Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File:                     I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier:          SOjUbWDgnnN9LwJUeHN8xr26/d6TY2cJNwecbNqTOf0=
Subject key identifier:   C3:85:F5:1A:CC:BA:18:E4:4E:93:87:3E:D9:E8:6B:20:A6:EE:7C:77
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer:       /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial:       01A0D048B3E62984C81B356492DE6DD02321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number:          076B
Signing time:             Wed 23 Sep 2026 22:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:20 +0000
Files and hashes:         1: H8UNN8H7VPAPeU8HfY2pZ9baom8.roa (hash: aa3mwH6a5yy6jaHkG9FnSEuRMRDZi+0YDMCMC7O4/3M=)
                          2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: mexlKElqYO9kTfxdU17DVnDadf1LWwb7oEAnDIB7ky8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:b3:e6:29:84:c8:1b:35:64:92:de:6d:d0:23:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
        Validity
            Not Before: Sep 23 22:00:20 2026 GMT
            Not After : Sep 24 22:00:20 2026 GMT
        Subject: CN=c385f51accba18e44e93873ed9e86b20a6ee7c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:9e:15:69:74:6f:d7:03:01:c9:b1:de:92:
                    b8:1d:00:ed:4b:f3:ac:e6:3e:d9:db:87:99:a1:bc:
                    a3:5a:4b:54:77:1f:4a:cd:63:9b:2c:6e:06:9e:e7:
                    43:9e:79:6b:28:eb:50:c9:72:81:ac:e6:b9:66:04:
                    97:fb:b0:f0:69:55:39:d5:fb:c5:76:8f:99:43:90:
                    ca:24:df:53:90:c0:63:09:03:0a:b7:18:ec:41:e8:
                    80:f1:3f:3d:98:62:3a:a9:88:12:d1:6e:8b:70:0e:
                    76:c7:c5:30:6d:f5:2d:c4:2e:d6:40:e2:41:d1:db:
                    ad:22:0e:41:c7:92:d9:20:1e:d2:21:9c:a2:5c:b1:
                    c9:1f:2c:e6:af:60:50:5f:52:93:b7:92:98:84:15:
                    06:31:0b:49:cc:53:8f:d0:7e:eb:12:c0:f0:bc:50:
                    91:1d:55:15:0c:3d:10:97:82:34:07:8a:f5:a5:6d:
                    b1:af:53:e6:1a:d9:67:03:1b:48:bf:46:73:c4:7d:
                    4c:32:fe:2d:24:0b:f5:70:29:4c:dc:61:30:11:58:
                    0b:fe:0d:47:f7:91:df:4b:ee:3f:ce:53:24:cc:5b:
                    3f:b1:5a:63:49:a8:32:e6:65:ac:4e:a5:84:50:19:
                    66:e0:16:e1:19:9f:f4:dd:3a:82:1b:21:b9:56:0b:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:85:F5:1A:CC:BA:18:E4:4E:93:87:3E:D9:E8:6B:20:A6:EE:7C:77
            X509v3 Authority Key Identifier:
                keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:39:a7:bb:f0:d7:fd:10:c3:ca:12:5a:19:3d:bf:ed:38:
         69:d2:6b:32:e6:32:0d:e1:8e:61:74:ea:1c:06:35:13:f5:26:
         b6:70:d4:25:71:c8:5b:39:e0:fa:2a:4e:39:dc:89:71:78:dc:
         a4:79:4c:c0:91:b4:c5:91:19:30:b3:4e:1c:fd:58:d7:55:59:
         f7:95:d8:e1:4a:2c:7c:cf:c7:e7:17:b8:27:0e:e4:5d:78:7b:
         8b:d2:cf:26:e0:19:d6:34:45:97:da:fa:ef:89:c5:67:00:4a:
         d6:b2:2a:d4:a7:fd:ef:01:28:40:35:d1:06:ed:51:2c:34:e7:
         4a:28:69:16:0c:1c:76:5a:ad:48:d0:e1:e0:9d:ea:64:73:bf:
         07:a4:d7:2b:5c:e2:40:9a:ee:05:87:c3:c0:c9:62:c7:0e:e8:
         47:5a:19:78:11:f7:9b:a9:6e:08:1e:eb:ce:af:d6:e6:84:49:
         dc:37:05:63:b0:2a:bc:ee:30:48:f0:4b:ca:c1:9a:4a:2f:f7:
         39:7f:6a:52:ae:02:ba:30:16:45:c2:ea:3b:53:58:a2:f4:65:
         9b:85:a6:73:1a:f5:f9:1c:7e:63:b9:b0:cd:c2:95:d8:a5:2b:
         ad:b4:4d:41:50:48:a9:26:3f:21:5e:d8:80:92:ff:35:bc:43:
         8e:49:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:29 2026 by rpki-client