Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File:                     3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier:          iZ97OBqXjPdSRVw8zhQ33YByHrpED2i1h3g4Olthtp8=
Subject key identifier:   73:FE:6B:E1:39:F6:78:E7:0C:52:54:02:5B:A3:F9:6A:DE:3A:C8:80
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer:       /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial:       01A0D34B1E9459025122651E19B21551162B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number:          0CDF
Signing time:             Thu 24 Sep 2026 12:01:50 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:50 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:50 +0000
Files and hashes:         1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: 56YVSOBhX5yw5I60w0+BOj2zByBEDdN6bzqeB4pQEmk=)
                          2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4b:1e:94:59:02:51:22:65:1e:19:b2:15:51:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
        Validity
            Not Before: Sep 24 12:01:50 2026 GMT
            Not After : Sep 25 12:01:50 2026 GMT
        Subject: CN=73fe6be139f678e70c5254025ba3f96ade3ac880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:65:63:25:1e:b9:c1:a0:ce:6c:a4:43:e3:
                    32:b0:69:c9:b9:fa:cf:3b:c4:d4:31:af:1d:59:01:
                    51:c1:7f:3b:39:d8:46:47:62:ec:bb:9c:b2:9f:8d:
                    83:eb:10:db:4d:33:f0:55:75:b5:bb:b7:6d:98:d4:
                    ac:b1:f9:a8:fb:f8:fe:63:39:6a:0f:f1:74:79:d1:
                    ae:a9:16:85:d0:fe:c0:de:8c:98:a5:d2:89:25:c3:
                    0c:d4:3a:48:97:d3:48:af:ec:17:d7:46:37:ce:5f:
                    08:64:96:33:de:3f:67:5d:a9:98:a1:73:f4:aa:79:
                    30:da:e7:b5:5b:72:2f:e8:ed:3d:c4:68:2e:3b:18:
                    cf:9c:a9:c8:8a:a8:a3:ad:ab:23:65:49:db:e1:98:
                    63:4d:fa:5c:4d:65:9b:c3:84:f2:34:d7:97:dc:47:
                    43:30:c3:9c:3f:8d:a9:84:f0:2f:53:8d:54:04:18:
                    19:b9:fc:c2:24:e6:ab:bf:6a:96:56:f5:0e:24:06:
                    8e:6e:23:31:44:30:46:73:e1:1e:d1:64:e8:a4:b6:
                    7f:d0:f2:b3:51:4e:50:5b:a3:e5:42:9c:df:2b:e4:
                    f6:12:fb:93:cb:99:0f:27:ae:de:7f:83:1f:e2:50:
                    6d:e8:f0:ce:31:9b:ea:7d:e3:68:a8:bd:50:0d:dc:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FE:6B:E1:39:F6:78:E7:0C:52:54:02:5B:A3:F9:6A:DE:3A:C8:80
            X509v3 Authority Key Identifier:
                keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:06:e2:a4:f0:a7:c4:68:17:e3:a6:c6:c8:5b:36:eb:10:f7:
         a9:0d:42:4b:5c:ca:c8:e0:6b:24:65:70:df:50:17:a8:a1:9b:
         ef:6f:e7:a1:e1:83:07:29:6a:8e:30:cd:c8:16:83:ee:a1:eb:
         68:f7:56:f3:76:33:44:ce:52:54:9c:40:7c:cd:78:bb:4e:8e:
         ae:fc:27:38:cd:9f:c7:2e:f0:e6:95:e8:75:93:83:f7:19:1e:
         33:6f:65:70:e1:35:b4:b4:bd:39:85:e8:82:d1:b2:df:0e:61:
         f2:5d:7a:9c:da:de:29:e1:cc:a6:9b:4e:af:be:84:76:f3:c8:
         b0:ca:85:d0:bb:5a:ed:6f:a7:0c:78:a4:77:eb:0f:c0:0a:d5:
         3b:f3:b4:c0:3b:d4:2a:e4:ef:6f:ce:7d:d4:ef:a1:b4:ad:93:
         a5:86:a6:c9:93:8e:d5:fe:25:c9:28:f1:c7:63:de:2b:3a:95:
         90:c3:f2:2e:9e:e4:25:36:2a:70:f0:f4:34:ee:f2:a2:1f:c4:
         4f:55:e3:23:1a:82:80:6d:93:78:57:97:9b:f2:58:c3:3a:6a:
         22:40:ec:da:6a:54:79:42:c8:d1:49:2d:a4:e2:3f:90:cc:c8:
         15:cb:8f:ac:63:d7:4e:ae:25:9c:48:70:1b:43:1b:c6:10:4b:
         8f:cb:01:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:04:30 2026 by rpki-client