Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
File:                     3JDgruHswxBmy3RPin_u3vs_eTA.mft (raw, json)
Hash identifier:          py0ty26XiYlKUCSUaiSIbxj1w6kNQ2LkgfBhfqhEKoI=
Subject key identifier:   64:17:3E:3D:E5:DE:F1:B1:79:F4:F9:40:B4:73:B2:99:D4:FC:C1:CD
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Certificate issuer:       /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial:       01A0CDEC740647F4EAABE826DCB39FDB6198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
Manifest number:          1A80
Signing time:             Wed 23 Sep 2026 11:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:20 +0000
Files and hashes:         1: 3JDgruHswxBmy3RPin_u3vs_eTA.crl (hash: gi/UtbPbvhqqTNxMWM5PubtBTwrZq86eCHyMkgQeBYw=)
                          2: 72Q1egWr6oypefXTdA5CthpoDwA.asa (hash: Ex+nllLw34K8tM+m1tc2SsZ0dGbxERIt7to9fxi4ZLU=)
                          3: Z0Ol55vmano2z06uUQknUo3QoTc.roa (hash: GkLsLJIYqmg4q6xamUbvEEG9iujsWjsYcEaYmXK7cLE=)
                          4: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (hash: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8=)
                          5: aThxnwCGINMSN5w7Lq386c4Rr0Q.asa (hash: nDmBVTg9NgvFnfHF4bT15FSCd3UeJ1yvkPU8dWHoMcM=)
                          6: bw9eVtm9c40YW7trBt_TVdzJ5mI.roa (hash: /NTrObUo6IQzapQ0ypDyGs61lXuL+fvbPRbe8yw3Glk=)
                          7: l2fzBtP72pfYzFsSa2KgK_QMTGw.asa (hash: LgU75FULeZxwY3KKb4OjWA22/9/RJakUfYHdIGrNq7E=)
                          8: mOZvAMLraqykK52-jzGD-yHlcnw.roa (hash: HgyR01q3fui7+YF0vuXYroeZjeOmGgCJNhWLmBZNBqI=)
                          9: r_0py4YALAEcOOi0tvRe1NDcIA4.roa (hash: acy4ZAe5LvQuy/j1nyMxhW+v2g0V51OQVWm9ef7WTLI=)
                          10: sMFJYO9pghdo8vlEJsdIErQh-nk.asa (hash: 3eoRUhv4dICMBmHKDZtNl3L4O/US2KjEN8hQl/0JOUo=)
                          11: u02qpN14w4yhn2ctE44FwFlaayw.roa (hash: Y86Ae8inVsAjiKn8VpEwH1tTqB45gvur7i/GdDAq5IM=)
                          12: wU5WB_ji5JrlZ_16qSJUrAilivo.roa (hash: U6udo/ByFFGOCnC5vUVII/ZIrb4fHBpEXgV9OsTbTvw=)
                          13: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (hash: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:74:06:47:f4:ea:ab:e8:26:dc:b3:9f:db:61:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
        Validity
            Not Before: Sep 23 11:00:20 2026 GMT
            Not After : Sep 24 11:00:20 2026 GMT
        Subject: CN=64173e3de5def1b179f4f940b473b299d4fcc1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:90:60:a5:da:5e:7e:1a:3f:f1:36:df:e9:
                    c9:59:44:7a:5c:aa:86:f3:66:f0:9e:91:3f:6d:c3:
                    a5:fc:bd:a2:71:89:89:79:04:a5:98:09:c3:ab:1e:
                    4d:e0:a3:d5:70:6c:24:4d:71:70:19:b3:4e:4c:6f:
                    1e:09:d8:ba:63:84:22:ae:79:a3:16:6c:cf:28:fa:
                    53:74:e1:2b:6d:e8:b0:8c:b3:61:80:b6:1a:24:6d:
                    aa:6d:f8:dd:1a:27:6c:82:65:f9:c6:0d:3c:ee:58:
                    dc:06:95:f2:62:4f:ee:b2:f8:6f:74:f4:d6:e3:f8:
                    3c:f8:c7:b2:1e:20:08:89:0a:20:e0:f7:72:77:ca:
                    75:82:04:02:ff:71:09:05:35:fb:ad:72:57:87:05:
                    aa:a0:c6:c5:61:aa:0d:18:6c:f3:ff:82:99:4e:a2:
                    4e:da:ba:ae:f7:75:28:cb:09:ca:fa:6f:6e:0a:60:
                    e6:4a:81:34:3f:1f:ab:5a:08:0f:ec:95:e0:16:de:
                    1b:40:8b:8c:c8:5e:97:99:72:44:58:f1:5a:0e:b2:
                    19:08:27:89:83:88:67:e8:85:9b:79:90:51:39:9c:
                    31:7c:bf:dd:eb:d6:0f:ec:fb:ef:64:ab:49:64:10:
                    df:ab:4b:d9:a8:47:91:54:12:ac:4b:15:21:e6:40:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:3E:3D:E5:DE:F1:B1:79:F4:F9:40:B4:73:B2:99:D4:FC:C1:CD
            X509v3 Authority Key Identifier:
                keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a4:56:1c:95:a8:c8:c6:dc:6f:e1:db:03:7a:b8:f8:f6:75:
         1f:6d:ab:eb:de:04:55:bd:f4:68:93:27:b4:3b:a8:6f:b5:11:
         db:81:48:83:42:ed:97:57:d1:fd:6f:ff:c5:78:89:e2:b9:16:
         1c:a4:86:70:79:be:11:a3:4f:3d:6e:62:f8:eb:30:e8:25:17:
         eb:7a:76:77:56:ad:6b:25:16:d0:c5:17:73:5b:e7:2f:be:6d:
         a2:39:b4:03:c2:94:b5:5a:7a:8b:21:c5:d5:8f:06:cf:00:94:
         de:90:a4:89:11:76:e9:33:69:27:5d:91:33:dd:d3:de:78:76:
         47:6b:ed:52:d6:9e:54:a8:8b:61:c7:f7:41:4b:c2:4a:39:f3:
         4e:ae:3a:0e:ac:1d:fd:0e:69:09:e0:64:67:4e:a8:7f:64:d5:
         01:3d:c4:3a:fd:bb:b0:3e:77:9c:e0:4e:b1:01:01:1c:55:d9:
         b6:fa:1f:20:9f:52:95:ad:d5:3d:f1:1b:d1:0b:2d:5c:4f:0e:
         5d:c1:91:a1:ce:05:aa:ce:de:05:6f:be:43:05:69:19:8f:e2:
         74:34:08:20:b7:d0:7a:43:31:98:94:e7:64:b2:37:79:c6:a0:
         08:44:5b:d4:f5:18:e8:b1:47:0a:ec:3c:ce:68:70:d4:86:b3:
         7b:51:a4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7HQGR/Tqq+gm3LOf22GYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz
Zjc5MzAwHhcNMjYwOTIzMTEwMDIwWhcNMjYwOTI0MTEwMDIwWjAzMTEwLwYDVQQD
Eyg2NDE3M2UzZGU1ZGVmMWIxNzlmNGY5NDBiNDczYjI5OWQ0ZmNjMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9eQYKXaXn4aP/E23+nJWUR6XKqG
82bwnpE/bcOl/L2icYmJeQSlmAnDqx5N4KPVcGwkTXFwGbNOTG8eCdi6Y4Qirnmj
FmzPKPpTdOErbeiwjLNhgLYaJG2qbfjdGidsgmX5xg087ljcBpXyYk/usvhvdPTW
4/g8+MeyHiAIiQog4Pdyd8p1ggQC/3EJBTX7rXJXhwWqoMbFYaoNGGzz/4KZTqJO
2rqu93UoywnK+m9uCmDmSoE0Px+rWggP7JXgFt4bQIuMyF6XmXJEWPFaDrIZCCeJ
g4hn6IWbeZBROZwxfL/d69YP7PvvZKtJZBDfq0vZqEeRVBKsSxUh5kBRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQXPj3l3vGxefT5QLRzspnU/MHNMB8GA1UdIwQY
MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt
MDBiY2Q5YjkxYzFiLzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi
LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKRWHJWo
yMbcb+HbA3q4+PZ1H22r694EVb30aJMntDuob7UR24FIg0Ltl1fR/W//xXiJ4rkW
HKSGcHm+EaNPPW5i+Osw6CUX63p2d1atayUW0MUXc1vnL75tojm0A8KUtVp6iyHF
1Y8GzwCU3pCkiRF26TNpJ12RM93T3nh2R2vtUtaeVKiLYcf3QUvCSjnzTq46Dqwd
/Q5pCeBkZ06of2TVAT3EOv27sD53nOBOsQEBHFXZtvofIJ9Sla3VPfEb0QstXE8O
XcGRoc4Fqs7eBW++QwVpGY/idDQIILfQekMxmJTnZLI3ecagCERb1PUY6LFHCuw8
zmhw1Iaze1Gk7g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:35:26 2026 by rpki-client