Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          WieP3FBNCYtWrNtt0a3IbWussMoWCJOSFLMU41b9gSA=
Subject key identifier:   13:EB:38:37:51:82:02:5C:8E:59:CB:EB:6D:91:F1:DE:F5:C5:2D:F5
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       01A1DEA71B7B1CCD36C670672B9806A60AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          11D9
Signing time:             Sun 15 Nov 2026 10:00:55 +0000
Manifest this update:     Sun 15 Nov 2026 10:00:55 +0000
Manifest next update:     Mon 16 Nov 2026 10:00:55 +0000
Files and hashes:         1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: shh3ljlcw/XfyIZNMbgsWozNOY63ATfyXulVmUUwcDE=)
                          2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:1b:7b:1c:cd:36:c6:70:67:2b:98:06:a6:0a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Nov 15 10:00:55 2026 GMT
            Not After : Nov 16 10:00:55 2026 GMT
        Subject: CN=13eb38375182025c8e59cbeb6d91f1def5c52df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:95:d4:20:6e:5a:b5:dd:5c:5b:4d:7c:47:
                    53:1c:8c:cd:99:49:43:da:63:c1:60:b5:df:ff:94:
                    d2:2c:18:42:77:10:86:ac:77:68:b2:e5:55:d7:d7:
                    67:4b:b6:06:1a:96:f7:95:3a:b0:d4:2b:a9:ff:e1:
                    8c:f3:e0:d7:00:b7:11:34:8f:ca:ef:8a:8d:b6:ee:
                    f8:b6:21:44:1d:af:29:f7:cc:37:54:f4:78:7e:0f:
                    f6:35:80:d7:e3:2d:76:9c:ec:a2:a1:88:a9:3b:0a:
                    76:f5:5d:d9:79:31:5f:b4:21:af:e9:c2:1d:aa:09:
                    0f:63:e9:f8:03:da:c3:83:5a:74:14:8f:3b:3c:4f:
                    e9:b5:36:36:a1:19:a5:94:eb:23:ac:19:18:55:8b:
                    6d:24:45:67:3c:c9:f4:4d:26:e5:24:88:fc:dc:ac:
                    89:be:0f:5c:6b:f8:ac:6b:b0:c8:e1:a8:fd:b4:f1:
                    23:7c:20:f2:ba:34:16:2c:56:98:f4:9a:42:05:67:
                    c6:47:37:f6:c3:8e:92:f8:30:d9:24:57:70:cb:55:
                    6a:ce:46:69:3f:8a:de:5b:00:7d:10:ff:5c:1d:8c:
                    37:1e:35:5f:7e:f7:9d:3f:9e:f8:02:4a:07:b3:4b:
                    ee:9d:5c:5a:4a:a9:0c:9d:28:12:0c:78:ef:0c:fd:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:38:37:51:82:02:5C:8E:59:CB:EB:6D:91:F1:DE:F5:C5:2D:F5
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:d0:91:bc:8a:73:1d:b6:54:8c:ab:e5:2c:bb:d1:0f:1e:
         8f:2c:50:99:30:8d:3d:c2:9a:57:89:1d:ec:c0:b6:3d:21:e3:
         e0:6e:3e:9c:32:8b:81:d9:e7:38:1b:c5:b4:ed:25:f4:e5:ed:
         e4:1f:62:e4:12:10:58:3e:fa:9d:36:94:86:58:5f:94:43:56:
         4b:70:7f:67:56:4b:f0:f1:c1:e5:c4:f3:5b:89:e0:88:b9:b8:
         0e:d8:32:9e:9e:a8:06:d9:e7:d7:39:93:ae:d1:90:78:57:57:
         c0:c5:2e:6f:b6:40:11:9a:59:e7:5f:01:d2:c6:e4:d7:d4:73:
         08:bb:a1:54:fd:90:2e:54:e4:29:f7:de:22:e2:b1:4d:29:5b:
         e5:cc:6b:66:56:4d:cf:10:f4:3e:bf:21:4d:b2:82:50:c3:3a:
         ce:82:22:68:88:81:ac:9d:e2:66:19:f9:56:af:49:13:8c:b0:
         6f:92:d9:01:a6:3f:d4:19:34:71:30:8d:f1:f7:dd:00:ef:41:
         c1:2d:36:91:9a:b8:3e:eb:25:29:96:cd:59:f2:8a:f0:d9:39:
         4c:87:a1:fb:ad:e4:89:51:f9:1c:87:b3:67:36:b5:0a:62:cf:
         41:fc:6b:9a:a7:60:59:97:b7:41:62:60:51:15:90:ca:a8:1f:
         e9:5a:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:33:11 2026 by rpki-client