Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File:                     3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier:          Esk53GzgxMgArVO9y3AXlNFFccuJ4A7E94Bb3KQLxRE=
Subject key identifier:   14:95:A4:2F:73:58:57:82:E8:B0:57:93:09:EC:63:38:68:AD:7A:83
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer:       /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial:       01A10926ACC97E8A1B4464DBD02659CE906F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number:          06D8
Signing time:             Sun 04 Oct 2026 23:01:31 +0000
Manifest this update:     Sun 04 Oct 2026 23:01:31 +0000
Manifest next update:     Mon 05 Oct 2026 23:01:31 +0000
Files and hashes:         1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: xrxVK46vDJa4juCL7d+PKMMiJm80FZM4lpiTSvfaEmA=)
                          2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:26:ac:c9:7e:8a:1b:44:64:db:d0:26:59:ce:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
        Validity
            Not Before: Oct  4 23:01:31 2026 GMT
            Not After : Oct  5 23:01:31 2026 GMT
        Subject: CN=1495a42f73585782e8b0579309ec633868ad7a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:fb:51:49:3e:b8:4e:8b:35:7f:f8:6d:d8:
                    92:45:0a:7c:0c:5a:91:8b:3a:d6:46:3c:de:ae:2e:
                    f5:04:1f:7d:6b:3b:59:01:de:90:fb:c6:09:c5:9e:
                    52:f0:7d:9e:42:5c:ff:ec:00:6a:f0:e5:2a:2d:e0:
                    1b:f9:5d:1d:1e:e5:4e:90:ca:7c:73:fa:2f:b8:2b:
                    26:af:10:c8:f7:fd:b8:26:12:90:db:4b:fc:7a:45:
                    ed:ca:57:8f:30:ad:5e:09:be:53:34:1a:97:6b:8f:
                    86:d9:e6:ca:7a:d8:ea:f4:b9:a2:59:1c:3d:74:7a:
                    25:ed:69:ee:bd:82:e2:a3:23:a7:ed:0b:5a:c1:ab:
                    e7:70:a8:c6:dd:99:28:4f:b0:81:23:b2:20:b0:f3:
                    05:f4:00:72:9e:54:82:06:8c:19:31:64:2b:ea:c0:
                    21:68:78:60:a6:9d:fa:59:1b:51:48:dd:74:7c:19:
                    86:b4:b6:5a:f9:34:da:b5:1d:bb:e4:65:af:b3:25:
                    00:ec:c6:39:73:ec:d2:0f:98:42:01:91:bb:28:47:
                    91:fc:80:3d:8d:ac:24:33:2f:df:a9:20:9c:ab:04:
                    e2:4f:ee:21:d5:b9:85:a1:ac:89:39:e9:4c:56:a1:
                    db:0f:5d:ad:0f:5f:de:df:a6:70:3a:ad:b6:c0:50:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:A4:2F:73:58:57:82:E8:B0:57:93:09:EC:63:38:68:AD:7A:83
            X509v3 Authority Key Identifier:
                keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:0d:97:61:a9:68:c6:76:2a:b1:7f:ef:c3:90:e2:cc:74:
         dd:e0:6e:12:f0:ed:97:51:f0:f6:cd:79:7e:02:19:c1:c4:ca:
         e0:3f:1f:76:6b:a4:6c:a6:6f:d5:4b:e9:34:06:91:68:4a:2b:
         12:7f:4b:1d:07:dd:1e:a7:6d:3c:07:6b:5d:00:1c:73:62:ab:
         d9:fb:1b:36:78:69:51:80:00:ad:17:03:17:8f:eb:ad:19:6e:
         aa:91:0c:55:e9:f5:6c:3e:37:09:a1:4d:a2:ee:73:80:81:e6:
         47:c9:6e:f5:07:9f:e9:e1:3f:e6:75:77:9e:f1:2c:d1:33:b8:
         3a:37:16:51:24:f5:18:d5:8f:2a:7d:6f:65:97:90:d1:41:2b:
         ed:7b:7c:36:95:3c:b7:af:d4:49:ef:14:ae:e5:59:e7:d4:ec:
         b6:3c:d5:c5:c4:ce:85:51:aa:b8:83:4d:f0:d7:19:50:7c:e1:
         d4:5a:e6:bf:b8:87:d2:85:40:fd:2b:a8:11:b4:71:51:06:17:
         4d:28:69:cd:c1:ac:de:bd:fc:03:d6:c7:c9:42:78:f1:c0:75:
         7a:49:44:9b:37:02:54:9e:7c:69:4e:c6:a4:3c:75:a1:f1:e7:
         32:ee:29:71:e7:23:67:d5:24:1c:b9:d9:a5:d1:c5:b9:8e:3d:
         7a:c8:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:25:54 2026 by rpki-client