Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
File:                     abwCA1BF6DKg4eWs-KHyvuY05rw.mft (raw, json)
Hash identifier:          s5mfqfpF/qmSQ5IP2fWa8gqncd3znhJXTxWWXjBCVOY=
Subject key identifier:   C8:2A:CD:C2:85:F3:9B:59:1F:24:AB:96:FB:F6:AC:C8:B8:0E:43:67
Authority key identifier: 69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
Certificate issuer:       /CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Certificate serial:       01A0CD116421977C7F2AD2884BDAE24C83FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
Manifest number:          3F
Signing time:             Wed 23 Sep 2026 07:01:04 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:04 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:04 +0000
Files and hashes:         1: 5RV-6-Bl62jNzbXWPvh_gWaaMNI.roa (hash: MIt83MU6K+msVvlyXbT0aeXS8zaPOmLVzlB/Ie7kqeM=)
                          2: abwCA1BF6DKg4eWs-KHyvuY05rw.crl (hash: Xj8aiU6y2WfudNCMqZptSMM0DvYK4uAyejvKvRzb1As=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:64:21:97:7c:7f:2a:d2:88:4b:da:e2:4c:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
        Validity
            Not Before: Sep 23 07:01:04 2026 GMT
            Not After : Sep 24 07:01:04 2026 GMT
        Subject: CN=c82acdc285f39b591f24ab96fbf6acc8b80e4367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:5f:91:75:81:e3:bb:66:52:13:5e:88:88:
                    d2:5a:c4:49:01:07:02:0c:dc:b7:99:6a:88:23:27:
                    73:66:83:e1:ee:b2:ca:db:93:e8:c6:fd:12:73:49:
                    c7:5f:c0:63:f7:31:d2:bc:16:cb:43:c2:fa:28:f7:
                    3b:d9:5e:7a:2c:ca:f3:50:1a:f4:78:99:fc:da:ba:
                    ac:71:13:2a:c7:13:53:f3:e3:fe:21:b9:b6:2a:9b:
                    44:e7:0c:43:dc:8a:93:74:1d:9f:74:90:e5:91:c7:
                    67:1c:e9:20:01:e4:42:35:fd:d0:f4:0c:0b:5e:1e:
                    1a:8b:0c:da:ef:fc:bd:8b:c8:4d:10:c1:fd:18:ff:
                    3c:3f:d8:57:80:77:01:a3:b5:04:bc:c6:10:c4:18:
                    c1:47:02:d2:43:58:f7:46:d8:d5:cf:26:1d:f8:f2:
                    4b:6c:6c:e5:ce:59:ff:0d:b9:3f:81:1e:dc:f3:3d:
                    68:b5:89:57:49:fd:e1:6f:84:97:c8:7a:13:cf:e7:
                    d3:c9:27:b8:2d:28:2b:c8:40:8a:09:46:1a:36:b9:
                    ae:9f:7b:77:c6:2c:59:d7:0c:3e:84:fc:cb:1b:e8:
                    b6:e0:20:39:77:96:1b:4d:d5:0a:48:0e:6d:b8:9e:
                    d2:15:d3:be:ec:24:18:f9:0f:a4:87:04:bd:10:40:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2A:CD:C2:85:F3:9B:59:1F:24:AB:96:FB:F6:AC:C8:B8:0E:43:67
            X509v3 Authority Key Identifier:
                keyid:69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:5d:e6:54:95:9f:b9:7d:da:83:e0:c2:86:8e:85:c8:c2:
         96:3a:e6:0b:9d:4f:5a:4d:51:be:42:0d:1f:f2:7f:2b:92:ff:
         5e:3c:41:d1:64:40:a5:33:3f:1a:86:8f:02:fc:3f:a2:06:92:
         89:45:52:1c:12:1a:21:24:fb:15:b5:93:9d:0d:62:4c:88:5e:
         cc:58:66:d4:74:90:d5:7e:82:93:a5:15:33:f0:c5:dc:3b:7c:
         c8:7f:f8:7a:b1:46:69:e8:64:67:01:02:79:6d:85:32:a9:49:
         59:4c:3c:8f:1f:fa:ad:fd:8b:ab:1a:c6:a3:1f:29:ad:5f:a0:
         c5:af:4f:0d:c6:1c:ad:8b:71:95:ef:c8:bd:d3:f2:e1:5a:a3:
         64:de:72:89:76:37:4d:c6:9b:26:dd:76:bb:48:ab:6e:3b:d3:
         52:ce:ea:64:56:01:e6:3b:5f:2a:da:9a:24:92:7c:c7:f8:a8:
         8c:ad:13:16:fa:ca:fd:cb:06:b3:c4:3b:c2:bd:56:d3:f4:99:
         41:3e:bc:97:3d:50:7d:b4:52:77:94:42:11:14:c0:de:11:71:
         7b:61:64:3b:35:74:24:e6:ed:21:0f:99:53:91:e6:55:f8:48:
         95:a2:c5:59:43:57:49:56:00:95:d6:f1:43:e5:0a:80:db:8c:
         8c:7c:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:21 2026 by rpki-client