Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          sCLcgcMkGiHauzsNXGPvD7+2uW3m7dc5XwAqjFseNd0=
Subject key identifier:   1C:68:E4:F7:9A:65:B8:A6:4E:C5:52:4F:61:11:B2:EE:33:A1:FA:80
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019D98BD8E0FD85A5A663D9D9732933CF40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1691
Signing time:             Fri 17 Apr 2026 00:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:52 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: RQoDbuj6otQKy1bKNRXY7KMXzk9v1CPNfz/pfLjDGNw=)
                          2: A9X4cShQaD_mK0qE56RcWv1n6WM.roa (hash: 9IXqUIjUTj9O7jC2WLB7h7sR0zwiNThCiC66By6Zpvg=)
                          3: RROskC01oY8ik1jv9pODlvMWoI0.roa (hash: lRVESEDIz33P/s8fDuslCEVyyzFPd8mRR/XC1xoem+M=)
                          4: jkwVz1Hw91BkLL_xI1MZzZX_rL0.roa (hash: YC9Zk7AeEy/U3DouNdWT44SnwPIkBw05lQ2yggZvMZA=)
                          5: kbTz7ppbQ7oPVGXlVGsMEuIRKgQ.roa (hash: RN50qd/QjamGrCWyNEXJiSMZd1C/NPpkaF05FYlWOGk=)
                          6: nAAZ1WjM2gx8_Q7Z1It4l6S5r4w.roa (hash: VZj78n+9ZGb1wBVLhnHhUKWrezNCc2sBeLssgSEaZf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:8e:0f:d8:5a:5a:66:3d:9d:97:32:93:3c:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Apr 17 00:00:52 2026 GMT
            Not After : Apr 18 00:00:52 2026 GMT
        Subject: CN=1c68e4f79a65b8a64ec5524f6111b2ee33a1fa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:ee:9e:8f:ca:b2:e0:09:45:09:a6:94:aa:
                    52:a3:f9:89:38:17:67:27:cc:c8:6e:ad:94:f8:73:
                    6a:2d:ad:4b:7a:b3:d4:df:66:f9:35:3f:70:ba:e1:
                    4d:39:b0:2b:92:4a:1a:fb:22:7a:45:f3:da:7d:07:
                    13:5b:5c:e8:02:c2:04:54:a0:7f:7a:c8:9f:58:df:
                    ca:6e:ce:cb:db:e5:20:42:98:e8:42:d5:4a:cb:96:
                    4e:a3:b8:24:a5:5f:9a:51:37:b4:8e:69:e7:60:e3:
                    6f:24:d3:da:cf:53:af:39:ce:9a:b7:9a:ca:49:01:
                    38:f8:8b:95:b9:a9:a7:f2:88:f7:72:09:b5:f4:41:
                    3a:b7:ab:39:aa:2f:b6:30:c5:34:ea:2f:bf:64:4b:
                    38:e8:f4:ec:04:1b:17:54:c4:c5:22:5e:7d:e3:f0:
                    16:7a:37:ef:90:91:71:5e:36:13:f7:4d:f7:8c:3c:
                    50:d1:e4:16:18:64:60:ce:45:d4:6a:72:11:6d:0d:
                    f1:5b:39:7e:48:79:84:1d:22:e2:66:c6:32:0a:94:
                    6e:7e:1b:ce:a2:22:19:a9:24:1a:9a:f9:5c:07:e4:
                    12:da:05:c1:f5:28:23:68:88:1a:ca:e2:c4:aa:c5:
                    f6:05:e2:d0:7d:bf:eb:50:fd:a5:6d:32:97:a3:9b:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:E4:F7:9A:65:B8:A6:4E:C5:52:4F:61:11:B2:EE:33:A1:FA:80
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:01:b6:57:76:ab:e5:5a:67:5c:eb:0a:33:b1:d2:72:ca:e8:
         2d:e9:83:84:bf:19:bb:73:08:f9:c4:9e:25:b4:8b:d5:a3:be:
         ba:d3:41:ad:43:d2:17:1d:48:92:24:61:b3:a5:ff:92:e1:9c:
         12:98:da:cb:aa:cc:60:4d:7f:23:8c:22:59:6e:ee:52:d6:bb:
         65:73:a2:e2:e8:24:1d:8e:f1:e4:03:cf:35:94:8a:b7:a6:24:
         ad:3c:74:df:38:96:05:55:1b:bd:0c:c5:2d:68:f7:8c:42:c6:
         43:95:f0:4d:18:4b:0f:83:28:84:37:69:f2:1e:9d:b3:e8:c9:
         65:42:f8:59:01:20:d6:72:6c:eb:5b:8c:c2:ce:b2:18:26:d9:
         6d:0b:2c:aa:22:57:c6:ab:4b:4e:71:4c:b3:58:56:0e:d8:b4:
         85:8b:d7:98:06:61:a3:02:14:41:23:29:f6:7a:10:d7:cf:63:
         21:c4:b2:23:f3:0a:72:35:59:25:3d:2d:10:09:f9:df:57:a3:
         24:7d:f3:50:0a:13:75:4d:c9:87:60:47:8a:0e:9f:e0:79:59:
         35:24:bb:14:2f:b5:68:38:c2:ee:af:11:06:46:e8:4f:72:cb:
         2f:28:b5:83:12:62:98:c5:c3:a3:c8:14:e0:d2:cf:d6:88:ca:
         2d:99:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:46 2026 by rpki-client