Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          nCpvt11M+uLkN6uH/mu/OKXwL7GtVQdGMSjmTBWM+K8=
Subject key identifier:   3C:10:C0:1B:13:C2:1F:52:0F:01:D9:A0:5C:9A:A9:97:B1:12:28:22
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       01A0C8FD39D762E0B4B57FBDD7BA07059CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 12:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:33 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: LzyS0hkaRYu/pu7g7FRlgHDeWdldvz67388rCx6gLso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:39:d7:62:e0:b4:b5:7f:bd:d7:ba:07:05:9c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Sep 22 12:00:33 2026 GMT
            Not After : Sep 23 12:00:33 2026 GMT
        Subject: CN=3c10c01b13c21f520f01d9a05c9aa997b1122822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:6a:44:07:f6:34:2e:0a:56:04:0d:44:33:
                    67:83:c8:2c:dd:44:24:90:a9:ec:42:0a:02:aa:76:
                    a3:3a:9d:0d:a2:19:47:01:8c:20:15:5f:f9:db:4c:
                    24:dd:e6:e9:7d:d8:8f:55:8c:d7:fc:bf:74:4b:1b:
                    fc:26:91:8c:c2:6b:3e:b9:08:c5:e3:ca:fb:59:f0:
                    ce:81:f4:7e:23:d6:8a:34:d4:7d:3c:6f:9b:cd:d6:
                    87:de:96:f9:e6:93:5d:6f:a7:23:d1:b6:31:ca:ee:
                    fb:e2:f1:db:c3:55:dc:12:9e:e5:59:f5:43:f6:af:
                    cc:72:47:75:80:1f:ac:34:a0:16:09:d9:1d:f1:f2:
                    ec:9e:c4:66:e5:d9:1b:f2:12:18:89:cd:10:27:f3:
                    4f:d2:77:20:bf:aa:bd:d4:2a:76:90:62:98:03:2e:
                    9c:92:11:3f:7b:f7:9f:5d:04:ba:5b:7e:50:a4:e5:
                    92:f5:c7:a9:90:db:0b:c0:7e:16:22:3a:9f:ab:10:
                    71:8b:b1:d1:95:50:41:09:1e:13:28:bc:dc:1d:8b:
                    6a:ae:fb:39:a1:cf:f8:b5:4c:43:90:be:da:4a:d2:
                    e7:3f:9c:18:77:c8:a0:b3:e5:ae:2d:01:98:24:c0:
                    8c:2f:5c:f8:1c:33:e5:06:19:62:30:93:f8:96:f9:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:C0:1B:13:C2:1F:52:0F:01:D9:A0:5C:9A:A9:97:B1:12:28:22
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:d8:b1:a6:bd:81:fc:c6:dc:d1:46:ab:22:a3:d4:63:cd:
         f8:8a:ae:35:66:2b:57:a3:af:1a:2d:63:ea:00:b5:24:ac:04:
         75:ae:d1:1c:43:2d:7a:d0:8a:87:ee:62:e8:4a:75:5c:d3:fd:
         92:6a:68:30:52:82:f1:9d:9b:55:e4:38:36:78:fd:4c:75:e0:
         3c:fc:fa:bf:80:2f:63:cc:b3:f8:10:93:ca:24:18:44:fa:2c:
         38:6d:13:2d:9a:be:6c:06:78:8c:20:35:7d:d9:26:ca:87:1d:
         e3:f5:d4:a0:9a:53:5d:d3:67:40:ac:f2:2a:ba:22:11:f8:b6:
         f4:c5:f2:b0:1b:19:20:83:ff:78:70:e4:05:cd:bd:eb:bc:a2:
         c3:9d:f1:5d:0b:14:04:f4:a7:95:98:29:df:d6:e5:cc:ff:60:
         e6:2b:89:05:03:d0:69:dc:3c:96:5f:cf:25:af:ed:4b:a0:51:
         89:a2:7f:ac:4a:3f:33:ed:12:f5:12:f7:5f:2c:4d:67:fe:9b:
         14:a5:c4:53:69:a9:35:5a:85:34:1c:4e:52:99:62:45:35:5d:
         b0:65:2c:9f:c3:7a:23:da:40:63:bf:21:2a:7b:cc:d1:3d:92:
         bd:c1:7d:4b:e5:e4:a7:20:2c:0c:fa:d7:14:bd:98:28:87:a9:
         29:7c:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:55:19 2026 by rpki-client