Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          76yMCQmBoaLfbrX+5efWITllSalWZKP11Jrbl8NsRRg=
Subject key identifier:   E8:0F:9C:DC:9D:D1:DB:23:C6:27:B0:FF:00:2A:EB:37:80:E8:48:F0
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       01A10512BAE42B2297008AF4F2042F232B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          135F
Signing time:             Sun 04 Oct 2026 04:01:15 +0000
Manifest this update:     Sun 04 Oct 2026 04:01:15 +0000
Manifest next update:     Mon 05 Oct 2026 04:01:15 +0000
Files and hashes:         1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: bXAOKgQWmV/iEUp9KCWzbe+TXm4rhnmU7ixvRHRVP5E=)
                          2: exOzc_f_1cWjcEVnxwrLp6Pz6ek.roa (hash: cpev4QlZRscUMeINHxmW95Jv6ZdGgZyRlFV1/FIBpVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:12:ba:e4:2b:22:97:00:8a:f4:f2:04:2f:23:2b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: Oct  4 04:01:15 2026 GMT
            Not After : Oct  5 04:01:15 2026 GMT
        Subject: CN=e80f9cdc9dd1db23c627b0ff002aeb3780e848f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:ff:8f:86:73:1e:d1:63:80:0b:67:06:ca:
                    a6:93:a8:9d:0f:09:c8:02:74:54:f2:e6:da:08:b4:
                    d1:a1:cf:e6:14:52:fb:64:9f:a2:47:98:d2:69:cb:
                    b2:10:f5:7f:74:83:3e:25:14:21:00:e9:ed:66:6c:
                    af:ef:24:fc:db:ce:9d:2f:41:e3:ee:b5:42:fc:e8:
                    03:e8:f0:0e:49:a8:df:82:d7:17:86:2b:96:30:37:
                    71:64:f3:99:6d:80:1b:3c:34:f3:fc:3a:9d:4a:4c:
                    c2:f0:de:7b:bc:da:32:97:d5:5f:5a:e0:cc:95:5a:
                    19:2e:db:ac:0d:51:20:3a:00:c4:2d:3a:9b:08:83:
                    57:25:e1:7f:89:68:cf:ab:25:1e:c1:df:86:bd:aa:
                    84:e6:0e:32:2a:a3:9c:2b:f6:4d:aa:38:d0:26:68:
                    f1:86:16:96:a3:fc:be:ee:d7:2a:1b:23:d5:5f:f6:
                    f2:5a:34:ad:6f:69:fb:f7:6c:dd:97:37:af:67:47:
                    0b:f1:46:99:86:dd:d1:94:b5:06:34:59:21:eb:88:
                    87:e5:30:bf:8d:b8:61:ed:eb:88:a6:44:5b:01:5e:
                    8d:cb:d4:e9:5f:23:0c:d0:50:f1:cf:3c:fd:8e:fb:
                    a6:2f:45:72:64:74:3a:9d:6f:7d:f2:eb:40:3e:70:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:9C:DC:9D:D1:DB:23:C6:27:B0:FF:00:2A:EB:37:80:E8:48:F0
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:1a:a9:db:43:61:6d:58:f4:9f:74:05:0f:7e:eb:d3:df:
         91:9f:b0:a5:67:3a:b0:ab:51:23:ee:87:6c:81:83:ef:b2:9c:
         8f:5e:13:29:22:0b:1d:07:00:14:52:5f:43:3b:4d:32:01:ba:
         68:05:bf:07:16:9f:27:3b:b5:09:d0:24:f1:fd:45:38:d0:5c:
         32:5f:b2:ac:0b:56:2c:f4:98:54:94:c3:df:52:ea:84:40:8a:
         d9:6c:0a:4f:24:8f:be:c4:7e:5b:8e:f8:2e:3c:c3:5e:70:71:
         5b:fa:65:c0:42:ad:0a:cc:f2:75:34:c7:8b:f6:bb:17:ab:b6:
         7c:d4:cc:5e:17:7d:c8:02:02:71:3e:29:3f:f6:54:ee:b9:49:
         87:00:45:94:76:b8:62:5d:b0:7b:dd:e3:ed:a0:eb:1b:61:ca:
         7c:39:7a:f2:0a:43:7f:53:91:03:e8:3d:b2:c9:3f:d3:a1:4b:
         a1:ac:8e:cb:ed:19:9c:0c:74:5b:0c:62:d9:48:31:1d:e4:c8:
         5b:79:a8:51:f1:2b:cc:43:23:46:2c:a3:33:32:03:a6:26:62:
         2a:6c:ec:80:a8:02:d8:89:96:12:91:23:e0:a7:11:0e:c6:31:
         8c:e6:1a:5a:9c:cf:bd:07:43:ea:0b:02:cb:fe:14:a3:bb:54:
         4b:e3:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:26 2026 by rpki-client