Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File:                     3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier:          JQlqyVa9DWMR/w26GjSYTIsFaqGU0pEd4lNTbTXNoe0=
Subject key identifier:   E9:0E:8B:B6:48:43:B0:33:E5:32:11:FE:01:44:1F:C9:61:83:5F:A5
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer:       /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial:       01A0C96AC6009ACAB6EA400B2E0B44CA48D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number:          0E6D
Signing time:             Tue 22 Sep 2026 14:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:12 +0000
Files and hashes:         1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: 75yJhTe05dTDZzqAevnQqTWOehPeV7nZIU8CPejvXwg=)
                          2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6a:c6:00:9a:ca:b6:ea:40:0b:2e:0b:44:ca:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
        Validity
            Not Before: Sep 22 14:00:12 2026 GMT
            Not After : Sep 23 14:00:12 2026 GMT
        Subject: CN=e90e8bb64843b033e53211fe01441fc961835fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:ea:6b:82:23:c5:7e:45:21:c6:d4:dc:a1:
                    40:9a:72:93:0a:b7:6e:f8:ec:9a:86:fe:d7:05:83:
                    7c:ad:9d:09:79:71:de:fd:70:ea:72:c3:f0:71:6b:
                    63:eb:1d:97:2e:de:b8:fb:cb:15:25:b6:7c:33:f5:
                    86:11:0f:8b:f5:d6:90:90:00:44:50:2a:8b:6b:94:
                    32:09:2b:13:a2:a9:b0:3d:57:85:52:4c:39:a5:36:
                    a6:b5:51:28:f4:00:4a:3b:25:9d:2a:05:a1:ff:4e:
                    6d:3e:f1:0c:42:12:9a:ac:8e:2a:c0:14:14:80:74:
                    ce:de:65:1e:bf:6b:07:a6:18:e2:f3:ad:f7:be:03:
                    f6:0f:d1:a7:43:b4:76:5b:c0:7e:8b:27:d9:1f:76:
                    bd:b0:4d:94:cb:ae:e3:70:a3:33:4c:10:54:89:a4:
                    a0:f3:0c:00:5a:15:39:7d:c6:1c:98:91:a2:c8:ce:
                    e5:94:60:52:97:90:5c:7a:cc:a9:b5:b4:f6:10:d4:
                    f0:35:fe:2e:90:89:2b:16:13:60:8e:04:80:bc:d7:
                    0b:31:fc:e7:16:42:bd:b4:df:89:7b:e0:48:3d:3c:
                    da:40:04:d2:44:3b:ab:ca:71:b7:3e:d2:0a:80:16:
                    2f:b6:86:10:22:d4:b2:d3:00:99:9a:a6:63:96:a0:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:8B:B6:48:43:B0:33:E5:32:11:FE:01:44:1F:C9:61:83:5F:A5
            X509v3 Authority Key Identifier:
                keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:30:d0:7b:42:ca:8d:22:88:4a:3f:32:ac:24:58:0c:d9:
         3e:c5:5f:04:25:9d:f6:79:94:0c:a8:32:43:38:c1:f2:ce:a8:
         61:bb:7f:49:89:d3:59:f5:2f:8f:82:15:dc:08:e0:18:4f:b0:
         c0:e0:63:32:78:12:7c:7c:66:dd:6a:71:b7:98:2b:b7:f5:52:
         7a:31:30:f3:d5:02:a6:51:58:39:96:62:d2:eb:44:10:32:d3:
         45:3f:be:9e:55:82:f1:b3:66:64:fe:ff:5f:dd:2b:cd:ad:ba:
         2b:0a:c8:9a:ab:a4:ec:d4:d5:2d:5c:80:67:6d:01:de:c4:dd:
         79:bb:2b:ed:27:42:7a:17:63:ed:10:94:fd:38:b5:94:7b:54:
         3b:e6:c3:23:61:8a:ea:2d:19:77:79:44:3b:11:44:e1:a8:05:
         bf:81:9c:9d:e4:25:74:65:9d:e6:d5:51:92:b6:92:a7:8c:04:
         93:9d:8e:d8:00:49:87:e2:cd:be:22:16:67:01:7a:8d:d9:e3:
         de:44:27:68:df:19:3a:ee:30:3f:dd:b2:21:29:76:01:34:ba:
         ed:a0:31:bb:b3:f6:90:1e:d7:0d:cd:80:39:d3:3f:05:ee:3f:
         83:27:d1:39:12:7b:df:4c:c4:b7:ed:e5:b5:5a:1a:0b:3c:02:
         d0:54:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:03:09 2026 by rpki-client