Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          sP0fIUTsWSrOpKbA3dbGdT7TNyEAbOAV7YqGjGXtF9c=
Subject key identifier:   E9:0E:D4:72:7E:77:C8:EA:35:52:83:A3:76:85:4C:40:6C:D5:3F:2D
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       01A0C9D894E2D50B3CFCAA53837A3B30727E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          114D
Signing time:             Tue 22 Sep 2026 16:00:09 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:09 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:09 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: iargnvwL1Ia99luj5Jcr4kKI7eAMq8FtpJpuD3Z+C08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:94:e2:d5:0b:3c:fc:aa:53:83:7a:3b:30:72:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Sep 22 16:00:09 2026 GMT
            Not After : Sep 23 16:00:09 2026 GMT
        Subject: CN=e90ed4727e77c8ea355283a376854c406cd53f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:1d:92:46:b1:10:0a:ee:53:93:16:94:db:
                    26:97:ea:c0:45:70:11:3b:73:54:46:e8:64:10:05:
                    99:1c:8b:86:a4:4d:c3:ff:40:fc:aa:97:24:42:c4:
                    42:e8:e4:a3:c2:e9:5b:e0:1d:65:a4:e1:ae:ef:26:
                    74:7a:fd:e6:3f:b2:ed:d7:be:d4:7e:77:c5:7e:ef:
                    af:2f:fd:41:3f:75:94:c1:c8:93:ed:ca:49:73:06:
                    aa:1d:17:4c:7f:ac:02:8c:6b:43:3a:d3:28:73:f5:
                    ee:a4:00:c1:c2:c2:82:51:49:9d:ce:6d:49:b8:2d:
                    42:7f:2e:34:f0:47:d6:52:5c:5b:44:c1:76:ce:6a:
                    ef:48:87:d8:2a:23:c4:59:94:c8:16:40:b8:1d:1b:
                    a2:14:aa:2a:c1:b0:8f:ee:94:1c:9b:0b:94:4c:79:
                    db:4f:78:39:db:b6:1b:48:c9:75:23:76:2f:c9:d4:
                    76:6c:18:c4:2e:f8:16:f2:89:92:25:66:81:52:78:
                    8c:74:40:af:0a:30:e0:5c:31:98:b8:c8:cb:81:5a:
                    35:1f:1d:51:a4:de:86:6c:b3:bf:72:e2:46:e4:6f:
                    c1:69:b9:7d:19:51:bd:38:e0:be:f9:6a:27:52:f2:
                    b6:ae:85:0f:61:04:1b:63:02:95:51:b0:92:fd:d2:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:D4:72:7E:77:C8:EA:35:52:83:A3:76:85:4C:40:6C:D5:3F:2D
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:a2:4d:d8:f0:93:37:26:5e:3b:8f:cc:c6:82:35:cc:2f:
         a4:f1:27:6f:92:ab:e2:66:df:97:83:62:f5:70:d1:59:fe:2e:
         ef:90:65:16:2d:63:7a:e9:ef:00:10:f6:87:5b:09:2b:ed:ec:
         04:f2:fa:21:30:b0:ae:cb:bb:c3:3b:07:3d:33:d1:f3:54:a8:
         fd:73:3f:1f:5c:c8:5e:1f:a8:1b:29:8d:71:0c:c2:d3:a0:4f:
         bf:96:8c:40:4a:79:c0:ce:cf:a3:ca:c1:98:08:4d:e7:2a:66:
         07:31:bc:99:b8:cb:9d:34:13:55:f1:77:47:98:44:8a:4f:fd:
         33:00:35:ab:fb:9f:11:00:de:dc:91:8d:ed:5e:47:e0:de:da:
         04:73:c6:71:80:f7:93:ee:85:74:46:0f:84:2f:bc:69:63:d2:
         e3:67:0e:26:2b:59:f4:41:06:fd:bb:39:2b:6b:15:fd:06:4b:
         bf:27:b8:f9:53:4d:89:0c:f3:76:f4:8e:5b:c5:2d:54:1a:d2:
         e2:b9:f5:6e:18:3d:b2:bd:ae:af:6f:21:91:6b:f9:45:96:c5:
         5a:ab:8c:07:dd:aa:c0:d1:3e:3f:59:0f:d2:af:0d:4c:40:e5:
         4b:fa:21:56:c6:de:8a:28:99:b2:62:e1:fa:c6:7d:f2:4e:04:
         ff:65:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:21:22 2026 by rpki-client