Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
File:                     3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft (raw, json)
Hash identifier:          8wW3Og5F3SfmPgeGLqpVBHyLA5M9bqgcVpAcQNICUsY=
Subject key identifier:   0D:B8:55:04:21:76:63:CB:F1:CB:B8:82:BB:40:2B:34:80:21:0E:41
Authority key identifier: DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44
Certificate issuer:       /CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
Certificate serial:       01A126C2F6BDEEECF9C684ADF96A38CFE3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
Manifest number:          70
Signing time:             Sat 10 Oct 2026 17:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 17:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 17:01:13 +0000
Files and hashes:         1: 3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl (hash: K7MzNqJn9GL9FyCs5QZ0Vtttm+SP7Dx4qnK5V1/KYa4=)
                          2: qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa (hash: aHzU+u1zOjJwE23C3Y/zhbfbtLovXRgW0Lo6a/gy4nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:c2:f6:bd:ee:ec:f9:c6:84:ad:f9:6a:38:cf:e3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
        Validity
            Not Before: Oct 10 17:01:13 2026 GMT
            Not After : Oct 11 17:01:13 2026 GMT
        Subject: CN=0db85504217663cbf1cbb882bb402b3480210e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:aa:7a:91:e8:d5:d5:2c:ce:40:cf:8b:ec:
                    5b:d4:95:32:ce:1f:19:ee:61:9c:0e:1e:31:4e:06:
                    2e:64:f5:1f:1a:d7:d2:2c:46:18:bd:ed:2b:9e:70:
                    f2:3d:f4:b4:53:7f:16:48:22:c9:a0:1f:a8:dc:84:
                    d0:f7:9a:af:2e:ed:12:81:4f:65:c5:d7:6e:6e:98:
                    22:26:d1:fc:ba:0c:8f:c0:1a:2b:d7:fb:7c:5a:59:
                    70:3b:1f:38:ad:41:43:4f:18:e0:81:5e:9e:6b:64:
                    2f:50:69:2d:91:58:b8:c2:7a:6f:5e:73:ef:c2:b2:
                    2c:0b:d2:5a:cf:a5:7c:97:84:d4:0c:9d:8b:2e:e4:
                    8f:90:51:22:03:b4:4c:ac:ae:f4:a4:4f:0c:ca:46:
                    47:f1:15:f8:75:8b:e6:9d:de:26:2b:2e:19:33:d6:
                    a2:92:87:6b:ea:5d:e0:45:0b:b7:df:ff:d5:5a:e0:
                    14:cf:5d:a5:e3:93:9b:54:24:68:9d:31:c4:59:3e:
                    6c:60:6a:20:27:48:0f:75:31:26:28:7d:72:c9:ea:
                    c2:e9:c3:d0:51:e2:b2:46:5e:3d:ae:d9:d3:26:35:
                    f1:1e:0e:38:2e:77:5f:24:6e:24:f8:76:56:d0:fb:
                    70:d5:4b:b5:af:09:6d:cb:95:68:a8:63:7e:c4:cb:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:55:04:21:76:63:CB:F1:CB:B8:82:BB:40:2B:34:80:21:0E:41
            X509v3 Authority Key Identifier:
                keyid:DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f3:80:ff:18:0c:62:12:f0:cc:36:cf:97:44:28:35:f1:38:
         dd:88:4f:61:cc:a3:04:e3:5e:4b:c0:ee:b8:00:c1:f0:1b:7a:
         4e:29:cd:84:82:07:e6:01:e5:c3:81:d4:54:cc:76:6d:79:13:
         6e:53:36:e5:ca:47:c2:f3:37:32:c2:12:32:7d:29:10:68:92:
         51:1e:f7:37:e4:24:aa:53:44:67:42:71:b2:4e:c0:14:6f:1b:
         48:a8:67:a8:7d:0b:36:40:08:35:4e:24:3c:bc:3d:13:75:7e:
         4d:bf:ac:45:b5:82:75:e4:b3:66:fa:bb:50:ed:ee:5d:29:26:
         0a:5b:f4:0f:09:21:d9:51:77:b8:d0:18:70:43:9a:02:87:13:
         9b:27:b4:82:7f:96:51:5c:48:8f:7d:8d:8c:a3:4c:59:07:a6:
         e3:d7:b2:76:b3:ca:c6:0c:30:a8:42:ce:bc:cf:d4:1f:d4:87:
         11:02:72:08:79:d1:79:a1:b0:84:c6:54:c0:90:1c:78:01:fc:
         1c:82:5a:74:e6:a7:57:d7:a7:43:c1:cc:b7:32:11:f2:2c:06:
         85:f4:8c:06:92:e2:0e:0f:9a:a4:b3:3c:61:cb:52:88:b1:6a:
         6b:59:5d:04:28:93:b4:5b:60:8a:ad:57:6c:a9:4c:6a:5e:dc:
         37:f3:70:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmwva97uz5xoSt+Wo4z+PoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGNiYzc4MTc3NDM2Y2ZlNWRmYmI1NzgyZGQ3MDI4ZjA1
OGY0NDQwHhcNMjYxMDEwMTcwMTEzWhcNMjYxMDExMTcwMTEzWjAzMTEwLwYDVQQD
EygwZGI4NTUwNDIxNzY2M2NiZjFjYmI4ODJiYjQwMmIzNDgwMjEwZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2SqepHo1dUszkDPi+xb1JUyzh8Z
7mGcDh4xTgYuZPUfGtfSLEYYve0rnnDyPfS0U38WSCLJoB+o3ITQ95qvLu0SgU9l
xddubpgiJtH8ugyPwBor1/t8WllwOx84rUFDTxjggV6ea2QvUGktkVi4wnpvXnPv
wrIsC9Jaz6V8l4TUDJ2LLuSPkFEiA7RMrK70pE8MykZH8RX4dYvmnd4mKy4ZM9ai
kodr6l3gRQu33//VWuAUz12l45ObVCRonTHEWT5sYGogJ0gPdTEmKH1yyerC6cPQ
UeKyRl49rtnTJjXxHg44LndfJG4k+HZW0Ptw1Uu1rwlty5VoqGN+xMuybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA24VQQhdmPL8cu4grtAKzSAIQ5BMB8GA1UdIwQY
MBaAFN1MvHgXdDbP5d+7V4LdcCjwWPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1V5OGVCZDBOc19sMzd0WGd0MXdLUEJZOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lN2UxNmEtNGYxNi00OTVhLWE4NTMt
NzYxNjlkZmU1ZjE4LzEvM1V5OGVCZDBOc19sMzd0WGd0MXdLUEJZOUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lN2UxNmEtNGYxNi00OTVhLWE4NTMtNzYxNjlkZmU1ZjE4
LzEvM1V5OGVCZDBOc19sMzd0WGd0MXdLUEJZOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPOA/xgM
YhLwzDbPl0QoNfE43YhPYcyjBONeS8DuuADB8Bt6TinNhIIH5gHlw4HUVMx2bXkT
blM25cpHwvM3MsISMn0pEGiSUR73N+QkqlNEZ0Jxsk7AFG8bSKhnqH0LNkAINU4k
PLw9E3V+Tb+sRbWCdeSzZvq7UO3uXSkmClv0Dwkh2VF3uNAYcEOaAocTmye0gn+W
UVxIj32NjKNMWQem49eydrPKxgwwqELOvM/UH9SHEQJyCHnReaGwhMZUwJAceAH8
HIJadOanV9enQ8HMtzIR8iwGhfSMBpLiDg+apLM8YctSiLFqa1ldBCiTtFtgiq1X
bKlMal7cN/NwZg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 20:31:09 2026 by rpki-client