Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File:                     3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier:          ERuup0jPxHcvU4Hx1UCHJdknJA2KvoE5e9XX9gmARbk=
Subject key identifier:   DE:9E:2E:61:7D:06:FF:A0:5A:23:F4:61:97:C0:32:8E:8F:74:2B:2A
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer:       /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial:       01A1366CC4BAAEF26F4EC20620BF429102C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number:          08A5
Signing time:             Tue 13 Oct 2026 18:01:00 +0000
Manifest this update:     Tue 13 Oct 2026 18:01:00 +0000
Manifest next update:     Wed 14 Oct 2026 18:01:00 +0000
Files and hashes:         1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: OXHqiFq0m9qd3KB2dfuNvSw5L7zEmhRAzEsxj/aFV/w=)
                          2: WoN0CrYvueqPk1KqmXJffVK7ib4.roa (hash: 4FA6Dc/pCbAQFuPtL5vNxbuQK2/hlz7MGBa9RY6awaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:6c:c4:ba:ae:f2:6f:4e:c2:06:20:bf:42:91:02:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
        Validity
            Not Before: Oct 13 18:01:00 2026 GMT
            Not After : Oct 14 18:01:00 2026 GMT
        Subject: CN=de9e2e617d06ffa05a23f46197c0328e8f742b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:db:a4:46:d9:17:81:a3:f3:74:36:71:65:46:
                    29:75:d2:57:47:77:04:da:ef:35:5d:0a:8d:c9:ee:
                    71:15:2a:dc:ef:7f:ab:f3:70:7d:bf:76:2a:2b:b7:
                    ca:31:b5:dd:e0:71:5f:fe:ee:d4:d8:4c:0c:8a:dd:
                    a7:42:95:99:10:59:3a:d2:d2:2f:1d:e9:f1:01:83:
                    c0:9e:8c:27:81:f3:8a:98:03:14:76:96:8c:c2:ac:
                    01:58:7a:ee:51:18:47:7e:18:f2:4d:c4:af:fd:2d:
                    75:80:27:8d:fa:29:4f:4d:e7:56:ba:a5:88:86:df:
                    90:bb:22:70:1a:24:6f:30:3b:a9:2c:b9:18:54:cc:
                    b0:21:e3:d1:73:0a:e2:ff:70:db:30:93:cc:87:6a:
                    a6:ab:14:2e:fa:07:ca:82:8d:dc:a0:e0:c6:be:73:
                    8b:d0:54:f7:2e:e2:dd:4c:d0:51:15:1a:57:74:cd:
                    d7:e0:3c:bb:f7:42:45:54:8f:d9:73:5c:e0:6b:2e:
                    f3:80:c1:a2:59:22:0a:d8:e8:d6:b6:3c:9c:e7:a0:
                    61:47:91:55:f9:e3:9e:7c:cc:82:40:42:29:68:6f:
                    84:07:b2:15:35:e1:5c:9c:10:a7:41:4d:ad:5a:ef:
                    32:95:df:8d:09:09:d5:0d:8e:d0:0d:74:67:29:f5:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:2E:61:7D:06:FF:A0:5A:23:F4:61:97:C0:32:8E:8F:74:2B:2A
            X509v3 Authority Key Identifier:
                keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:50:05:82:9b:97:0e:70:0c:a1:3d:d6:9c:c6:ca:9e:8a:60:
         77:35:ed:dc:7a:1a:42:af:6f:a1:da:3d:b9:b0:7e:d6:e5:aa:
         8b:8c:93:6d:59:e0:b3:64:d0:fc:30:29:f3:0e:f8:6a:b3:dd:
         c0:3d:a4:1b:26:0c:f1:df:be:31:4e:f8:8e:a8:44:0e:77:df:
         45:54:19:cf:65:ab:3b:d5:1a:fe:75:37:ad:66:6c:3b:4c:02:
         ed:a3:83:bb:fa:0f:ff:d4:49:7c:17:a9:be:1e:dd:e0:fb:14:
         44:98:be:91:7a:b2:44:84:74:ce:ec:4d:dd:49:b8:59:ec:ca:
         3a:15:14:ed:d8:b1:17:0a:94:f5:69:5d:13:d8:fb:40:0c:ee:
         a4:d8:6e:e3:55:da:90:97:29:78:e6:76:ad:77:f6:aa:0a:ae:
         1a:19:93:65:05:28:20:36:f2:48:bf:50:ec:b3:4a:03:19:9a:
         39:86:e2:a2:42:43:dd:1b:c6:06:a3:10:46:3e:77:da:f4:8a:
         70:1a:df:ef:8c:bb:49:16:8e:27:2b:b8:02:96:9e:c6:37:32:
         10:28:1c:58:f8:d9:2d:2a:ad:1d:0c:7e:8b:25:8f:70:26:36:
         d6:55:9d:31:d9:98:0c:10:07:97:c3:72:e6:f4:14:fd:5f:63:
         bc:9b:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:25:35 2026 by rpki-client