Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File:                     3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier:          tkodXkkd39ISsXMgdfrfHdLMcGeiFEUWhQQf+vnTtz8=
Subject key identifier:   F1:64:9B:51:91:29:E5:FA:4A:95:CD:09:E9:C6:36:E8:BB:93:83:69
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer:       /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial:       01A0C14409F1EBF784A6037E0F282D6C6670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number:          0CA6
Signing time:             Mon 21 Sep 2026 00:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:56 +0000
Files and hashes:         1: 0VMT834xpSH5P_uOhco5RR0cnoY.roa (hash: Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=)
                          2: 3QB4_WrWv1_f_4y7MeernB0lxRQ.roa (hash: zfF5AjAOtIAaIZLUIxCgwwAY3O+6F4xLShcmNVe/TXA=)
                          3: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: pm9agWjRo3n3A9EnzLrOlE1XyZYQ6RQt1gTyZuIB8ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:44:09:f1:eb:f7:84:a6:03:7e:0f:28:2d:6c:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
        Validity
            Not Before: Sep 21 00:00:56 2026 GMT
            Not After : Sep 22 00:00:56 2026 GMT
        Subject: CN=f1649b519129e5fa4a95cd09e9c636e8bb938369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:43:50:fa:e3:6d:a2:59:a6:80:88:6b:59:
                    7f:3a:b4:18:86:75:7d:9e:49:20:ad:1a:d1:63:ba:
                    49:95:b3:78:3d:88:28:da:d6:87:81:cb:47:be:d7:
                    51:01:8e:35:c2:f7:a1:c1:d6:4d:52:3b:aa:c2:e0:
                    c0:8f:44:61:1d:63:59:5d:79:53:e3:14:82:f2:f1:
                    64:01:03:08:68:ed:2a:82:00:45:75:aa:be:c2:6a:
                    69:8b:06:3e:ec:68:8b:48:c7:2a:85:7a:28:86:f9:
                    77:96:1b:0b:91:5c:59:85:84:5d:75:ee:c2:a7:32:
                    a7:03:be:84:9c:72:14:75:cd:e0:98:ee:5d:f4:9a:
                    09:ab:81:92:94:b0:56:0f:05:ae:4f:3f:71:91:34:
                    55:e7:ee:66:81:45:7d:fa:df:22:09:c9:fc:4d:92:
                    ee:d4:e1:43:27:10:74:ac:07:5d:dc:bb:0c:cf:6d:
                    38:52:15:7a:8d:c2:82:a4:fe:e5:b8:df:fa:89:e6:
                    1b:92:a0:8e:b1:c9:1e:77:cc:25:b4:62:c2:1e:29:
                    f1:94:6c:8a:de:b1:90:d0:6c:d8:23:3a:90:a2:c7:
                    89:6d:60:73:ca:82:80:a9:16:b6:d9:da:30:7a:13:
                    c0:f3:c9:6e:ab:b5:22:1f:50:a5:df:75:ae:17:37:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:64:9B:51:91:29:E5:FA:4A:95:CD:09:E9:C6:36:E8:BB:93:83:69
            X509v3 Authority Key Identifier:
                keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:10:5e:7a:77:c3:39:ce:1e:ea:91:19:49:13:50:62:22:85:
         65:8f:6f:b2:6b:d3:67:0b:ac:ce:85:62:84:89:90:51:fe:af:
         29:d4:66:26:23:ca:76:9c:d8:45:55:44:d6:53:f1:5b:6e:eb:
         3b:3f:0b:07:bc:43:f0:c5:80:ff:9d:46:0b:f7:47:26:91:a5:
         5d:29:8f:13:4c:8f:79:16:0b:d3:dc:83:1d:aa:fa:0d:bb:00:
         80:cb:30:24:32:2c:c1:f5:5b:92:f1:72:85:0f:03:a2:af:a9:
         69:19:39:1e:92:67:fd:95:09:97:a1:a6:ed:7f:53:33:fa:e5:
         4f:20:ad:08:37:b9:2c:9f:3e:50:6c:da:fc:c0:00:59:af:91:
         65:86:fd:fe:28:30:5c:c2:74:1d:67:2f:d4:aa:30:f9:31:52:
         f5:a9:43:81:9e:f8:c4:69:60:0e:61:10:f7:1d:23:cb:a9:e6:
         8d:45:d1:6a:ef:ec:92:08:9a:db:b3:27:43:76:17:4c:e9:a4:
         5a:60:68:5b:19:87:c3:59:17:cf:e5:ee:7e:7d:bd:7e:50:6e:
         73:c0:e7:29:5e:ee:02:d4:28:1b:3b:3e:3c:77:4f:f1:71:3d:
         33:c0:4b:f1:ee:e4:96:5e:ab:8a:69:f9:63:0b:d4:3f:b7:70:
         d7:06:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:24:25 2026 by rpki-client