Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          Nf9Y7Iut9LY8ctO8coWP7QqM11HF1S4hLp7FjGhI1DE=
Subject key identifier:   FA:28:B6:14:17:17:50:A4:00:5F:26:90:19:E8:DA:2E:79:10:59:74
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       01A0C6D8127414C14B61A27E9CCD92667A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0BA2
Signing time:             Tue 22 Sep 2026 02:00:44 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:44 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:44 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: r6G/0GkCalVKCY+LnWewJYaCDhtXMG1pILvABAZmJsU=)
                          2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:12:74:14:c1:4b:61:a2:7e:9c:cd:92:66:7a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Sep 22 02:00:44 2026 GMT
            Not After : Sep 23 02:00:44 2026 GMT
        Subject: CN=fa28b614171750a4005f269019e8da2e79105974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:67:0c:04:4e:dc:f8:30:42:9d:1b:ca:86:
                    af:0c:ed:07:ba:aa:c1:5f:df:bb:d2:8e:c6:85:a4:
                    2e:19:80:c9:18:1d:ba:be:0e:66:02:7e:7b:60:02:
                    db:81:eb:98:4b:28:16:25:b1:70:87:2a:ab:89:ce:
                    83:9a:1b:54:a7:52:79:b7:e5:73:77:a1:f7:44:3d:
                    a9:1a:7f:45:14:83:23:0b:56:98:f8:8c:9d:75:22:
                    79:6f:50:5a:a4:50:aa:c0:ed:d9:48:1b:6b:db:ed:
                    da:93:ff:c6:0a:26:22:96:c6:3e:74:98:9c:fb:78:
                    79:9e:e2:35:96:67:bd:44:27:7d:fd:d8:f4:52:49:
                    d6:01:cd:04:bb:22:b2:f2:35:3a:c6:52:71:49:a9:
                    d2:cb:aa:ac:46:ef:b1:e0:e2:59:5d:b9:a8:9b:71:
                    bf:55:bb:68:6d:53:4f:51:c2:75:24:01:11:34:6c:
                    61:b5:32:fe:6f:44:ec:8d:dc:2b:25:1c:82:54:82:
                    01:04:9e:83:68:b7:e0:46:1a:bb:b0:14:5c:06:2b:
                    48:2e:0b:16:19:90:a0:6d:64:34:fb:fd:76:bc:2c:
                    e0:63:83:d0:5f:27:ab:53:14:4c:90:ce:9e:df:bf:
                    e1:03:71:c8:2e:91:3a:e7:6b:6d:c0:cb:5f:a1:4f:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:B6:14:17:17:50:A4:00:5F:26:90:19:E8:DA:2E:79:10:59:74
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:e3:e1:ed:57:2c:e4:96:68:e4:42:f1:1d:6e:af:49:98:
         ce:63:e5:aa:7f:81:75:5f:66:c6:47:07:39:84:21:d0:e5:00:
         8d:6f:31:28:32:11:e8:12:00:54:c3:5e:20:91:cd:98:ac:37:
         21:00:a4:fe:ef:12:89:a2:da:24:69:2d:df:1a:bb:2e:31:4b:
         a6:be:ee:b2:1f:f9:84:1d:0d:da:54:fb:00:fa:2c:71:01:68:
         6e:15:bd:6d:10:ad:5f:78:0e:bc:c6:df:1f:c1:f8:b6:5f:46:
         bb:55:ee:25:4c:a4:3e:d0:2c:67:1a:03:48:a7:e5:cf:86:94:
         91:a4:f7:5d:61:e0:a2:54:ea:7e:2d:0f:33:ee:85:19:46:b6:
         48:d1:ca:ea:15:5d:02:25:3e:f6:84:fc:e5:f4:1e:48:8a:49:
         ca:6f:44:33:82:1c:b0:99:51:51:55:30:21:9c:07:28:de:bd:
         99:d9:05:22:0f:d3:bc:73:dd:4c:d3:aa:e3:3f:4a:04:25:0b:
         3f:65:d1:3f:9c:6f:50:75:f0:1f:7a:f8:40:ae:5f:27:a4:b0:
         6c:d7:c4:a6:1c:79:34:c1:56:a7:71:97:0e:f0:d7:d6:d9:4d:
         6c:7c:3e:13:b1:95:f0:0f:e3:9e:12:95:f1:83:74:70:ab:e7:
         20:cf:73:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2BJ0FMFLYaJ+nM2SZnpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjYwOTIyMDIwMDQ0WhcNMjYwOTIzMDIwMDQ0WjAzMTEwLwYDVQQD
EyhmYTI4YjYxNDE3MTc1MGE0MDA1ZjI2OTAxOWU4ZGEyZTc5MTA1OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctnDARO3PgwQp0byoavDO0HuqrB
X9+70o7GhaQuGYDJGB26vg5mAn57YALbgeuYSygWJbFwhyqric6DmhtUp1J5t+Vz
d6H3RD2pGn9FFIMjC1aY+IyddSJ5b1BapFCqwO3ZSBtr2+3ak//GCiYilsY+dJic
+3h5nuI1lme9RCd9/dj0UknWAc0EuyKy8jU6xlJxSanSy6qsRu+x4OJZXbmom3G/
VbtobVNPUcJ1JAERNGxhtTL+b0TsjdwrJRyCVIIBBJ6DaLfgRhq7sBRcBitILgsW
GZCgbWQ0+/12vCzgY4PQXyerUxRMkM6e37/hA3HILpE652ttwMtfoU+J8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoothQXF1CkAF8mkBno2i55EFl0MB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndnj4e1X
LOSWaORC8R1ur0mYzmPlqn+BdV9mxkcHOYQh0OUAjW8xKDIR6BIAVMNeIJHNmKw3
IQCk/u8SiaLaJGkt3xq7LjFLpr7ush/5hB0N2lT7APoscQFobhW9bRCtX3gOvMbf
H8H4tl9Gu1XuJUykPtAsZxoDSKflz4aUkaT3XWHgolTqfi0PM+6FGUa2SNHK6hVd
AiU+9oT85fQeSIpJym9EM4IcsJlRUVUwIZwHKN69mdkFIg/TvHPdTNOq4z9KBCUL
P2XRP5xvUHXwH3r4QK5fJ6SwbNfEphx5NMFWp3GXDvDX1tlNbHw+E7GV8A/jnhKV
8YN0cKvnIM9zDQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:28:06 2026 by rpki-client