Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          4D/GY32ijBD5C1bZXOYTpb+AyXhLBuVE10SZ3OpwnP4=
Subject key identifier:   62:6A:82:72:65:2E:9F:42:E2:1C:2A:21:21:DE:93:E7:89:93:9B:46
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       019F17F95F4B79B51DC386720BA192D18858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 10:00:46 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:46 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:46 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: wm+EOAgXQOcXgfPDfMi80hw7Ya3rUt1C5xQKKEnA4ac=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:5f:4b:79:b5:1d:c3:86:72:0b:a1:92:d1:88:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Jun 30 10:00:46 2026 GMT
            Not After : Jul  1 10:00:46 2026 GMT
        Subject: CN=626a8272652e9f42e21c2a2121de93e789939b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:c3:d1:b5:ff:0d:83:da:96:e6:52:7f:1b:
                    f6:00:46:fe:80:a7:cf:4c:51:9d:7d:02:d5:28:e7:
                    ea:cc:94:69:2a:34:10:b6:be:63:07:ff:e2:f1:ae:
                    71:f5:10:99:a8:b5:15:14:3f:65:d8:6e:2e:cf:02:
                    e3:64:ad:14:91:80:6f:1f:15:f8:22:6e:ad:79:9a:
                    ce:15:5c:73:0d:b0:67:64:cb:a1:33:69:c1:85:b7:
                    75:47:67:c3:9b:48:26:19:c8:07:e4:08:91:95:79:
                    e3:ed:7e:d5:cf:a9:30:31:fb:5d:e5:de:0d:20:03:
                    41:c3:84:16:ba:e3:d3:c5:4c:cd:cb:7f:43:6f:01:
                    59:27:5f:96:c2:b6:a8:4c:be:e4:33:89:91:0f:75:
                    f6:eb:3b:33:04:d3:cf:ed:1f:c7:ab:9f:ff:c2:7d:
                    54:d1:f7:9f:d1:ef:1f:75:4c:95:7d:bb:f0:d8:b7:
                    f1:a4:d4:a3:a4:6c:36:80:1f:bc:53:7f:ab:a2:2e:
                    ee:2d:78:86:4c:24:b7:b4:44:19:80:10:f0:37:f2:
                    74:ac:4a:08:9a:bb:24:20:7d:8e:08:83:9b:fc:db:
                    28:13:17:e7:31:21:45:7c:3b:82:90:07:cf:7c:f3:
                    6e:d0:9a:ea:e1:f6:0c:ae:55:c0:e5:21:34:45:0e:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6A:82:72:65:2E:9F:42:E2:1C:2A:21:21:DE:93:E7:89:93:9B:46
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:18:89:40:53:26:22:69:a1:cf:c4:8d:c9:9f:62:c3:15:
         f1:7d:ee:1c:95:d6:01:c1:65:ea:48:9b:8c:73:fa:f8:86:58:
         ce:01:84:36:f3:53:53:bd:e5:18:ba:ab:1d:52:f9:d0:20:15:
         97:02:29:16:e6:94:dc:27:98:70:b8:f9:b4:af:bd:5c:b2:73:
         2a:9a:69:a8:5b:d9:2c:d2:fc:95:8f:f9:e0:50:41:5b:64:ae:
         8f:d7:42:b9:eb:e1:ab:62:4e:df:d1:20:e1:5b:50:9d:b4:bf:
         59:be:92:78:93:50:3e:ec:7a:4a:6b:ec:8f:7e:c2:ac:df:b8:
         b1:bf:63:6a:a0:25:80:05:43:56:41:ec:dd:e4:b8:31:4a:f3:
         2b:1e:27:7f:5d:cd:b0:0f:a0:cd:17:f1:83:8d:13:df:17:2b:
         97:fd:7e:e0:4a:9a:8b:4d:b4:d5:a2:22:50:47:b6:05:83:03:
         28:ad:aa:0d:65:05:78:74:6e:1f:27:69:3b:16:33:5a:34:6f:
         49:ec:45:0a:b2:98:49:2a:19:e8:24:9e:61:3c:b8:44:0d:26:
         9a:10:b5:42:f4:1e:98:99:61:f2:4e:31:af:d9:fd:73:c6:9e:
         7f:87:13:fe:9f:fe:fd:fa:ee:3d:e7:e1:6c:7e:b1:18:9f:91:
         9f:59:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:23 2026 by rpki-client