Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          mzLEILylqzl1qtPEmM89QCTkX4EpgzXIrvD7XD7eilk=
Subject key identifier:   4E:BF:50:82:78:53:33:E7:81:86:87:B3:32:A7:70:71:BB:1B:2B:50
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       019E2FCDEBD01219C190740FE3B906D1AD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 08:01:24 +0000
Manifest this update:     Sat 16 May 2026 08:01:24 +0000
Manifest next update:     Sun 17 May 2026 08:01:24 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: DE3paz+vFGEiFFn31HClXz06oAhUJudK93XZYlH0w7g=)
                          2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:eb:d0:12:19:c1:90:74:0f:e3:b9:06:d1:ad:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: May 16 08:01:24 2026 GMT
            Not After : May 17 08:01:24 2026 GMT
        Subject: CN=4ebf5082785333e7818687b332a77071bb1b2b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:b5:d0:e8:b1:29:96:c6:ad:16:8c:a5:c2:
                    f9:a4:1f:c0:32:dd:3e:52:1b:c9:24:8c:25:dc:b5:
                    25:0a:0f:31:be:a5:ad:81:ee:26:de:db:2b:9b:bc:
                    6c:3d:46:ed:ac:84:0d:34:ec:9d:19:f3:80:a3:d8:
                    bd:6a:33:b1:fa:41:56:67:c1:70:73:d2:73:7d:36:
                    62:06:f3:40:16:c9:76:fd:fe:38:0d:d6:90:05:c8:
                    67:8c:3e:bd:b7:b8:a9:48:0a:0a:d6:52:95:99:f1:
                    fc:ba:fe:e2:35:ac:5e:90:c4:20:a1:8c:ac:a5:3b:
                    85:c2:e0:54:ae:3a:1d:33:c9:42:33:dd:8e:51:3e:
                    ad:84:7a:6e:09:c0:98:14:77:a3:32:76:41:a5:6d:
                    1f:ca:5a:25:de:f5:3c:22:a0:33:f0:35:2f:a2:3b:
                    de:fe:f6:7b:7f:2a:b7:48:5d:c4:84:36:2d:3d:84:
                    41:c8:fe:2a:05:14:52:11:47:2f:50:0d:42:a2:7d:
                    52:72:34:61:60:04:f0:03:8c:fa:49:15:69:6a:02:
                    61:d7:eb:7e:02:1f:2d:df:21:8e:bf:3a:53:df:bc:
                    8a:f4:27:dd:64:b3:bc:bf:75:8b:fe:02:68:43:78:
                    89:6b:ca:c0:b4:7b:0d:45:ed:b7:06:6e:55:40:7e:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BF:50:82:78:53:33:E7:81:86:87:B3:32:A7:70:71:BB:1B:2B:50
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:62:e5:fe:e0:07:6c:47:60:9d:66:72:76:ef:44:85:f3:
         dc:06:a0:85:3f:56:1a:b5:65:f1:1c:15:df:72:2a:a8:fb:b1:
         4a:d9:68:fb:b5:56:25:08:55:9c:49:6f:23:56:f3:b9:be:c1:
         4c:ed:2e:3f:a9:94:21:90:5b:08:d3:04:d0:8b:a5:fa:22:3d:
         40:c2:83:28:19:a2:80:f7:87:0f:cd:f1:ea:5a:4e:34:48:ba:
         df:2d:ee:2a:5f:d8:f2:b1:97:22:68:03:b0:5d:4d:9f:c1:c3:
         ab:23:95:a5:e7:af:b0:bc:11:a8:60:3e:e0:59:35:56:08:ff:
         5e:7e:b4:64:f2:9f:5f:f0:5c:55:93:29:34:10:d3:78:96:b4:
         f8:99:b5:22:aa:e3:c8:d5:78:1c:e8:fb:06:07:ef:73:97:76:
         a6:09:e0:1d:c5:ee:19:4c:a5:e5:ff:38:cb:17:b5:08:1c:35:
         bd:ed:0a:c4:51:19:fb:d8:a2:88:33:91:ee:18:a5:70:c4:6b:
         31:e2:cf:d3:68:b8:05:10:27:d2:6a:c2:4e:5b:5a:6f:32:0a:
         c7:09:87:b6:bb:8c:2c:12:c3:70:b4:19:05:2f:8d:4a:72:d2:
         3b:a6:46:20:97:70:3f:fc:3a:d3:5e:40:50:55:58:22:34:fe:
         b8:9d:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:57 2026 by rpki-client