Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
File:                     3virX3TckOn_uo1CmI7Vp3SMHQU.mft (raw, json)
Hash identifier:          bfuMzI4OpUGNezUZW4TvEfpmozCJLiGTRQobM5k478M=
Subject key identifier:   B6:2E:0E:55:29:A3:CC:62:CE:63:F7:63:D8:FC:38:61:0E:52:FE:F6
Authority key identifier: DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05
Certificate issuer:       /CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
Certificate serial:       01A0C40E0D79ED79FD2C3B12D856F919982F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
Manifest number:          1280
Signing time:             Mon 21 Sep 2026 13:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:50 +0000
Files and hashes:         1: 3virX3TckOn_uo1CmI7Vp3SMHQU.crl (hash: rjmZHw9AWY1rS8k40crz1WyEK1OvLegU7lRZyzs1HP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:0d:79:ed:79:fd:2c:3b:12:d8:56:f9:19:98:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def8ab5f74dc90e9ffba8d42988ed5a7748c1d05
        Validity
            Not Before: Sep 21 13:00:50 2026 GMT
            Not After : Sep 22 13:00:50 2026 GMT
        Subject: CN=b62e0e5529a3cc62ce63f763d8fc38610e52fef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:43:43:f0:ba:c2:09:ec:8a:fd:40:5a:d4:
                    d1:db:6b:f4:a5:85:4a:bc:60:df:3d:b4:43:a2:8d:
                    72:7b:d7:5e:0d:d1:a2:f1:66:8e:07:7f:32:c2:27:
                    8c:9b:fc:5e:e8:76:af:f2:07:75:54:7b:39:d8:7f:
                    eb:7c:3b:6a:3b:91:2f:30:db:b8:a7:68:37:63:36:
                    a0:4f:55:79:5f:00:40:ac:70:3b:8d:1e:ba:41:22:
                    a4:f6:7f:4b:f0:2c:62:e5:e1:6e:ff:46:6b:f4:7f:
                    33:7e:fb:65:55:87:8e:9c:84:0c:88:23:2a:2c:5e:
                    80:b0:b8:f6:3b:db:e3:8f:8b:85:23:4a:62:13:36:
                    2e:cd:5c:b5:c3:2b:f6:dd:8c:2c:f2:5d:17:0c:ae:
                    58:dd:f5:7c:7c:34:f7:f9:1e:41:e1:4e:79:38:b8:
                    24:1a:7b:56:a0:8b:9f:84:8f:b8:57:10:ef:cc:f7:
                    6b:a4:5f:50:7a:2f:a3:11:47:6b:8a:37:38:9d:7b:
                    54:ca:95:99:40:45:03:9f:52:f3:73:18:69:27:67:
                    1c:1f:e7:92:2d:7e:3a:5c:64:f4:50:0d:52:37:31:
                    1b:44:cd:24:9c:a6:3f:8f:93:4a:52:fa:3e:0f:d3:
                    35:97:b7:97:4f:18:5f:cd:3d:6a:9f:61:3c:fa:61:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:0E:55:29:A3:CC:62:CE:63:F7:63:D8:FC:38:61:0E:52:FE:F6
            X509v3 Authority Key Identifier:
                keyid:DE:F8:AB:5F:74:DC:90:E9:FF:BA:8D:42:98:8E:D5:A7:74:8C:1D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3virX3TckOn_uo1CmI7Vp3SMHQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a725a-42e4-4270-b5af-453fc1bcbcd5/1/3virX3TckOn_uo1CmI7Vp3SMHQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:99:05:83:92:86:50:9c:7d:93:72:45:9a:26:c6:68:06:9d:
         62:95:51:c4:6e:73:c5:b7:87:08:45:c1:28:fa:42:72:4e:ec:
         f4:6d:75:3a:ab:bf:ee:70:5e:2f:59:7a:37:d6:88:2b:be:e2:
         d0:f3:a4:4a:bc:85:0e:93:32:a5:f5:a3:b1:4b:8f:17:a1:eb:
         02:2a:8c:ae:01:9e:df:07:5e:fb:76:d7:38:f3:a2:c3:1e:b5:
         d6:95:91:90:c6:75:2b:e1:f7:d5:a4:22:7c:96:a5:0d:28:2b:
         cf:d7:ca:ea:6a:dc:74:15:21:80:8a:a1:96:f6:40:cb:34:32:
         9e:a3:1b:c8:f2:08:05:d3:38:42:1a:0f:25:cf:9f:aa:bb:b2:
         16:d5:ee:c8:60:19:74:fc:4f:0f:82:2b:4c:1b:cd:62:3a:aa:
         28:28:dc:65:4d:17:8f:7e:1d:62:75:d2:0b:74:bc:d7:91:91:
         67:d3:9c:9a:d9:8d:f6:20:f1:61:6c:ff:ae:d6:98:42:ea:86:
         8d:38:c9:3a:2f:f3:af:07:8b:f3:e7:32:ba:71:0b:7a:06:22:
         ff:d5:99:ec:ca:a4:dc:b9:13:ad:ff:e2:6d:59:a7:1b:05:e4:
         54:34:68:62:a9:b0:25:a9:83:da:1a:eb:d1:8f:d0:72:dc:75:
         62:4f:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----