Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File:                     S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier:          8ft4iqoRnBpase9XCCVDXVCRKi++WOSQHizuQt8kSlg=
Subject key identifier:   51:21:0E:19:66:0A:8D:F5:A3:15:F6:78:A0:BF:B0:20:44:0E:B2:E9
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer:       /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial:       01A139A47B033F9F6A0785F7426AAAE41A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number:          03AC
Signing time:             Wed 14 Oct 2026 09:00:42 +0000
Manifest this update:     Wed 14 Oct 2026 09:00:42 +0000
Manifest next update:     Thu 15 Oct 2026 09:00:42 +0000
Files and hashes:         1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
                          2: DXccqbGebS1oWRZWwtuGkEM6mrE.roa (hash: sAlKBAN/NVbEzYwknbZfL2yJYktB8VaTsi+xqD0lVdY=)
                          3: HRsaNSH7K7gQIpvBegWGreESM_c.roa (hash: l8HiNYAa3uanY7zDmX7yurzSLByL+f17mBRuyOPffhs=)
                          4: It-qSuqg1nORN9qz8qJhvVHh0Tc.roa (hash: KxdlqZXgyK58HjjchXGa22KcxK8WWRG2Djtkh0Q+II4=)
                          5: OTNnq40RHs6-RO1vnyF5GX8jSSo.roa (hash: GEnAb11gm/0k4gAv45gZBRalx642vYu648871Hhzo1c=)
                          6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: ki4RFWcexJ5D3S455WZO65oHGomBkc5/dx62ju/2zWo=)
                          7: qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa (hash: P+9IofTZBAc1XWPoAjdQhkamibGq6Uq0JX0SkWEsNv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:a4:7b:03:3f:9f:6a:07:85:f7:42:6a:aa:e4:1a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
        Validity
            Not Before: Oct 14 09:00:42 2026 GMT
            Not After : Oct 15 09:00:42 2026 GMT
        Subject: CN=51210e19660a8df5a315f678a0bfb020440eb2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4c:b9:73:a6:2e:42:e2:8f:29:04:ca:b6:24:
                    87:5e:cb:79:34:35:e5:e3:e2:fb:9b:08:4a:0a:6c:
                    e5:90:56:cb:9b:84:e8:ea:c2:11:96:d2:2d:7a:db:
                    a1:0f:20:75:a5:4d:65:2d:a3:90:e1:eb:24:2f:93:
                    46:88:13:7d:19:8b:86:e6:d9:e7:6f:14:c5:96:4f:
                    1e:44:59:91:12:f2:50:9f:1c:f0:d8:51:cb:23:38:
                    bf:57:3e:60:73:b1:c7:32:6b:19:74:da:a0:8e:d3:
                    10:b4:29:b3:2b:d2:a9:13:82:4d:15:05:1f:85:ac:
                    99:ea:95:e4:4a:3a:88:d1:78:91:d4:35:20:4c:63:
                    93:8e:72:4a:78:77:76:ab:7e:d8:57:61:34:f0:cc:
                    7b:ed:bf:33:aa:31:90:78:8c:ed:6c:90:5d:93:2f:
                    9f:21:ea:36:f5:dd:70:da:42:ae:97:f4:58:4b:6b:
                    f1:67:57:b4:09:a1:0f:c4:ab:9d:1b:78:3e:f7:b7:
                    7b:0c:db:c8:16:14:62:1d:eb:b4:c5:59:fd:8c:ea:
                    f3:40:ad:5e:2d:14:88:44:30:d5:05:ee:a3:72:d7:
                    8f:b6:44:65:77:30:1d:eb:1b:bb:d6:eb:ec:48:b4:
                    f7:c2:f3:df:00:66:01:8b:0e:61:68:43:cb:6c:55:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:0E:19:66:0A:8D:F5:A3:15:F6:78:A0:BF:B0:20:44:0E:B2:E9
            X509v3 Authority Key Identifier:
                keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:1e:1b:78:b5:25:5e:19:9c:86:6a:cc:be:8a:54:36:75:
         41:f5:26:3c:4c:b6:a6:67:aa:19:22:78:ca:b3:83:91:c2:6f:
         57:f2:1e:8f:88:64:1d:91:cf:6a:fb:83:ac:61:43:36:69:8e:
         82:9d:70:ae:14:a5:6c:55:ef:32:c6:a0:4c:14:ef:4f:37:ad:
         ff:27:63:ad:6b:e4:cc:d1:c9:34:42:06:b2:22:35:03:cb:25:
         76:e0:e8:ad:1a:96:8f:a6:be:9c:8a:0f:f1:a8:39:ef:23:cd:
         30:40:a9:e4:16:b4:29:6e:a3:e9:b1:5e:38:e4:cb:e1:8a:14:
         d7:29:3c:56:78:07:3a:5c:4b:16:ec:c5:d6:d4:ae:26:fa:2f:
         cb:01:09:44:6a:f6:24:e5:ac:1a:3b:de:90:2a:57:dd:a3:6e:
         23:18:1c:e0:94:49:37:9b:e2:2b:9b:9e:65:25:9a:26:93:6d:
         dd:80:67:f4:f2:dc:a3:a3:f9:8f:8a:ce:f1:7f:61:fd:e0:27:
         bb:7f:da:d2:77:8f:cf:7e:4a:72:0e:5e:af:08:35:85:87:b8:
         30:e9:ad:9f:c0:c5:f1:41:e3:db:54:26:3f:0c:bd:8f:35:2b:
         0a:54:08:02:7b:61:a5:1e:11:bb:da:9a:62:7b:c8:f6:8a:4d:
         50:34:7b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5pHsDP59qB4X3Qmqq5BptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYxMDE0MDkwMDQyWhcNMjYxMDE1MDkwMDQyWjAzMTEwLwYDVQQD
Eyg1MTIxMGUxOTY2MGE4ZGY1YTMxNWY2NzhhMGJmYjAyMDQ0MGViMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEy5c6YuQuKPKQTKtiSHXst5NDXl
4+L7mwhKCmzlkFbLm4To6sIRltItetuhDyB1pU1lLaOQ4eskL5NGiBN9GYuG5tnn
bxTFlk8eRFmREvJQnxzw2FHLIzi/Vz5gc7HHMmsZdNqgjtMQtCmzK9KpE4JNFQUf
hayZ6pXkSjqI0XiR1DUgTGOTjnJKeHd2q37YV2E08Mx77b8zqjGQeIztbJBdky+f
Ieo29d1w2kKul/RYS2vxZ1e0CaEPxKudG3g+97d7DNvIFhRiHeu0xVn9jOrzQK1e
LRSIRDDVBe6jctePtkRldzAd6xu71uvsSLT3wvPfAGYBiw5haEPLbFV+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEhDhlmCo31oxX2eKC/sCBEDrLpMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMceG3i1
JV4ZnIZqzL6KVDZ1QfUmPEy2pmeqGSJ4yrODkcJvV/Iej4hkHZHPavuDrGFDNmmO
gp1wrhSlbFXvMsagTBTvTzet/ydjrWvkzNHJNEIGsiI1A8slduDorRqWj6a+nIoP
8ag57yPNMECp5Ba0KW6j6bFeOOTL4YoU1yk8VngHOlxLFuzF1tSuJvovywEJRGr2
JOWsGjvekCpX3aNuIxgc4JRJN5viK5ueZSWaJpNt3YBn9PLco6P5j4rO8X9h/eAn
u3/a0nePz35Kcg5erwg1hYe4MOmtn8DF8UHj21QmPwy9jzUrClQIAnthpR4Ru9qa
YnvI9opNUDR7hg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:41:13 2026 by rpki-client