Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File:                     3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier:          YcF4lPptbBQiaW6LUyLYrjzPE2dAYwLRTM1Hu1zTGsM=
Subject key identifier:   01:06:C2:3A:81:80:1B:52:77:77:4A:89:3B:0F:66:15:5B:CA:A6:6B
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer:       /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial:       019E30A9859887207848AA4A807EA080FF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number:          134A
Signing time:             Sat 16 May 2026 12:01:16 +0000
Manifest this update:     Sat 16 May 2026 12:01:16 +0000
Manifest next update:     Sun 17 May 2026 12:01:16 +0000
Files and hashes:         1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: kthprlB3HocLqfdisFVjGZFfBe/twcOoUcC5M08d4DQ=)
                          2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:85:98:87:20:78:48:aa:4a:80:7e:a0:80:ff:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
        Validity
            Not Before: May 16 12:01:16 2026 GMT
            Not After : May 17 12:01:16 2026 GMT
        Subject: CN=0106c23a81801b5277774a893b0f66155bcaa66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:27:21:b0:8b:3a:79:13:f7:da:d5:f3:3c:
                    6b:4b:8c:c6:c5:3e:69:00:14:b3:5a:e6:81:45:c5:
                    75:ea:f8:1f:b2:6d:bd:4a:1d:49:2a:f2:06:6e:b7:
                    67:d1:2d:29:c3:23:b7:9d:5f:ba:8d:d4:11:15:b9:
                    91:36:08:ec:db:43:98:c0:fb:47:7c:b6:ba:d8:f2:
                    e6:a0:8b:18:48:2e:f1:8a:c7:24:7c:56:97:d1:63:
                    2d:2d:70:bd:bd:cf:06:f4:e8:13:c4:10:9c:9b:46:
                    86:32:69:eb:64:95:84:22:55:60:69:d3:46:c6:7a:
                    b3:41:01:53:b8:a8:f9:ab:4a:3d:f9:d1:da:1b:51:
                    a3:51:ec:85:60:df:d4:b9:a5:15:90:66:c8:25:c5:
                    da:26:03:e8:4d:e8:0e:53:00:c3:bd:68:ad:4b:3e:
                    5d:1a:5c:96:26:fd:20:25:f1:78:6a:0a:30:62:be:
                    5d:e5:15:16:12:59:5d:22:48:e9:01:ee:ae:83:50:
                    24:42:c0:78:2b:4a:97:9f:64:8a:f1:b1:0c:11:d4:
                    df:94:59:87:4e:0c:5c:a9:d7:d9:ec:90:55:89:44:
                    b5:2e:e0:27:95:6c:cd:0b:bb:b2:12:68:37:57:c9:
                    99:0b:8f:1e:81:0c:a7:b1:55:8c:ba:6c:d8:01:17:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:06:C2:3A:81:80:1B:52:77:77:4A:89:3B:0F:66:15:5B:CA:A6:6B
            X509v3 Authority Key Identifier:
                keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:cb:26:81:e0:8a:f1:7a:80:c1:17:40:7e:ab:9b:e0:b4:b4:
         44:20:bc:c1:2d:ec:b6:6c:ae:3e:1b:ca:c3:cb:1b:07:e4:31:
         d8:43:ad:24:c6:8e:14:d8:cd:1a:05:3f:13:99:3e:09:39:9a:
         90:e9:a9:f2:33:2b:0d:84:fb:ac:0b:9c:2f:ff:cb:8e:9f:aa:
         e8:84:91:23:3c:37:60:2b:34:59:70:d7:cc:c4:a1:09:e8:86:
         35:27:d1:88:b6:e2:57:4e:11:b2:e1:29:33:7c:bb:1e:5a:07:
         6d:00:77:1a:fe:ed:5a:51:6b:b7:a7:b7:73:bf:79:79:d3:38:
         28:e3:37:be:4b:62:ff:07:12:42:c5:09:63:e8:73:f4:c2:fb:
         4d:22:6d:48:e1:5c:d9:a2:5f:fc:61:08:fc:1c:fe:1b:41:26:
         c2:2d:3a:67:58:15:b0:13:f6:3e:09:3b:b2:1a:d7:c6:d2:d8:
         a2:29:f0:de:48:d4:89:3e:47:cb:4a:d1:76:bf:11:55:03:02:
         dc:c3:95:e0:7f:86:56:45:ec:c9:8f:39:68:89:b3:74:fc:90:
         01:f7:22:02:30:27:01:ea:52:a5:80:78:89:76:ce:58:de:86:
         e7:db:ed:98:4f:52:ca:2c:5f:32:99:58:4e:b9:ca:dd:ad:49:
         97:41:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:26 2026 by rpki-client