Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          FZcVAYPmfAMxhicaIkd4cqs4KQlO4diDjFt//WJLLCM=
Subject key identifier:   D2:04:77:12:78:5A:F5:9C:6A:E6:2C:58:63:0E:B0:C7:C7:23:8B:77
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       01A0DB0406030560B3EA990D083896ECE12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          1A72
Signing time:             Sat 26 Sep 2026 00:01:08 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:08 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:08 +0000
Files and hashes:         1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
                          2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: YPY6s5gsbX6vTeRBL00M6ire4PIOG7z9w2DrYDIMOvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:06:03:05:60:b3:ea:99:0d:08:38:96:ec:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Sep 26 00:01:08 2026 GMT
            Not After : Sep 27 00:01:08 2026 GMT
        Subject: CN=d2047712785af59c6ae62c58630eb0c7c7238b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:8a:e0:0a:d2:04:93:38:64:15:d6:bc:4f:
                    af:2b:87:8b:51:4f:71:8b:97:b4:88:6c:54:46:29:
                    ef:f7:40:ac:af:35:46:ff:7f:dd:6f:a8:50:80:02:
                    a4:d9:8a:3b:c4:6c:f4:fa:c8:9d:ec:0f:68:62:83:
                    0a:80:fb:cf:5b:8a:d2:ed:bb:77:dd:fc:5b:86:e8:
                    03:01:88:35:18:15:dc:8a:3d:c2:72:f6:b0:81:32:
                    ed:72:48:c3:f0:ea:aa:87:a1:42:30:43:18:f2:5b:
                    7c:c7:68:d1:4a:b1:c7:1e:e1:67:5f:8c:50:74:b3:
                    8a:af:0d:f2:a4:95:d1:ab:dc:04:87:27:6f:8b:76:
                    27:0c:a3:df:37:58:a2:37:68:bb:25:b2:95:89:03:
                    3c:99:06:a0:17:58:d5:4e:43:e7:97:6c:30:e2:9b:
                    bc:d1:52:a1:a8:5a:c2:a9:44:a8:84:39:a5:0e:73:
                    63:4b:c0:62:86:71:e2:68:8b:e8:d1:c8:bc:37:47:
                    61:6d:a7:a3:d4:c7:b8:77:f1:a3:b2:f7:7b:34:90:
                    93:0c:ac:9e:bf:6f:26:ba:4b:26:d6:cf:66:9a:cb:
                    fd:67:db:e9:a6:7f:d1:b2:b9:f8:fe:e2:a5:8e:a1:
                    57:00:d1:b7:60:d9:e2:b2:d3:6a:1c:3a:3e:9b:58:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:77:12:78:5A:F5:9C:6A:E6:2C:58:63:0E:B0:C7:C7:23:8B:77
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:61:52:27:cc:44:8f:65:44:b6:6d:6e:3a:cf:dd:9f:41:36:
         1d:21:c9:ec:66:45:74:ab:0b:a1:fc:59:a9:4f:e2:83:95:21:
         3b:6b:e2:b7:a6:d7:c9:ec:c6:e4:94:c1:2a:ef:0c:11:73:5b:
         c5:f7:4c:67:0a:8e:c2:12:f5:f3:f8:7e:1b:d2:77:2b:64:03:
         ba:16:e3:af:6c:84:11:b7:67:9b:7c:5b:9b:63:a5:21:3e:95:
         99:5b:54:b9:d4:65:46:e8:73:0c:d7:e6:e3:e7:a6:8e:2d:21:
         7e:20:2e:5f:f9:97:72:28:90:87:02:f7:6b:72:20:6d:68:f5:
         8a:6c:7c:6f:a7:86:b1:dc:8e:4d:54:6d:57:08:4a:67:16:fe:
         ab:44:e7:94:d7:09:47:ad:2e:9b:94:85:70:95:ac:2c:97:d8:
         ae:0b:29:33:a9:a1:b9:09:c6:ad:35:f1:9c:74:97:fd:3f:47:
         db:18:95:4f:01:cf:9d:9a:5a:20:06:ed:62:5f:77:06:d7:73:
         a2:7c:23:77:9b:cb:14:46:d3:fb:55:e9:d3:60:73:ba:86:8c:
         a6:4c:fb:f3:71:ac:8f:72:90:04:f0:c9:71:9d:9c:8f:41:88:
         be:29:ed:b8:b5:e0:1b:d0:cc:a3:43:14:a9:82:a4:f1:59:89:
         25:3f:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:20:48 2026 by rpki-client