Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
File:                     3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft (raw, json)
Hash identifier:          tGduw9hiZKGmuNegOV5bVBCTtNI9j7toBZ8CWr9TKnw=
Subject key identifier:   3C:F3:0B:CC:CE:18:3C:6E:72:28:54:34:06:14:19:2E:A5:A5:16:A8
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Certificate issuer:       /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial:       01A0C368C65FC7CF4885936F08C512D41DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 10:00:18 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:18 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:18 +0000
Files and hashes:         1: 3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl (hash: JHBoieKBvEHqWKhMKdPErikJRdJQcxLzgT6gNRplcQA=)
                          2: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (hash: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=)
                          3: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (hash: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=)
                          4: pUQRSDfWqJEoJFfVuZVUVOmlYsk.roa (hash: 9jvQHXY6BnSchwKk/mPiFTBcmMYYo7JbR6ZjMBc/ZDo=)
                          5: uLHH6IqO22bZWZTgO9nKR2wQbJE.roa (hash: laj7eTzK3jKEChy9oG/lzbHF9H3dpCdbB2ksudV3h+Y=)
                          6: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (hash: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:68:c6:5f:c7:cf:48:85:93:6f:08:c5:12:d4:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
        Validity
            Not Before: Sep 21 10:00:18 2026 GMT
            Not After : Sep 22 10:00:18 2026 GMT
        Subject: CN=3cf30bccce183c6e722854340614192ea5a516a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:be:13:79:fe:0c:e3:89:b9:ab:9f:64:7b:
                    b1:bd:9c:a7:48:12:c0:4a:d2:38:04:69:d5:76:3a:
                    59:19:83:5a:ef:c9:a9:3d:d5:d4:1e:f8:30:3a:97:
                    e1:20:81:60:50:0f:89:46:5b:42:a6:55:79:c3:41:
                    42:5d:7c:0c:f3:76:39:e1:67:e7:70:3d:5f:3e:4e:
                    5b:32:37:eb:5f:6a:d9:45:2a:81:97:1f:1e:e1:63:
                    2f:9c:80:f1:30:c2:55:cc:9a:2e:53:e0:3b:21:28:
                    92:1a:72:a8:25:4d:c0:65:94:b4:54:c5:9d:21:73:
                    9a:9c:3a:0b:49:63:1a:06:d5:8b:7e:31:80:28:75:
                    25:85:ac:da:4f:b2:15:a5:41:38:5a:c5:bd:d6:a8:
                    6d:b7:95:ff:a3:3c:6c:84:df:6e:cb:69:a7:7c:20:
                    a7:3a:27:39:fd:de:77:eb:8f:d1:b8:56:25:90:fc:
                    22:7b:85:03:98:37:a3:cb:0e:d7:e1:c7:93:de:fe:
                    70:80:c3:ec:72:5e:70:c1:0b:46:2e:7f:57:f4:53:
                    ad:cf:1a:62:3f:27:2e:ba:a8:08:14:26:cf:66:5d:
                    89:8f:27:26:b4:05:17:7b:a4:6c:3c:f9:03:9f:49:
                    de:c0:05:3a:5b:a9:ce:53:3f:5a:90:b2:33:92:ef:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F3:0B:CC:CE:18:3C:6E:72:28:54:34:06:14:19:2E:A5:A5:16:A8
            X509v3 Authority Key Identifier:
                keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:86:41:cf:72:4a:10:ad:3f:11:a1:e9:8c:2f:b9:4e:8b:
         d4:9d:2e:7a:58:d3:4d:42:19:8d:61:8f:de:c3:5b:54:fd:4c:
         6e:89:ea:48:34:47:e6:3b:a1:ba:7e:49:a8:3d:c0:bc:91:55:
         8a:1e:bc:d7:21:18:8a:b0:6e:ff:c2:81:13:e7:fb:ba:77:83:
         85:a7:26:32:b8:fa:93:b2:50:7e:56:f4:f7:c4:0f:f0:9a:6c:
         67:09:1c:7e:65:af:91:8c:2c:23:7a:62:2c:0a:b1:79:6b:41:
         5d:63:eb:0d:3c:24:08:5b:6e:8c:86:43:a5:f2:56:fa:cf:bb:
         8b:2e:cf:08:32:f4:e9:c1:67:b0:00:5f:e6:52:89:e3:e3:9d:
         bb:e5:b4:db:a3:6d:ea:32:cd:53:c2:1f:4e:e0:fa:68:43:81:
         6c:78:df:84:e5:f1:5e:e6:14:54:e3:7b:10:2a:17:66:7b:44:
         f4:2a:b5:e0:6b:32:2a:34:13:80:cd:7f:7d:f9:fa:68:a3:07:
         b5:fb:86:62:e7:bb:cc:02:e5:7d:7c:dd:3f:3c:19:b1:a2:31:
         4a:31:4b:8f:49:ee:7a:44:05:d3:fe:a7:ad:36:1c:6d:01:ad:
         19:82:04:75:35:7a:6d:11:1e:4e:21:39:4d:de:9c:42:51:52:
         6c:d4:1e:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaMZfx89IhZNvCMUS1B3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlN2M4MmIyMjc2Y2JkZjEzMGNjYWQwNDZiNjVmZWFiMmMy
N2VkNDkwHhcNMjYwOTIxMTAwMDE4WhcNMjYwOTIyMTAwMDE4WjAzMTEwLwYDVQQD
EygzY2YzMGJjY2NlMTgzYzZlNzIyODU0MzQwNjE0MTkyZWE1YTUxNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEm+E3n+DOOJuaufZHuxvZynSBLA
StI4BGnVdjpZGYNa78mpPdXUHvgwOpfhIIFgUA+JRltCplV5w0FCXXwM83Y54Wfn
cD1fPk5bMjfrX2rZRSqBlx8e4WMvnIDxMMJVzJouU+A7ISiSGnKoJU3AZZS0VMWd
IXOanDoLSWMaBtWLfjGAKHUlhazaT7IVpUE4WsW91qhtt5X/ozxshN9uy2mnfCCn
Oic5/d5364/RuFYlkPwie4UDmDejyw7X4ceT3v5wgMPscl5wwQtGLn9X9FOtzxpi
PycuuqgIFCbPZl2JjycmtAUXe6RsPPkDn0newAU6W6nOUz9akLIzku+b0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzzC8zOGDxucihUNAYUGS6lpRaoMB8GA1UdIwQY
MBaAFN58grInbL3xMMytBGtl/qssJ+1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODkt
N2ZhZjdjMWRlN2IwLzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82ZmE1ZGYtZmI5Zi00YWU1LWJhODktN2ZhZjdjMWRlN2Iw
LzEvM255Q3NpZHN2ZkV3ekswRWEyWC1xeXduN1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU2GQc9y
ShCtPxGh6YwvuU6L1J0ueljTTUIZjWGP3sNbVP1MbonqSDRH5juhun5JqD3AvJFV
ih681yEYirBu/8KBE+f7uneDhacmMrj6k7JQflb098QP8JpsZwkcfmWvkYwsI3pi
LAqxeWtBXWPrDTwkCFtujIZDpfJW+s+7iy7PCDL06cFnsABf5lKJ4+Odu+W026Nt
6jLNU8IfTuD6aEOBbHjfhOXxXuYUVON7ECoXZntE9Cq14GsyKjQTgM1/ffn6aKMH
tfuGYue7zALlfXzdPzwZsaIxSjFLj0nuekQF0/6nrTYcbQGtGYIEdTV6bREeTiE5
Td6cQlFSbNQehQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:51 2026 by rpki-client