Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File:                     rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier:          11fvi9UspMh0WlwonZFk+3KjqD3MxWvgvz2UVQrhWHE=
Subject key identifier:   6E:D6:DA:27:17:C1:54:66:06:91:DF:DA:91:7B:FD:A2:5A:A3:7C:56
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer:       /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial:       01A0C745AA71EA234922E287E6959347A65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number:          114E
Signing time:             Tue 22 Sep 2026 04:00:26 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:26 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:26 +0000
Files and hashes:         1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
                          2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
                          3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: FyS/K0vASDkfVt+Wzvrr5ItzgSu0GKSfQB9iRB2Pe/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:45:aa:71:ea:23:49:22:e2:87:e6:95:93:47:a6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
        Validity
            Not Before: Sep 22 04:00:26 2026 GMT
            Not After : Sep 23 04:00:26 2026 GMT
        Subject: CN=6ed6da2717c154660691dfda917bfda25aa37c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:1e:95:43:7e:93:54:0d:b7:56:17:46:43:
                    28:ad:9a:6c:7a:c0:68:84:2e:8c:54:f8:15:92:0a:
                    86:7d:69:31:4e:46:14:2d:1a:06:9b:07:6c:22:ac:
                    b8:84:4e:79:db:2b:b3:75:be:1c:2e:b8:62:2a:d6:
                    4d:0a:48:be:f7:6d:89:47:8b:23:25:d1:85:5e:db:
                    cd:3e:1a:6f:f3:bb:ca:b2:1b:fc:0e:f2:b4:1b:0e:
                    c8:32:05:b5:99:df:ae:86:e4:90:6d:ff:22:33:ad:
                    ab:7e:8d:b7:60:4b:4c:4a:30:94:3d:4e:50:12:43:
                    a0:14:68:be:f3:93:06:51:94:49:fa:08:60:7d:2c:
                    4b:d8:a8:61:b7:f1:e6:78:35:36:ba:1a:76:56:f4:
                    55:6e:6f:19:c0:30:36:84:42:1f:ab:32:f7:f7:4e:
                    b2:e3:9b:aa:e9:44:1d:57:6d:ea:91:a9:1b:74:f0:
                    14:db:74:86:37:21:1f:8f:44:f0:5b:9c:65:13:c6:
                    c3:3e:90:fb:d1:57:e2:78:ef:76:5f:d7:7e:1a:b6:
                    76:5e:79:ad:dc:18:cf:64:ab:4b:8f:8b:2c:4f:5e:
                    37:bb:1a:c5:0e:2e:6d:a2:5c:15:4d:32:85:7e:00:
                    54:9f:58:53:86:ff:11:78:67:53:f8:0a:ea:09:b6:
                    84:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D6:DA:27:17:C1:54:66:06:91:DF:DA:91:7B:FD:A2:5A:A3:7C:56
            X509v3 Authority Key Identifier:
                keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:02:b5:3e:7a:78:71:6e:ed:3f:06:24:67:46:7f:06:79:9a:
         62:86:c6:bc:a9:17:b8:25:0d:67:c2:80:89:07:88:f6:8e:ab:
         d0:89:ed:06:9d:ad:58:f8:d7:d4:f1:f0:5b:7a:91:ab:30:df:
         d1:71:cb:08:54:86:27:38:f4:5c:7e:b3:1b:cf:26:66:15:54:
         03:be:58:75:ca:82:6d:12:5f:f2:3e:c9:53:03:b5:7e:05:f8:
         c1:7b:07:2a:1c:b6:a4:15:4e:66:36:44:25:d0:8a:4e:18:6f:
         cf:e3:8e:2b:3f:d1:83:31:c9:0b:c3:a4:3b:ab:bc:2b:e5:ec:
         a0:0c:36:91:7f:29:d4:5d:f5:5c:ec:7f:c4:27:bb:58:8c:6c:
         9c:50:cd:19:17:54:a8:f3:e9:4a:f0:5b:58:d3:4e:93:f1:bd:
         79:1f:4e:a9:c0:06:f4:ec:1e:30:a4:da:8d:bd:dc:38:16:72:
         58:1a:50:ff:c2:fe:1e:af:16:d0:b9:bf:64:f8:c0:10:08:1d:
         1f:c2:39:38:1c:07:4e:82:7c:30:56:26:61:b9:83:3c:ff:a8:
         7c:fa:b3:18:02:f0:b6:5a:e8:a8:5b:24:1c:43:bc:2c:7b:2a:
         57:ad:00:ff:4a:49:91:11:ae:85:d5:69:4d:d9:71:09:b1:14:
         79:58:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:12 2026 by rpki-client