Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
File:                     tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft (raw, json)
Hash identifier:          QFlimBAzijZ3FrmWg1P28HJOvH8ySAqbz9ZRmWGG2Sc=
Subject key identifier:   BB:ED:AF:16:AA:F7:58:26:70:12:0A:DF:49:BD:A8:09:60:FE:41:42
Authority key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0
Certificate issuer:       /CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
Certificate serial:       019CEF714D8063958EB3DE4263AFDE76CF0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
Manifest number:          F2
Signing time:             Sun 15 Mar 2026 03:01:45 +0000
Manifest this update:     Sun 15 Mar 2026 03:01:45 +0000
Manifest next update:     Mon 16 Mar 2026 03:01:45 +0000
Files and hashes:         1: tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl (hash: 60po029Cvq4aHUxRz3V0bsofvXmOiUPOlSJjU+xeWVA=)
                          2: ukIbrLUvPtIxZ5wtDHPd0BjbBfs.roa (hash: 4R245tMXj5hWTZh+CwuGNWMTCAhfqI5ky1f9sYscEcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 03:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:71:4d:80:63:95:8e:b3:de:42:63:af:de:76:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0
        Validity
            Not Before: Mar 15 03:01:45 2026 GMT
            Not After : Mar 16 03:01:45 2026 GMT
        Subject: CN=bbedaf16aaf7582670120adf49bda80960fe4142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:66:c9:49:07:d9:b2:dd:3f:ea:7e:c8:32:
                    f2:c7:e3:16:18:ec:4c:bd:26:f3:12:ba:26:c8:e5:
                    9b:3c:9c:c8:1d:ac:81:fa:e6:60:a8:d5:44:63:7f:
                    97:8c:d1:32:7a:2d:4b:c5:1f:90:f4:95:3d:67:f4:
                    a9:9d:6a:de:af:b6:8b:0c:33:b3:d0:26:f5:97:59:
                    29:32:c2:1e:c6:7b:c9:f1:85:4c:88:68:89:5f:17:
                    4b:ff:07:ff:7f:3d:f2:87:66:4c:f0:bf:c6:1b:03:
                    2f:80:33:e8:68:e3:fd:85:32:e7:95:cc:6a:a5:4f:
                    a0:7f:64:9a:87:5e:42:d1:61:98:7c:4e:fe:bd:f2:
                    97:5d:85:40:cc:a1:64:4c:6a:1a:ff:20:e8:2e:55:
                    87:b1:64:39:9f:83:41:8c:61:e0:3d:04:fc:9b:11:
                    ab:16:e7:5c:06:9b:a5:8a:f0:e4:95:1f:b5:32:40:
                    e3:00:02:84:bf:75:1a:b7:55:10:54:f5:1d:5b:5b:
                    f8:f4:7e:17:a3:71:e9:91:b5:1e:c7:5d:72:11:84:
                    43:bd:c5:fa:c5:33:37:28:16:1b:95:a1:9f:78:2c:
                    21:a2:5c:7c:1e:58:ed:13:8d:e1:f8:05:03:65:43:
                    1c:e8:ed:f1:8c:3a:2d:d1:80:2d:99:49:a5:d0:f6:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:ED:AF:16:AA:F7:58:26:70:12:0A:DF:49:BD:A8:09:60:FE:41:42
            X509v3 Authority Key Identifier:
                keyid:B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4d:ca:cf:56:9b:f5:c8:d8:9f:f6:54:e0:6d:eb:43:ff:36:
         ce:be:84:e7:f8:ad:6b:3a:70:cf:61:a7:31:ab:83:66:ab:52:
         51:e3:7c:89:00:eb:c6:aa:61:b3:02:9b:16:69:54:b5:a5:6f:
         67:af:75:5e:e8:31:3f:64:04:d0:64:bc:89:5a:69:72:0d:40:
         6b:e5:ec:dc:e6:16:7b:07:0a:a6:c7:1d:90:1b:ad:33:a5:b8:
         eb:d1:54:c9:e6:aa:ae:d9:1b:50:36:9c:0b:93:b7:3b:d0:77:
         01:c2:96:aa:65:89:3b:d3:1e:b0:b6:df:cd:5f:f9:53:dc:dd:
         26:4a:4d:53:d9:80:43:ac:19:42:09:96:b0:81:56:c7:71:bf:
         b6:eb:a1:af:f8:2a:41:fb:f6:07:b1:48:c4:fe:1e:0d:e4:17:
         5b:52:c9:a9:a9:77:94:39:9c:91:93:17:57:d6:ce:66:61:87:
         10:06:d0:f5:3a:bb:61:b0:5c:70:b2:63:8a:c1:d1:17:8c:27:
         bb:d7:b0:ec:e8:09:b6:85:54:b7:2c:bf:df:32:e0:c4:ec:6e:
         31:dd:b8:74:7d:44:c0:e9:70:f0:b7:78:6b:2e:9a:05:b4:b7:
         8f:bf:61:c4:2b:8b:9f:b4:7f:fa:78:fb:0f:67:22:bb:e3:e1:
         70:7d:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:24:31 2026 by rpki-client