Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File:                     3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier:          b1hu+FiQLdcesT6FngUMbWI4do+5YiGvHKYFjNknNYQ=
Subject key identifier:   B8:BE:81:95:5B:FF:2D:CF:53:6E:4B:7C:EA:7A:F4:32:61:64:19:A5
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer:       /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial:       01A0C28DF6817BEFE8ECDE32C59F99A79033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number:          18E6
Signing time:             Mon 21 Sep 2026 06:01:18 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:18 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:18 +0000
Files and hashes:         1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: FDsQ8rwdwml9U1SvRGboj1f0+EhI6powjQXpLGfBFoc=)
                          2: aZCXcydPk-76cgt6cZKKvGpKk5A.roa (hash: gewDOlWApHrr+Yml3oxtgkzNGGb0SqqLcvSrquabjoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:f6:81:7b:ef:e8:ec:de:32:c5:9f:99:a7:90:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
        Validity
            Not Before: Sep 21 06:01:18 2026 GMT
            Not After : Sep 22 06:01:18 2026 GMT
        Subject: CN=b8be81955bff2dcf536e4b7cea7af432616419a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:8d:a8:3e:d6:3c:fc:bf:27:44:27:e8:ab:
                    d6:06:d6:89:56:8d:fb:33:fc:9c:04:5c:f5:83:cc:
                    35:ec:02:6b:fd:cf:85:5d:a4:02:a4:42:b8:2c:84:
                    fc:dc:e9:e6:b2:f4:49:61:e0:80:fd:a0:fd:48:c2:
                    c7:64:c0:14:19:58:08:73:fd:d1:0f:34:2a:7a:02:
                    9a:f0:8a:1a:80:62:20:dd:24:f4:46:24:67:2e:49:
                    a0:0a:45:dd:cf:d0:d4:8a:8c:8a:21:b7:42:c0:7c:
                    91:53:5f:9a:05:ad:98:6a:00:73:31:04:f0:52:50:
                    47:a2:8d:53:e8:87:e8:bc:07:de:2e:de:d8:27:55:
                    99:c4:b5:71:e7:89:cd:d8:77:6c:d8:56:80:a9:f4:
                    4f:c3:24:92:df:71:41:fd:87:83:1f:af:26:96:f2:
                    37:7b:ac:6a:41:f4:5d:ec:ac:33:04:6f:d5:aa:5b:
                    ca:28:0a:54:65:80:71:68:f1:30:7e:f8:37:4d:f9:
                    99:68:e7:31:64:1f:f7:c6:48:cd:35:e9:50:0d:36:
                    c8:fd:24:3b:21:df:74:de:24:e5:6b:69:f2:f7:77:
                    50:13:4a:bb:f9:d0:5c:b2:ca:4c:b4:3e:c7:10:e5:
                    36:6d:f3:d3:5f:16:8b:2c:77:75:d5:61:ed:64:36:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:81:95:5B:FF:2D:CF:53:6E:4B:7C:EA:7A:F4:32:61:64:19:A5
            X509v3 Authority Key Identifier:
                keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:a8:10:96:b4:ea:f1:50:78:18:1d:33:01:eb:48:12:98:
         79:8d:f0:b1:6f:ec:83:23:1f:ff:d7:08:fd:66:d6:82:1d:00:
         27:a3:90:3c:63:9b:75:51:76:aa:83:4d:c2:b4:8c:68:8c:cc:
         e3:2c:f9:67:3c:6a:0f:35:2c:9e:10:b7:5d:64:0c:c5:d0:63:
         51:13:7e:7e:71:b4:01:f7:3d:ae:0f:1e:d3:98:50:85:ec:f6:
         38:9f:3d:89:0b:88:7e:ce:bc:81:0e:60:9b:ca:b6:8e:97:6c:
         60:60:72:ea:f4:1e:36:7e:69:b6:aa:a2:1e:db:53:37:47:d0:
         eb:f2:b2:14:b2:de:e3:74:18:95:c5:05:f7:ae:c9:a9:f7:12:
         ee:84:f3:08:c9:8f:9a:c5:39:49:b9:5b:d2:6e:78:3c:50:55:
         73:98:7f:76:8d:47:e0:5b:49:2e:cb:e9:d7:98:b4:be:3b:3f:
         db:a7:3f:b3:f6:01:51:0c:33:12:40:81:02:0c:15:94:34:65:
         38:af:65:38:44:16:b6:83:c4:69:76:86:45:c5:1c:f5:0f:1d:
         26:98:70:2e:fb:1f:44:de:82:31:9b:b1:a3:bf:bb:65:ba:be:
         05:8e:56:c6:22:9f:a7:02:cf:0a:5f:3b:91:d3:28:10:8d:37:
         f1:95:58:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjfaBe+/o7N4yxZ+Zp5AzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi
ZjQ1ZTQwHhcNMjYwOTIxMDYwMTE4WhcNMjYwOTIyMDYwMTE4WjAzMTEwLwYDVQQD
EyhiOGJlODE5NTViZmYyZGNmNTM2ZTRiN2NlYTdhZjQzMjYxNjQxOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycaNqD7WPPy/J0Qn6KvWBtaJVo37
M/ycBFz1g8w17AJr/c+FXaQCpEK4LIT83OnmsvRJYeCA/aD9SMLHZMAUGVgIc/3R
DzQqegKa8IoagGIg3ST0RiRnLkmgCkXdz9DUioyKIbdCwHyRU1+aBa2YagBzMQTw
UlBHoo1T6IfovAfeLt7YJ1WZxLVx54nN2Hds2FaAqfRPwySS33FB/YeDH68mlvI3
e6xqQfRd7KwzBG/VqlvKKApUZYBxaPEwfvg3TfmZaOcxZB/3xkjNNelQDTbI/SQ7
Id903iTla2ny93dQE0q7+dBcsspMtD7HEOU2bfPTXxaLLHd11WHtZDZMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi+gZVb/y3PU25LfOp69DJhZBmlMB8GA1UdIwQY
MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt
MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz
LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe2oEJa0
6vFQeBgdMwHrSBKYeY3wsW/sgyMf/9cI/WbWgh0AJ6OQPGObdVF2qoNNwrSMaIzM
4yz5ZzxqDzUsnhC3XWQMxdBjURN+fnG0Afc9rg8e05hQhez2OJ89iQuIfs68gQ5g
m8q2jpdsYGBy6vQeNn5ptqqiHttTN0fQ6/KyFLLe43QYlcUF967JqfcS7oTzCMmP
msU5Sblb0m54PFBVc5h/do1H4FtJLsvp15i0vjs/26c/s/YBUQwzEkCBAgwVlDRl
OK9lOEQWtoPEaXaGRcUc9Q8dJphwLvsfRN6CMZuxo7+7Zbq+BY5WxiKfpwLPCl87
kdMoEI038ZVYzg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:07:31 2026 by rpki-client