61:F9:DF:03:CE:19:C9
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer:       /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial:       019E30058C76766515C21742FD37EA314874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number:          14C3
Signing time:             Sat 16 May 2026 09:02:10 +0000
Manifest this update:     Sat 16 May 2026 09:02:10 +0000
Manifest next update:     Sun 17 May 2026 09:02:10 +0000
Files and hashes:         1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: hJalQ8kld/FQ8r4QJm/926OUQ3SW7EuGZMsvrGoFu6s=)
                          2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:8c:76:76:65:15:c2:17:42:fd:37:ea:31:48:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
        Validity
            Not Before: May 16 09:02:10 2026 GMT
            Not After : May 17 09:02:10 2026 GMT
        Subject: CN=99ed7acb8f33dfcbf20a7c6de161f9df03ce19c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:a7:88:36:4c:7a:58:0d:b3:ce:ce:4a:1d:
                    14:ee:61:e5:28:71:72:e0:28:8b:ca:12:9f:e4:f8:
                    c3:33:4d:d2:c5:a7:7c:f2:d8:5c:69:0e:ae:e4:d8:
                    93:64:c1:74:cf:79:bb:e4:d7:47:25:7c:ad:30:f7:
                    4a:73:3c:72:fd:0a:da:24:5b:d4:34:26:69:7a:6a:
                    8b:82:5d:14:07:7a:6f:ad:73:ab:59:0f:cb:b8:87:
                    eb:94:61:d4:d8:ea:f9:ba:ef:c2:44:df:45:fd:90:
                    ce:43:ff:f5:04:85:b1:63:5c:24:33:bf:bc:22:9b:
                    36:f6:78:d7:aa:79:9f:30:40:94:14:1b:40:62:9d:
                    be:89:4b:fa:0d:58:91:a0:46:7d:d1:06:b4:63:06:
                    25:f0:eb:2a:b4:b9:52:82:65:e9:97:fb:18:43:8f:
                    3b:4f:2b:5c:62:c3:15:f3:c9:f6:c1:d2:bd:eb:07:
                    3d:05:4c:67:48:3f:92:45:91:a2:21:71:be:16:1b:
                    10:b3:e2:58:29:37:d5:cd:af:69:ee:58:8e:22:d3:
                    88:6f:2d:c6:a4:a6:36:45:39:fd:92:fa:2b:7f:b6:
                    42:4e:fe:53:ac:28:f0:b1:94:a2:bb:88:bc:02:0b:
                    16:1a:27:37:dc:aa:cc:dd:f5:38:71:58:72:97:9e:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:ED:7A:CB:8F:33:DF:CB:F2:0A:7C:6D:E1:61:F9:DF:03:CE:19:C9
            X509v3 Authority Key Identifier:
                keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:7d:ca:2b:77:21:de:0b:f8:da:cd:1b:c6:b0:28:90:2d:
         da:3e:b5:63:58:26:a5:fd:9d:06:23:d5:9a:ba:bd:bd:37:52:
         e8:6d:fc:23:db:8b:15:f0:9e:db:e4:06:e4:f9:71:08:ed:cd:
         29:fc:d7:24:97:b3:5c:dc:18:36:b6:07:a4:45:42:a2:c2:33:
         c2:6d:84:75:6c:d3:6e:12:24:98:31:04:01:d3:3d:64:9b:85:
         7e:01:88:9b:aa:00:ba:35:54:b4:8c:7c:e9:dd:c2:df:c7:f5:
         6a:a7:be:24:da:78:d2:22:ec:73:2d:9d:54:3b:ba:c5:7b:fe:
         17:b5:a8:e4:44:ea:20:a0:c8:46:d6:47:91:5b:7c:ac:ae:c0:
         52:05:d8:a2:e4:9a:76:97:ff:53:50:08:af:32:b7:76:29:89:
         b2:09:c3:ba:3d:d8:4c:ff:2e:9f:da:1a:b1:72:4f:b2:09:a5:
         1e:be:59:bb:c2:80:68:fe:25:d4:96:1b:cb:b7:d7:04:45:53:
         f4:71:85:36:b9:3c:37:78:c6:c8:26:9f:bb:41:5c:47:d4:fb:
         95:58:5f:7d:a0:48:91:08:f6:5e:8d:86:09:13:59:34:22:a1:
         38:ca:a3:77:6e:36:77:b8:19:ca:58:17:4a:e3:b7:bc:95:48:
         92:d9:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:22:52 2026 by rpki-client