Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File:                     3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier:          V+e849BP6NniMWK0o7Ga9JvZNvdc2HPzmlw3Jqpit5Q=
Subject key identifier:   09:0F:04:14:82:AB:BB:BE:5B:EE:E4:D8:9C:A0:5A:1F:A6:1F:9C:1A
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer:       /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial:       01A0D4CB34500ECAE24DCAF7EE21FCD310F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number:          1847
Signing time:             Thu 24 Sep 2026 19:01:21 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:21 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:21 +0000
Files and hashes:         1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: BghNewqpY+uPHPTVBngJ6tuFmT2dMVMOxDexvHEQKoo=)
                          2: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (hash: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:34:50:0e:ca:e2:4d:ca:f7:ee:21:fc:d3:10:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
        Validity
            Not Before: Sep 24 19:01:21 2026 GMT
            Not After : Sep 25 19:01:21 2026 GMT
        Subject: CN=090f041482abbbbe5beee4d89ca05a1fa61f9c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:de:38:01:e4:52:83:40:73:22:5e:a3:19:
                    af:28:5e:a1:df:e3:e9:92:61:53:7a:6d:80:f2:34:
                    21:c7:7b:84:be:98:29:77:95:47:33:06:42:b9:9e:
                    6a:7f:19:ac:b7:c6:d8:dd:5f:20:0d:ee:90:3c:7e:
                    c7:4a:38:a4:62:2a:88:ab:be:fb:b9:4b:5b:51:21:
                    a9:5f:75:d6:df:5c:77:fa:55:71:37:84:cd:78:18:
                    40:59:5a:aa:db:d3:ff:ad:e4:d6:82:52:37:22:3a:
                    f2:00:54:12:9a:41:64:06:20:49:79:bc:b8:c7:fb:
                    3d:df:25:84:0b:a7:78:00:32:d3:55:a1:cd:88:5b:
                    f4:7b:82:5a:ca:c8:4e:cf:43:be:d9:77:ad:59:a0:
                    c2:02:4b:fd:2b:91:14:f7:2b:fd:52:30:ec:ac:d6:
                    83:6c:43:dd:e1:e2:9b:5a:59:b9:3d:e9:30:99:14:
                    d6:5e:fe:58:2f:1e:63:94:b6:98:1d:26:30:dc:6b:
                    84:3a:5a:4f:dc:74:40:0e:20:5c:d6:fd:26:3e:e0:
                    24:bb:f2:b5:44:04:94:c0:3b:41:d8:c5:79:42:42:
                    9e:fc:e2:25:08:b7:0a:d3:72:81:1f:9d:53:41:11:
                    dc:f0:81:54:4f:40:d9:45:15:72:fe:27:82:40:16:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:04:14:82:AB:BB:BE:5B:EE:E4:D8:9C:A0:5A:1F:A6:1F:9C:1A
            X509v3 Authority Key Identifier:
                keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fe:f3:04:a2:6a:dc:4b:bd:b9:cc:11:a8:be:95:7a:7a:08:
         5f:61:33:3b:71:00:54:e4:35:4d:11:52:ff:b4:5f:b6:01:c6:
         6a:45:8e:74:7f:cc:26:d8:04:b8:ca:91:34:6e:45:9a:01:42:
         6d:39:7d:f0:17:e7:2f:e7:d2:a4:bb:ff:9a:df:04:d1:c1:53:
         0b:be:c7:b3:da:2e:4e:07:9f:5e:1b:f0:75:12:6c:93:40:43:
         8f:37:4e:b5:10:2d:54:0a:51:76:60:ea:37:c8:0d:aa:43:f1:
         79:37:60:69:89:04:74:04:31:60:ac:44:ab:ac:e4:17:47:32:
         ca:a6:d9:30:11:73:f9:b2:8f:fc:19:c2:b3:14:a3:ce:95:11:
         39:de:95:53:be:e8:71:6d:fb:1d:19:6e:c2:eb:b2:18:6f:fc:
         44:77:7a:96:2d:fb:48:dc:2e:40:a9:31:e8:78:26:02:e6:ff:
         55:76:b0:0e:7d:9a:e1:4b:99:c4:29:3c:e8:31:8d:af:1e:2f:
         9b:51:ea:b7:0b:86:f2:88:ba:2e:ab:92:19:12:8d:da:d7:01:
         39:ab:6c:0b:ee:57:39:87:73:10:71:1c:5e:0b:4d:66:4e:a7:
         44:04:85:fa:4f:79:89:a3:d7:9a:b1:61:20:1e:52:3a:79:2f:
         03:6f:93:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:54:41 2026 by rpki-client