Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File:                     3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier:          U83xiehiqx4Ahti/gzId5NwLXJfXPoX8HLxYQc1+JRQ=
Subject key identifier:   18:F1:BF:02:09:6C:B9:07:9F:FC:9B:8D:58:72:03:51:12:03:8A:A1
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer:       /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial:       01A0E0621BCD6A1E52A014850F242AA53B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number:          184D
Signing time:             Sun 27 Sep 2026 01:02:01 +0000
Manifest this update:     Sun 27 Sep 2026 01:02:01 +0000
Manifest next update:     Mon 28 Sep 2026 01:02:01 +0000
Files and hashes:         1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: SntWQKt3GydUIPlidBr7LIcGNxbvV6S62WHr9SN7PkY=)
                          2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:62:1b:cd:6a:1e:52:a0:14:85:0f:24:2a:a5:3b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
        Validity
            Not Before: Sep 27 01:02:01 2026 GMT
            Not After : Sep 28 01:02:01 2026 GMT
        Subject: CN=18f1bf02096cb9079ffc9b8d5872035112038aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:3a:de:99:f6:12:7d:37:24:39:b4:a0:91:
                    47:af:0b:fe:53:c2:8a:35:69:d9:ad:2c:42:02:94:
                    ab:2c:7d:ca:f9:7b:ab:50:7d:10:b3:69:06:2a:1d:
                    d8:13:c0:8c:b0:0b:18:84:56:74:40:8e:f6:c3:bf:
                    72:31:cb:3f:48:1f:5e:47:36:86:36:52:00:f0:c2:
                    c5:76:16:4d:2e:c0:db:1f:b3:72:af:d7:58:03:5b:
                    d0:e4:53:36:1f:48:0d:ad:fe:67:1c:75:8e:a5:d7:
                    03:33:d1:19:d3:81:6c:da:7e:ce:bd:84:ee:bb:50:
                    d3:99:e1:9d:50:cb:2a:16:3a:0a:9c:67:9c:a1:35:
                    cd:ec:8b:07:62:1d:bf:32:a6:10:de:42:83:11:6e:
                    d8:ec:e1:3d:b6:7d:a1:21:09:c4:1d:72:3d:c4:6f:
                    7e:9e:c5:8d:9a:63:6c:eb:8e:89:3a:54:43:b7:f9:
                    f7:79:e9:a6:0c:a2:f0:7c:9a:84:fd:a8:ad:ce:da:
                    cc:a9:73:66:a0:25:63:d3:ab:4d:c0:25:af:06:a6:
                    97:55:fe:57:b2:8b:fd:63:69:05:d0:67:0b:03:8b:
                    11:e9:9a:a6:bd:c0:75:0b:b1:ad:d3:35:42:12:be:
                    6c:d0:86:88:00:f2:b6:c0:24:d4:18:ae:34:44:1a:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:BF:02:09:6C:B9:07:9F:FC:9B:8D:58:72:03:51:12:03:8A:A1
            X509v3 Authority Key Identifier:
                keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:85:d5:4c:de:03:fe:02:8b:c2:a7:9d:72:a0:c0:00:16:
         96:16:fe:fd:e1:78:cf:be:4c:8f:e7:6f:16:d3:b1:31:ba:5b:
         f4:50:29:47:fc:28:78:cf:47:d3:48:64:c3:7f:da:34:61:16:
         1c:ad:46:3a:47:2c:36:2f:66:e4:f5:2c:b5:6b:db:2b:14:c2:
         e8:34:75:d3:bf:a9:bb:0f:7e:d5:8e:b0:9e:13:39:7d:1e:bf:
         63:f4:de:2f:44:57:e5:c9:27:35:4c:e8:c8:18:f8:e8:50:29:
         04:a0:ab:cd:9c:71:02:7f:53:4e:54:35:87:0f:b2:f1:27:85:
         c0:35:8b:bc:5e:18:39:8e:2a:a8:62:0d:94:66:cf:2a:96:bd:
         d0:cd:de:29:6e:b3:48:99:61:b0:1c:7a:db:b2:28:39:91:79:
         3f:ae:ef:3f:03:85:7f:98:07:bd:40:02:d3:59:2a:68:a9:43:
         60:e9:63:21:c3:63:e5:1c:dc:b9:eb:3b:6e:e2:c7:9b:c6:61:
         a5:74:ff:3b:71:9e:31:b5:85:80:c0:4d:67:02:ff:ee:bb:d8:
         f1:43:da:d4:8a:3f:bc:08:65:8e:b2:4f:ce:1f:b7:3d:ec:3c:
         cb:71:64:6f:f9:14:11:ff:61:8d:01:b6:74:50:f6:58:12:17:
         c4:a5:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:56 2026 by rpki-client