Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          UHSjS9+7Foc/k98blRiCwZKk1i5VNz2TpBUzMtnpFcE=
Subject key identifier:   E3:A4:63:41:A7:26:2E:35:EE:3D:55:EC:E3:A7:4C:B3:AF:EA:A9:05
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       01A0C17B8D7AA85C62A120BE374CDD0814A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1848
Signing time:             Mon 21 Sep 2026 01:01:34 +0000
Manifest this update:     Mon 21 Sep 2026 01:01:34 +0000
Manifest next update:     Tue 22 Sep 2026 01:01:34 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: EypzEIEJ0llJsLN46UODfSCi3ke3CJUWgqhR94q8rok=)
                          2: 6C3W-9CaPuwWdYDqcHjWkkZoegM.roa (hash: wit/WjbZgKAb0zGvhEAh6NwGMMeu36jdvCHn/RDLjog=)
                          3: OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa (hash: GM46G0GUlTfS8w3iCZudPxHhvnavmPPDKTZm1YakeDs=)
                          4: Rbo6oxAqDb8H6ee1Bcd6zmIvanM.roa (hash: hbS17xb15eoENiFqWkrh4Rg5HMl3hCu9i3t7Tn7RjEU=)
                          5: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
                          6: zcNaM7Plu3xF6-dvi0ReFa0-aV8.roa (hash: cASfX2g2hoBO9zunCC4qSdWKYm2AXNtfPSF57+QkbuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:7b:8d:7a:a8:5c:62:a1:20:be:37:4c:dd:08:14:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Sep 21 01:01:34 2026 GMT
            Not After : Sep 22 01:01:34 2026 GMT
        Subject: CN=e3a46341a7262e35ee3d55ece3a74cb3afeaa905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:59:d1:56:17:4f:2a:06:b8:86:ae:a2:73:
                    7d:17:41:5f:8b:24:a7:8d:56:36:ab:a7:de:e2:6c:
                    e3:9b:da:11:6b:cd:fd:6a:3f:17:3c:4f:67:f1:c3:
                    e7:f7:18:bc:ba:b9:d1:57:be:7d:24:1b:dd:0e:04:
                    96:fe:ce:40:c3:af:fc:8f:d9:70:09:29:93:0e:e3:
                    1a:cc:4c:8f:f2:fa:bc:c9:f4:05:73:55:53:ce:b9:
                    00:e7:f1:10:3f:96:1e:cb:ac:89:ca:52:91:fd:8d:
                    22:7f:b8:ea:4d:f3:f5:91:df:69:ac:41:a7:e0:a8:
                    31:b9:b7:50:d6:33:ef:38:b7:6a:8d:94:7f:de:8f:
                    9d:43:e9:06:bd:d1:a6:75:25:36:64:bd:c6:20:88:
                    25:17:4e:28:b2:1b:cb:97:34:82:13:ae:de:1a:d7:
                    86:57:30:49:8d:2f:9e:20:34:8c:ca:b0:ec:3f:4b:
                    1a:4a:b1:69:cb:ee:df:c3:7a:9c:17:fc:6b:37:d8:
                    e1:3e:d6:61:b7:3d:b9:0f:88:9d:47:a4:f8:02:28:
                    59:5c:02:ec:5b:2b:73:d9:8d:06:68:f0:e1:2c:8b:
                    83:26:44:77:60:9e:0c:14:0a:e1:2d:66:2a:e1:89:
                    7c:26:04:44:76:7e:f7:d9:fe:1b:f7:63:6b:6c:3d:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A4:63:41:A7:26:2E:35:EE:3D:55:EC:E3:A7:4C:B3:AF:EA:A9:05
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:46:60:19:29:a1:68:25:68:29:12:56:58:3d:be:f6:5e:13:
         eb:5d:82:df:8a:ae:2b:78:3d:08:88:78:00:4a:f8:61:c8:cc:
         46:ff:33:52:64:82:c9:83:73:4e:dc:f5:11:78:a0:ac:33:d2:
         1a:c4:06:db:1e:c9:a8:80:42:12:d0:f8:98:40:d2:11:1b:4e:
         b3:7f:e8:dd:ff:0d:45:e2:6f:83:4b:6d:bd:ec:1d:de:b2:ff:
         22:62:2f:9a:1c:97:d8:4c:13:b4:ca:87:09:6b:1e:1f:94:73:
         22:2d:8f:19:22:6f:0a:74:bd:a9:2d:dd:11:ca:eb:4d:7e:d4:
         ac:66:90:45:b3:5d:e4:63:8d:c5:5b:f2:d2:df:ee:15:59:19:
         e9:b6:6e:f8:71:da:1e:4c:7a:5c:76:45:5b:d7:22:fe:fb:4e:
         45:ef:51:5b:82:4c:29:10:57:81:66:5c:bf:f9:85:48:a2:5a:
         0e:9b:b7:ed:0a:8e:9f:bc:c5:6a:78:b4:a2:f1:8b:41:17:03:
         87:7a:05:40:62:16:a0:88:c8:7f:97:f9:48:60:8e:56:d9:41:
         ae:f9:5e:16:11:f3:e1:08:30:d4:37:40:0b:79:1e:8f:f6:12:
         aa:27:2b:6f:d5:51:9e:91:10:57:53:36:7c:be:af:81:b6:26:
         38:f6:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:53 2026 by rpki-client