Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          lYm/WgD0kFUBwfC/k0QjDiX+OWnkN9eiWxdlIARJ9iY=
Subject key identifier:   A2:1B:93:DA:A8:FA:2E:2F:57:78:F3:77:62:3D:07:F8:3A:E4:96:2A
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       01A0C58E1D8E5450A60D1460C9A66C464F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          119A
Signing time:             Mon 21 Sep 2026 20:00:20 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:20 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:20 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: 8EYuQsCgUDv13MRp3pDSXOm8PlySYEkWBV+Ws+/sHFg=)
                          2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:1d:8e:54:50:a6:0d:14:60:c9:a6:6c:46:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Sep 21 20:00:20 2026 GMT
            Not After : Sep 22 20:00:20 2026 GMT
        Subject: CN=a21b93daa8fa2e2f5778f377623d07f83ae4962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:9e:5d:ac:50:6a:6f:2a:d2:34:79:da:ad:
                    89:7f:07:1f:62:35:58:93:7a:7c:1d:5c:64:ed:b6:
                    d9:49:b8:f2:30:06:c5:ee:43:9d:90:1f:5a:0e:a0:
                    be:dd:a7:ad:43:30:ad:c7:c3:c1:31:ba:d5:de:c2:
                    17:1d:18:05:e2:f8:2a:27:b3:a6:c3:52:60:9b:d1:
                    1d:6c:0f:41:4f:4d:a5:0d:e2:a8:0a:d7:f9:c4:c6:
                    56:4b:5a:3c:fe:9d:99:2a:d5:4d:17:f2:dc:e1:97:
                    2a:99:ac:d5:ef:73:12:72:48:e2:6e:c7:21:cd:2b:
                    a6:a7:ee:ff:dc:df:c7:29:1b:bb:54:62:b1:82:d5:
                    40:00:21:76:b0:09:c3:14:09:7a:51:dc:0f:c3:16:
                    9b:3a:17:13:a8:c4:14:ab:06:32:81:cd:0b:cc:bb:
                    18:8c:7f:e2:81:c4:65:b7:e8:19:fc:e7:6e:3a:e6:
                    96:28:74:70:99:73:c2:0a:4a:8b:e9:28:6f:dd:e9:
                    27:ff:49:ea:f1:c1:81:27:12:3f:c9:8b:c5:48:6c:
                    07:f3:cb:a8:1c:4c:f5:74:51:77:81:7b:a7:60:4b:
                    64:5c:40:d2:5b:ac:ce:01:f5:37:34:ad:74:b1:16:
                    a2:ea:6d:c8:cb:fe:73:66:bd:fe:14:3d:ba:46:7e:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1B:93:DA:A8:FA:2E:2F:57:78:F3:77:62:3D:07:F8:3A:E4:96:2A
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:c2:ac:4a:74:d9:73:37:36:4b:e7:38:7c:c0:b0:70:5e:
         e5:de:6a:31:89:4b:5b:f4:85:1b:a5:b2:3d:0e:14:90:5e:5d:
         23:9d:8d:7f:5e:67:3a:25:66:65:41:28:45:36:b7:5c:9b:c8:
         a7:08:a4:da:45:45:f5:31:a3:82:36:09:57:f6:cc:c4:0e:0c:
         53:7d:93:5d:a8:00:16:78:54:a9:63:c6:09:ae:74:53:d5:14:
         8f:5f:18:5c:b2:5e:69:3c:45:b1:65:5c:25:e8:b7:4e:50:0d:
         2b:70:bf:1a:e7:ff:79:c7:7b:73:57:96:a0:b0:23:07:33:cc:
         f5:99:70:41:e2:1b:64:b4:11:ff:e2:2c:df:31:2f:0b:ed:d6:
         29:cf:39:30:d8:de:d6:d2:f0:2c:49:08:e3:78:30:46:b3:91:
         5d:1e:44:bc:c2:39:1e:d4:a4:c8:80:4a:45:0e:40:7e:95:2e:
         43:36:a4:84:b6:e5:3d:39:fc:b9:f9:4e:7b:20:3f:aa:38:bd:
         15:d6:d4:9c:39:7d:b2:93:55:29:f7:ca:7b:09:eb:1e:4f:16:
         03:80:39:97:e7:b9:a6:75:53:96:f9:d6:fa:6b:d4:8a:c1:38:
         11:2d:09:ea:16:7f:e1:69:a4:47:8c:7c:1e:21:7c:7f:6e:a5:
         7c:50:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:00:13 2026 by rpki-client