Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          wePCAIFe+3S3x9YPwG4fAPRZvg3JIy+BDz5NzD5MFX0=
Subject key identifier:   C9:A4:CF:37:D2:08:67:48:56:4A:A0:F7:1A:29:09:FD:53:A3:08:D4
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       019E303BD608D8C43EF1A3E07B421086E413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 10:01:28 +0000
Manifest this update:     Sat 16 May 2026 10:01:28 +0000
Manifest next update:     Sun 17 May 2026 10:01:28 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: OsS87Olpm7aXMRuAY4CUei+4Hl6PYVc5dKzEHMZ0+RQ=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:d6:08:d8:c4:3e:f1:a3:e0:7b:42:10:86:e4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: May 16 10:01:28 2026 GMT
            Not After : May 17 10:01:28 2026 GMT
        Subject: CN=c9a4cf37d2086748564aa0f71a2909fd53a308d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:96:e6:98:c7:62:1b:3f:a7:93:e9:a0:fb:
                    49:07:02:f2:84:22:d6:bc:3a:f9:ed:7b:98:68:95:
                    da:79:d5:65:59:05:6e:ab:d2:c9:8c:49:94:cd:f9:
                    12:e5:5c:05:3f:12:17:f2:e2:46:da:d6:31:ee:6a:
                    5c:e0:70:e6:a4:d5:2b:67:b9:3f:e0:68:a4:bf:0f:
                    90:e4:57:48:dd:90:8c:67:58:1e:88:63:05:07:a3:
                    2c:2b:1d:0b:d3:1f:bb:f5:03:11:ec:83:e7:80:3f:
                    e8:ee:55:20:77:c6:8f:90:37:d7:6f:47:ee:b4:23:
                    2e:55:a0:4c:82:05:80:e9:1b:93:ee:ce:ff:26:7b:
                    ea:34:c5:02:71:88:29:ea:eb:96:34:4a:46:17:e5:
                    fc:ac:fc:e0:dc:8f:a7:50:ea:c4:9d:46:e6:a0:38:
                    5e:d1:21:14:c7:94:dd:45:73:77:94:bb:4e:2c:ab:
                    93:bb:61:2a:6f:7a:27:07:7b:43:2b:50:c3:81:ef:
                    74:af:08:4a:20:7d:f7:76:4d:e2:29:76:bc:48:85:
                    36:b0:e9:5a:92:d1:6a:f1:79:84:df:c0:a3:2c:5d:
                    ee:03:f4:a4:8f:5f:50:d2:aa:e5:ae:50:ea:e7:b7:
                    ed:b3:e1:ae:80:19:71:c2:72:73:6c:80:74:04:df:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:CF:37:D2:08:67:48:56:4A:A0:F7:1A:29:09:FD:53:A3:08:D4
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:2d:b6:9d:65:92:06:22:d3:3b:2d:63:dc:42:fa:b3:17:
         dc:48:28:05:64:a7:33:e5:ea:94:85:55:47:e7:16:1c:78:30:
         16:fa:cf:9f:e7:bc:8d:f2:e6:9c:29:47:7d:7c:4f:e0:97:2b:
         a3:ec:9c:40:7e:f7:3e:ff:ba:f8:8b:5d:cc:ee:17:73:43:99:
         aa:3f:4e:cd:1f:d0:a9:19:2e:f8:41:45:f3:6c:63:ff:76:2d:
         15:c5:90:fc:63:29:d2:47:74:8a:97:fc:be:30:39:9d:2f:89:
         c9:79:38:0a:68:02:5d:49:32:cf:2d:ab:21:96:4c:db:cf:3f:
         6f:13:9f:8b:58:59:03:4b:e3:31:aa:8f:5c:88:03:de:25:72:
         71:ea:d9:4f:ac:b9:99:ea:9d:b5:60:48:b2:f7:73:b0:18:ad:
         8e:de:14:c5:da:21:ae:82:9d:31:fa:53:7d:7d:99:0b:84:6a:
         f0:1a:39:be:e0:7c:f7:68:6f:76:fe:43:ea:40:c8:96:bb:97:
         a9:6a:fe:9b:c4:30:63:75:f5:4e:fe:a0:cf:cd:b0:78:1b:55:
         65:de:fc:f9:c4:5c:85:a1:27:9f:d4:9b:bb:27:13:f4:3c:c2:
         dd:61:61:ea:05:c8:66:05:4d:24:ff:3c:51:bc:0a:fa:87:ba:
         86:cb:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:49 2026 by rpki-client