Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File:                     3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier:          0flRDJWgz60DwPQV2sBNM/MOIHwfspKWkC5I88msHK8=
Subject key identifier:   CF:9B:50:D5:A2:F6:22:27:95:D5:85:A1:18:88:29:15:14:E6:04:89
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer:       /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial:       01A0C8C6707721A73CB427EE7417F70D727F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number:          19C2
Signing time:             Tue 22 Sep 2026 11:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:43 +0000
Files and hashes:         1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: AUv6IcGL20lbwDzOhDxWAqUVJcDeH1d+QV2KoK202hA=)
                          2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:70:77:21:a7:3c:b4:27:ee:74:17:f7:0d:72:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
        Validity
            Not Before: Sep 22 11:00:43 2026 GMT
            Not After : Sep 23 11:00:43 2026 GMT
        Subject: CN=cf9b50d5a2f6222795d585a11888291514e60489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:c7:99:7f:8b:82:5a:00:2a:00:77:4a:a8:
                    7a:77:5c:ea:3e:02:cf:f3:5a:dc:cd:68:f6:1b:1f:
                    12:f5:dd:c8:10:f7:64:e0:b2:2a:98:4b:47:f9:af:
                    f9:01:e6:5b:f8:2c:3b:8e:cd:82:dd:e3:2a:2c:01:
                    37:1f:86:8a:3f:cb:e2:fc:54:5b:99:fd:83:b8:fc:
                    3b:02:e5:f7:43:8e:91:e7:fc:0d:d8:36:d6:92:8b:
                    72:a8:7c:f6:a8:8a:e8:18:a8:0b:a8:bd:18:aa:1b:
                    ff:a1:ab:7e:5b:a7:8e:b2:2b:7c:57:70:57:4b:99:
                    90:9d:95:a7:b7:52:81:b0:c4:9b:86:37:ae:22:b6:
                    58:b8:86:3b:fd:c0:3d:a5:7a:44:bd:6d:6c:b5:e3:
                    05:fb:8c:cc:bb:3a:99:f7:4c:15:54:47:ed:61:36:
                    e4:49:5f:03:22:bc:4c:e6:f5:61:f9:ac:a9:32:06:
                    62:cc:e9:5f:fc:50:9f:24:8e:e0:b6:dd:3b:73:32:
                    7d:6f:8b:e9:ae:1d:83:c3:51:9e:ca:49:07:ec:cb:
                    17:05:98:7d:42:4c:1a:18:3a:5d:b6:c5:01:d5:c7:
                    8a:3e:86:68:ac:61:60:96:44:00:e5:9b:8a:71:e9:
                    ff:22:e0:15:5a:77:1e:ea:9a:97:8a:bf:5c:26:21:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:50:D5:A2:F6:22:27:95:D5:85:A1:18:88:29:15:14:E6:04:89
            X509v3 Authority Key Identifier:
                keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:03:00:85:e2:34:b5:2b:9b:a0:ce:83:3f:72:af:66:63:
         9e:51:a7:9b:53:fc:0d:39:73:17:2a:0f:56:68:8c:39:e9:95:
         ee:02:7c:e1:e1:f5:50:22:a6:be:d3:d3:4b:8b:da:6f:9b:1a:
         41:8a:8b:b8:ae:52:14:b6:3c:bf:84:5b:8e:0d:2d:e2:85:a1:
         ae:68:95:2f:d5:a8:fb:5f:63:cd:e2:2d:b2:7f:bf:4f:c6:94:
         4e:e1:85:0e:38:7d:c0:08:62:25:a4:4d:64:cc:1b:c8:99:d8:
         a0:e0:07:b8:9d:27:08:56:bc:e3:5f:05:da:9a:93:53:5c:79:
         9c:79:40:ba:c2:16:29:58:a2:be:34:02:c7:44:0d:b3:0b:6f:
         56:ef:7e:8f:b0:4c:86:48:a0:90:3d:3e:ce:ed:41:c8:15:8a:
         10:18:1b:83:53:10:c1:d4:2c:fd:f1:d7:43:0f:e1:c1:07:f4:
         51:8c:09:43:d0:c2:32:7d:0b:5c:7e:37:b4:0b:0c:37:62:11:
         1c:09:bb:e8:8e:58:20:9f:9c:01:3f:cf:f3:13:36:d4:04:1a:
         4b:ae:aa:ef:cd:5a:40:b7:8e:3c:ee:28:7a:12:83:91:9a:7b:
         04:0a:06:04:aa:f4:2f:40:01:6a:9c:a6:73:62:61:0f:9d:21:
         a9:a9:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:12:19 2026 by rpki-client