Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File:                     3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier:          DakVr3ecTWkZWWIbPplKScSc9JAt0e3+AA9FEyTyA3o=
Subject key identifier:   5D:4E:EE:B4:A7:E3:C0:FF:B0:31:B0:14:83:13:49:53:FD:B9:D1:B4
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer:       /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial:       01A0C8212C120FCAAB60E5FE796AF6573C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number:          06F0
Signing time:             Tue 22 Sep 2026 08:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:12 +0000
Files and hashes:         1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: 4PZqvf4jsaSmJDUuUfoKsY5NnslDCaz+Mh+U3jvLR40=)
                          2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:2c:12:0f:ca:ab:60:e5:fe:79:6a:f6:57:3c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
        Validity
            Not Before: Sep 22 08:00:12 2026 GMT
            Not After : Sep 23 08:00:12 2026 GMT
        Subject: CN=5d4eeeb4a7e3c0ffb031b01483134953fdb9d1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:ba:c7:f2:c9:de:78:80:a5:09:00:39:4d:
                    5f:65:bc:e8:a9:7c:e9:1a:88:51:19:00:2c:f7:2c:
                    22:94:4e:93:59:26:63:1a:61:43:24:80:cb:84:16:
                    ce:b9:02:98:6e:7d:56:d8:f5:dc:95:87:a8:68:86:
                    e1:98:a6:7b:f7:8a:ef:d6:94:25:75:e8:c2:5d:82:
                    47:54:63:54:3a:78:f3:8f:a3:e9:63:16:3e:81:9b:
                    79:e7:a1:a4:3f:f0:65:90:f0:56:56:68:f7:00:43:
                    cd:01:67:2f:a2:79:fd:7f:9a:14:85:6b:66:3a:05:
                    a1:04:9a:af:2a:5f:5a:45:cc:94:f3:dd:5c:a5:53:
                    69:89:21:90:51:c2:bc:ae:37:63:2d:6b:be:ed:7f:
                    8b:d3:a6:20:c1:ab:09:f6:df:22:39:e1:b6:1b:58:
                    16:b3:4c:24:69:61:d5:b2:7e:96:c0:bf:a0:a3:e4:
                    97:69:2c:28:87:74:40:07:32:ae:62:36:2a:13:a7:
                    b9:b9:96:77:ca:ea:55:44:a5:d9:e0:16:36:67:d6:
                    4f:4a:c7:c5:e6:39:05:d6:9b:57:0b:4e:6f:17:5e:
                    1a:0d:a4:c0:57:a6:f2:2a:bd:5c:b1:45:0e:74:56:
                    4f:14:f9:f9:4c:f3:8d:50:25:e3:96:2f:f1:5d:4e:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4E:EE:B4:A7:E3:C0:FF:B0:31:B0:14:83:13:49:53:FD:B9:D1:B4
            X509v3 Authority Key Identifier:
                keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:33:8b:8e:0f:67:8c:42:09:e8:30:4f:f1:91:98:df:14:
         6c:af:83:cb:e2:4f:ca:02:6f:6e:bf:8a:7e:81:c9:87:d0:a4:
         f1:89:8b:95:09:7c:9b:c9:27:b0:4f:53:d2:7f:b9:f6:d5:60:
         7f:7c:48:03:70:19:69:ba:83:2c:68:2e:fd:89:e3:09:31:72:
         7f:db:91:0d:77:58:a1:b2:43:06:7f:ab:1d:aa:46:49:65:a8:
         5c:8b:85:27:b6:38:d8:34:ca:ba:4b:5b:bc:8f:cf:2c:c0:d1:
         58:18:35:c7:ab:ad:1c:68:e8:90:85:7f:18:bc:ba:d7:45:cf:
         e7:a1:a2:1e:eb:67:bd:bb:4b:6a:34:23:18:e3:72:3d:b2:e4:
         1e:da:75:bd:d1:74:c6:b2:37:52:90:d5:87:85:1f:4e:6b:0e:
         5d:8e:73:c4:e3:21:5e:19:08:9f:97:e9:70:8b:96:39:b9:35:
         7a:23:f8:49:fa:ee:1b:98:81:b0:ec:bd:1e:54:60:65:53:7b:
         9d:24:36:ae:ab:12:81:06:52:a7:d3:43:d0:f9:7b:2b:0d:12:
         07:1b:90:bb:9b:5c:01:a1:77:95:32:67:2f:89:80:1e:c4:94:
         ed:aa:51:15:5c:ab:e8:cd:de:bc:5b:9b:0c:12:7e:0c:91:a3:
         15:d3:da:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:14:57 2026 by rpki-client