Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          lBoZg5BE5R/uNVjzbU6d/iybCs/b/Jwmk23/aCUgRF8=
Subject key identifier:   7B:F8:5C:9B:4B:B5:0E:68:F3:9A:4C:0E:4A:55:80:57:1F:75:B2:85
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       01A0CB22F81C26CBFB6C3897E193E082B9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          19D8
Signing time:             Tue 22 Sep 2026 22:01:01 +0000
Manifest this update:     Tue 22 Sep 2026 22:01:01 +0000
Manifest next update:     Wed 23 Sep 2026 22:01:01 +0000
Files and hashes:         1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: U1jfu2EkNviNGg1R5A9RNZuL6SdgQvjd8jAEGFUQn9s=)
                          2: 7UD9mSTFV8lFN4ROehlHuZ5VKzk.roa (hash: 7/SDaPbxGJSgvje7ZyVfzpaTxUzpeca2cxXLtLcUMNc=)
                          3: 7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa (hash: McFAl/WKQX0xi1vS74G9WytOjkgqYbIf6IQeiu/SBtE=)
                          4: WNlY6EleMRRBrp6sZUEH7DxvZlc.roa (hash: dLCuSMcuIVzwoKSwK9PkR1g78fv8OGI64PcrszyfgyA=)
                          5: ekV3uRphNew5aOcMQo-s8iHH-AY.roa (hash: FE+IQctGJcO3sSaP7HNmckkGvxU4kU9yBANBqpeU4lI=)
                          6: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
                          7: nWay-kjM-uXQonlEIzksgPJ2hIY.roa (hash: QNv+cuZE5AYtfPUCgiQFK8fsilnJCXuMMkCSBo7INTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:f8:1c:26:cb:fb:6c:38:97:e1:93:e0:82:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: Sep 22 22:01:01 2026 GMT
            Not After : Sep 23 22:01:01 2026 GMT
        Subject: CN=7bf85c9b4bb50e68f39a4c0e4a5580571f75b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:c1:c5:43:8a:15:de:a5:a9:21:94:cf:8b:
                    c2:06:bb:7c:85:3a:04:df:76:d1:e8:c7:3a:a6:c9:
                    c8:5b:3d:57:1a:81:74:b0:20:bd:e0:eb:c9:e9:8e:
                    9e:0a:b7:e1:83:3b:ec:c1:ce:82:49:39:84:0a:c1:
                    34:0a:6f:03:f1:86:c7:35:fa:c1:4e:b9:b7:51:de:
                    19:ad:4f:8a:c9:bf:44:ca:d1:37:89:40:b8:ce:d1:
                    c8:b8:5c:88:fc:60:e4:6a:ef:db:83:7f:a9:c3:62:
                    74:15:fe:02:8c:8a:22:79:8b:9a:3e:0f:46:2a:37:
                    22:bc:11:34:ce:67:3d:74:5e:c0:45:90:e9:42:4d:
                    07:cb:49:4b:0d:4a:37:d8:4a:a0:49:da:e9:c1:2e:
                    94:84:f3:29:1c:58:6e:c1:67:9e:84:f8:87:11:11:
                    7f:24:cc:04:ae:2d:95:78:ae:9c:0b:d4:13:18:1f:
                    31:00:46:21:94:7e:ef:52:b2:2b:40:47:19:f5:38:
                    d0:1a:d6:7f:28:18:b8:0c:05:7e:43:db:18:82:1f:
                    ed:ae:a2:5a:b3:5f:b2:96:b2:6d:0f:e1:c5:97:8f:
                    01:d6:3e:9e:fd:b1:51:93:18:c6:63:b0:56:26:ac:
                    43:14:02:8b:b7:1b:42:12:8e:8d:98:b2:6e:08:56:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F8:5C:9B:4B:B5:0E:68:F3:9A:4C:0E:4A:55:80:57:1F:75:B2:85
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:83:b0:3b:88:5f:5f:92:dd:12:74:72:17:a8:bf:ca:2a:
         ba:0e:69:79:8d:14:aa:75:30:cd:ac:c6:d6:5e:95:91:b5:65:
         1c:87:38:00:4f:f4:b9:27:d9:e0:7d:c7:9c:d6:d3:d2:ad:ed:
         19:78:2a:ab:29:4c:f1:fe:59:42:e8:33:92:d3:43:73:cf:f9:
         3f:00:02:50:8d:91:3c:c3:3b:10:41:d4:28:45:72:6c:09:6c:
         6a:5d:6e:eb:50:8d:58:e5:4b:c1:7e:4e:2d:22:3b:96:3c:52:
         5b:1b:5c:9c:3d:b4:ee:f4:b5:a9:2b:a8:5c:81:41:1c:46:39:
         93:35:60:a9:ce:1c:23:81:dd:bc:5b:8d:89:69:83:a2:a6:8e:
         84:2f:84:9a:2f:e8:e6:52:a4:41:3e:c1:f2:86:2d:c5:9a:a6:
         24:cb:f2:6d:f1:59:5c:2e:3d:b7:0b:42:8a:46:fa:87:8e:c2:
         51:cd:ac:a3:4e:e4:46:da:b9:7f:a4:bd:11:12:09:a9:c4:32:
         77:6e:0b:42:a9:f1:7e:a3:92:d2:6d:1d:98:fc:9c:da:e3:06:
         f9:66:a0:8c:b7:f2:b6:cc:75:68:93:1f:d8:44:81:4e:e2:4a:
         b7:41:c9:66:7c:09:67:5d:58:24:b3:de:b8:7f:59:1f:aa:e7:
         38:b1:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:16:02 2026 by rpki-client