Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          6Kp6jgj7jrqhb2FjLd4mxY5I7jvOZcr5Kft1HiI020s=
Subject key identifier:   46:80:34:B2:FE:77:29:C6:B8:47:C3:A6:36:78:E4:06:99:52:7D:85
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       01A13B25596F21FDCA55AF846FD115C13FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0F95
Signing time:             Wed 14 Oct 2026 16:01:05 +0000
Manifest this update:     Wed 14 Oct 2026 16:01:05 +0000
Manifest next update:     Thu 15 Oct 2026 16:01:05 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: jeOhmWf5Uc7q3Uue4tOLpj6iEHjGjRDl2azYR/54gf8=)
                          2: AjF1xzLoCmUBj3GGwZ1oDsP0HrY.roa (hash: MDPBvNx4/AU6HeMPVBxMXRo2S5XCKx7igfWllN96Xeo=)
                          3: Dla58c4NF4e-8Fh3gF-JldNSHSM.roa (hash: fUcyUatpA7Zq3P4h9Dkuq1MejOsAl/ix3+G/GiH0qeM=)
                          4: E5IX0VwfA8Hs-Nf0IDXDUl3I7QI.roa (hash: bwDLzz1chdjqp0DDaeiR10pbirM6+aG2FaIGoT/5NYs=)
                          5: PBfzv0iiF6HGojmLt5BzWIMbg9A.roa (hash: nIjIXxuKfTGMh/FzfYXRKGadZaZtFRAFEH76fiqro7Y=)
                          6: XyBwwk9Rpf2EkG4M9-abdDNCWms.roa (hash: TZxVKHtjSFLa0T3PPjVjD1cxZHhhNWMZJ+1RNn+t7lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:25:59:6f:21:fd:ca:55:af:84:6f:d1:15:c1:3f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Oct 14 16:01:05 2026 GMT
            Not After : Oct 15 16:01:05 2026 GMT
        Subject: CN=468034b2fe7729c6b847c3a63678e40699527d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:c8:33:06:87:24:29:7a:8d:f8:3a:00:6a:
                    1f:09:f4:a1:e7:22:1b:e8:c5:b0:87:72:c7:f7:46:
                    96:8f:94:af:9d:6d:f3:a7:e0:62:95:31:bc:d3:59:
                    be:9a:61:b8:6f:3a:55:61:71:6d:e7:0a:0d:05:4d:
                    fb:c7:a5:c3:60:90:5e:1e:a7:19:27:6e:61:af:08:
                    ac:79:76:db:fb:86:2b:f9:e1:aa:2e:87:cf:f5:c2:
                    3f:35:26:09:6d:78:32:2c:ce:fd:9f:b4:76:3f:15:
                    df:a0:2e:f3:82:ac:0b:80:1f:4e:d2:29:17:bf:b8:
                    a8:c6:5b:49:a1:26:ae:f4:fa:7e:06:67:08:a9:46:
                    ec:f3:c2:bf:97:9c:a4:6b:b4:6f:cc:9b:0c:77:20:
                    38:d8:9f:41:3d:c0:e8:df:36:16:8c:8d:c1:17:9a:
                    59:99:42:84:a4:d9:2e:aa:3a:6c:4d:1d:23:e3:22:
                    96:04:5f:24:8d:5a:1b:89:da:ba:f3:97:77:4d:8c:
                    c4:b9:95:43:ec:d6:d3:10:fb:3d:08:ad:e7:18:5e:
                    80:b7:13:4b:36:f3:30:77:98:a8:6b:bc:30:97:1a:
                    87:9d:5c:d6:47:d3:ee:c2:99:5a:6e:84:c2:a0:b1:
                    25:96:18:b0:69:56:65:1f:6c:5f:16:40:b7:56:a5:
                    10:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:34:B2:FE:77:29:C6:B8:47:C3:A6:36:78:E4:06:99:52:7D:85
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:e8:d1:57:ab:3a:c4:a0:6c:1a:5a:b1:39:54:7b:90:19:
         02:98:fa:e8:c5:4e:3c:cc:38:05:5d:e5:96:2a:99:9f:2e:51:
         0b:c6:72:e5:51:cb:24:15:10:cd:a5:5a:e5:e0:81:fa:3e:d9:
         91:93:e7:e2:b7:d1:e8:3b:28:de:08:0a:53:99:37:cd:14:9d:
         cf:49:93:56:d2:c1:bb:69:8f:3c:17:0c:2b:2e:01:6c:55:a7:
         24:59:25:ac:d7:dd:23:80:75:28:ad:7c:29:72:66:5a:46:a4:
         38:5b:7a:7e:e2:12:24:1a:aa:d4:1c:2c:c3:3a:2c:7d:81:cd:
         66:74:a7:54:56:63:b1:de:dc:58:94:bd:35:82:c5:6e:69:9e:
         b3:04:b7:92:fe:15:f6:73:2b:a8:7d:6a:1f:94:ae:c1:c3:46:
         8b:57:c5:39:8e:d8:d7:4d:ac:01:da:7a:13:2c:9a:9f:bb:30:
         9f:b8:93:36:8d:5a:31:06:6d:15:cb:aa:79:73:f0:01:01:8d:
         c2:ce:db:ea:18:af:70:ee:6a:79:31:f3:70:f1:ee:73:f9:c4:
         4e:0f:c5:bf:3b:0a:c5:8f:45:cd:50:66:c6:dc:7a:a4:3c:fa:
         7e:98:5a:a2:d7:0d:79:c7:83:18:44:e6:cc:40:5c:e2:d8:86:
         30:47:11:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7JVlvIf3KVa+Eb9EVwT/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjYxMDE0MTYwMTA1WhcNMjYxMDE1MTYwMTA1WjAzMTEwLwYDVQQD
Eyg0NjgwMzRiMmZlNzcyOWM2Yjg0N2MzYTYzNjc4ZTQwNjk5NTI3ZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTLIMwaHJCl6jfg6AGofCfSh5yIb
6MWwh3LH90aWj5SvnW3zp+BilTG801m+mmG4bzpVYXFt5woNBU37x6XDYJBeHqcZ
J25hrwiseXbb+4Yr+eGqLofP9cI/NSYJbXgyLM79n7R2PxXfoC7zgqwLgB9O0ikX
v7ioxltJoSau9Pp+BmcIqUbs88K/l5yka7RvzJsMdyA42J9BPcDo3zYWjI3BF5pZ
mUKEpNkuqjpsTR0j4yKWBF8kjVobidq685d3TYzEuZVD7NbTEPs9CK3nGF6AtxNL
NvMwd5ioa7wwlxqHnVzWR9PuwplaboTCoLEllhiwaVZlH2xfFkC3VqUQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaANLL+dynGuEfDpjZ45AaZUn2FMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz7o0Ver
OsSgbBpasTlUe5AZApj66MVOPMw4BV3lliqZny5RC8Zy5VHLJBUQzaVa5eCB+j7Z
kZPn4rfR6Dso3ggKU5k3zRSdz0mTVtLBu2mPPBcMKy4BbFWnJFklrNfdI4B1KK18
KXJmWkakOFt6fuISJBqq1BwswzosfYHNZnSnVFZjsd7cWJS9NYLFbmmeswS3kv4V
9nMrqH1qH5SuwcNGi1fFOY7Y102sAdp6Eyyan7swn7iTNo1aMQZtFcuqeXPwAQGN
ws7b6hivcO5qeTHzcPHuc/nETg/FvzsKxY9FzVBmxtx6pDz6fphaotcNeceDGETm
zEBc4tiGMEcRsQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:29:17 2026 by rpki-client