Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File:                     3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier:          PhnViMRCbWdlmTyXL6vWIlGuLs5jbw322eZ7M/uzqVI=
Subject key identifier:   DA:1F:7C:B9:8B:6A:4F:D2:9E:BA:5D:0E:3E:53:8F:63:8B:9A:78:AB
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer:       /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial:       01A0C6330B3C576E9440B63D5A1B63C9F604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number:          16AF
Signing time:             Mon 21 Sep 2026 23:00:29 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:29 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:29 +0000
Files and hashes:         1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: VDBM9dNz09/JVmhcJGZ8Ay/tLrEg0CkNnRSrjuMlmDA=)
                          2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:0b:3c:57:6e:94:40:b6:3d:5a:1b:63:c9:f6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
        Validity
            Not Before: Sep 21 23:00:29 2026 GMT
            Not After : Sep 22 23:00:29 2026 GMT
        Subject: CN=da1f7cb98b6a4fd29eba5d0e3e538f638b9a78ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:47:c6:5d:77:3c:4b:a6:b2:d4:8c:e9:1c:
                    84:4a:65:ce:36:ce:43:b8:ad:2a:55:b3:1a:ae:84:
                    70:4c:40:c8:cc:35:13:8a:1a:f6:9a:4b:d9:3e:5e:
                    93:51:1c:da:fb:10:0b:0c:48:82:dc:3c:94:f6:16:
                    82:78:5e:f8:28:fd:be:be:f8:54:01:4a:54:56:88:
                    49:98:54:46:c5:f7:87:36:48:0e:d5:27:19:17:16:
                    4a:99:46:c9:93:f6:e8:92:70:ce:57:22:75:43:d3:
                    ee:ba:20:10:2d:c7:a9:1f:4e:c9:ba:8a:2d:96:a3:
                    ee:93:be:c8:c7:8f:a4:d8:63:8f:27:aa:dd:bc:2f:
                    d3:51:de:52:bc:0a:0c:9d:11:b0:67:a4:92:d4:90:
                    36:05:30:81:e8:a1:8c:a9:21:87:73:f8:31:4a:b2:
                    ae:ca:6d:3d:ab:df:2e:48:05:f0:bc:38:8a:72:45:
                    05:6f:f8:ce:57:47:09:59:37:90:55:4a:43:69:ab:
                    46:73:b8:60:c5:23:0e:4d:6f:08:0d:de:5b:4d:57:
                    bd:ce:07:2b:58:c8:e8:51:f1:a3:55:96:97:2e:bf:
                    67:ba:03:ed:b8:ad:b0:b0:b5:fb:37:e1:d3:00:6a:
                    9c:6f:c1:35:94:ab:7f:ff:aa:aa:7e:69:47:de:3c:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1F:7C:B9:8B:6A:4F:D2:9E:BA:5D:0E:3E:53:8F:63:8B:9A:78:AB
            X509v3 Authority Key Identifier:
                keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:4d:5f:53:c9:a9:5b:5d:8b:f2:22:53:d9:8b:30:aa:4e:
         5f:51:5e:3f:3e:09:60:2b:b7:9f:79:c4:70:d5:dd:35:e8:b1:
         27:c2:0a:38:1f:90:e4:60:07:f1:30:e7:ff:d4:70:1c:d3:84:
         69:dc:d8:c4:d0:3d:85:9e:5b:7a:91:cd:1e:a8:b7:2f:cb:4c:
         3b:20:82:fb:fc:2d:37:97:83:58:3e:47:08:b3:a4:ec:9b:1a:
         b7:82:6f:e6:b9:32:48:70:94:e4:42:3e:06:ab:8e:14:93:b1:
         79:62:80:8e:3a:41:3c:a9:33:2b:ca:d8:e9:c1:19:1b:3d:23:
         59:0b:5a:a3:cd:61:d8:5a:8a:71:08:d1:f5:99:b5:cb:79:40:
         2e:e4:72:07:24:70:06:cd:aa:36:eb:86:ae:ec:16:6f:f9:58:
         c7:4f:4b:ef:37:cd:98:1b:f2:c5:9a:99:9a:8e:a6:9e:9b:f3:
         5c:bd:4d:c9:f5:5b:ea:bd:32:d0:30:a5:96:f5:a1:ca:33:8d:
         b6:2f:ae:a3:6d:52:8c:48:a4:b8:37:67:30:26:d1:01:62:36:
         3d:04:6f:4e:74:4b:43:89:64:8b:2e:cd:c0:f6:12:2c:59:8b:
         48:b7:68:60:e9:09:ee:63:94:ad:75:28:8b:e1:27:20:ad:3a:
         bd:51:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:06 2026 by rpki-client