Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File:                     3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier:          F6LKrSEdE58wRwsdyo9VrSp3XFdN4xN2supA7DU4/h8=
Subject key identifier:   76:4E:DF:BB:BC:0B:A2:36:95:04:56:2A:3E:7A:CD:E5:78:65:D9:33
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer:       /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial:       01A0CD10DF0067196F33F1CC963D4B3BE0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number:          066B
Signing time:             Wed 23 Sep 2026 07:00:29 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:29 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:29 +0000
Files and hashes:         1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: qI2h3KAUQ0ZZ3AU2niNXdi2fjuLZqv0OKGvnc6pmMJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:df:00:67:19:6f:33:f1:cc:96:3d:4b:3b:e0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
        Validity
            Not Before: Sep 23 07:00:29 2026 GMT
            Not After : Sep 24 07:00:29 2026 GMT
        Subject: CN=764edfbbbc0ba2369504562a3e7acde57865d933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:63:82:3e:d1:ed:c8:ab:6a:b4:dd:30:44:
                    8d:6d:34:5d:82:80:f0:34:4b:10:26:78:e9:e1:15:
                    86:08:dd:9b:ea:35:23:7a:40:48:04:55:4e:f7:6a:
                    6d:e6:5d:6c:a6:b0:2e:a6:c3:70:09:37:cd:dc:c8:
                    e2:25:ff:7c:b5:cf:f0:b7:68:4a:39:4c:17:44:05:
                    11:ba:20:9e:1f:fc:cb:95:f0:04:02:db:0f:af:55:
                    a3:5b:ee:3f:05:82:c9:d1:23:10:95:a2:95:c2:ce:
                    ee:25:07:9a:07:5c:e0:da:92:83:6d:5d:7a:55:ac:
                    b9:31:0d:f9:5c:23:51:10:01:3f:14:fc:c5:0d:2b:
                    e0:f3:d9:cd:c8:28:01:10:85:87:3d:b1:cb:39:a7:
                    75:63:38:1d:51:86:9b:77:6d:fc:2b:2c:9a:45:d1:
                    41:df:86:da:70:03:cd:e5:5c:e1:d1:be:8b:97:2e:
                    44:53:19:7c:47:ab:41:3e:43:a2:7d:61:d1:f5:3a:
                    d7:ed:b6:2e:3e:9c:aa:2d:15:13:8f:d0:8b:a4:03:
                    47:16:df:58:ad:19:db:a6:6a:ad:64:d8:7a:76:fd:
                    bc:16:f9:50:e8:0e:64:c0:8f:ab:09:98:fe:5a:55:
                    20:0d:cc:35:19:34:9a:33:57:09:11:07:0e:5c:cc:
                    6a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:DF:BB:BC:0B:A2:36:95:04:56:2A:3E:7A:CD:E5:78:65:D9:33
            X509v3 Authority Key Identifier:
                keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:26:ec:18:2d:03:4c:d2:ef:e1:aa:47:5d:06:40:18:be:5a:
         7a:02:15:43:4c:d1:10:56:8e:c9:7b:4f:c7:05:4b:19:34:ae:
         80:0e:73:85:fd:b8:6e:a0:65:ca:c2:dd:9e:3c:70:1f:48:f1:
         f3:f0:65:99:5e:50:49:a6:7c:d5:8a:dc:f5:92:0b:34:33:c7:
         c8:80:eb:90:a2:b1:16:d1:f4:75:8f:23:51:b1:32:0a:b2:e0:
         93:5d:55:c9:21:f9:79:fe:64:dd:55:b5:34:a7:af:d4:6b:6d:
         a5:b4:3c:60:56:b4:0e:c6:91:e2:d0:d2:20:7f:0e:d9:96:db:
         fb:ab:36:37:45:28:9f:7d:2f:40:af:a4:fa:17:4d:17:a4:26:
         f1:6b:1d:12:b4:c0:34:4a:a9:cc:3b:17:db:6b:fe:e6:95:48:
         e7:85:c1:1b:8c:be:e5:d2:05:ea:2b:4e:f6:6c:24:c7:2b:61:
         29:fc:94:db:f4:e6:bb:87:db:1b:09:12:23:08:d9:66:02:56:
         4a:8c:79:41:66:c8:e5:63:dd:82:55:ed:19:11:a8:e0:af:ad:
         10:1e:ef:92:c1:84:f7:db:e0:c3:88:a8:8f:2c:9d:7c:f0:ba:
         47:24:b6:2a:e2:c2:74:f1:44:04:46:53:f5:fa:4c:d1:2f:08:
         04:20:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:58:22 2026 by rpki-client