Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File:                     PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier:          X/Bf2Pj9WX12pZLk7tL9FKibu78akVMSHjMwknIei98=
Subject key identifier:   45:9E:B1:61:DB:18:EC:8A:10:34:1A:91:74:42:C3:C1:5D:CF:AB:10
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer:       /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial:       01A0CE917D909D62E49D95BBBC6279C0CA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number:          1A69
Signing time:             Wed 23 Sep 2026 14:00:36 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:36 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:36 +0000
Files and hashes:         1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: ZzALfUy4sLLG93POLHy/bA5oOz++EZKDunibLglFPDE=)
                          2: TLQXMGafOIsR5ApnOvsp_icpd_8.roa (hash: 86sTIzyyyoy2QmRIQfdCQ3OfBh5rzP1QPdMk+v5vtd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:7d:90:9d:62:e4:9d:95:bb:bc:62:79:c0:ca:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
        Validity
            Not Before: Sep 23 14:00:36 2026 GMT
            Not After : Sep 24 14:00:36 2026 GMT
        Subject: CN=459eb161db18ec8a10341a917442c3c15dcfab10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:30:97:69:d6:78:78:c4:9d:64:d0:f5:7d:
                    fa:99:08:61:fe:30:27:3f:ed:36:8c:e9:56:47:2e:
                    dc:2f:44:f7:2c:39:0b:29:e8:fe:6f:a7:33:c7:e7:
                    03:44:fa:cc:be:6c:fa:72:53:3c:10:02:6b:14:74:
                    ea:f3:a1:ce:78:d6:03:f7:5a:1f:f6:c6:6b:45:57:
                    ea:07:de:23:98:a2:f2:7b:c0:a1:74:ad:b9:55:65:
                    30:40:08:36:65:9a:ae:5b:ac:48:17:67:00:12:1c:
                    fc:69:58:e3:ce:25:64:32:78:ce:09:20:88:0e:2b:
                    28:af:fb:af:dc:dd:98:0e:65:0b:cb:31:db:f0:d0:
                    17:e9:25:71:94:b5:00:99:01:90:ce:b6:99:55:5a:
                    9d:16:7d:a8:1c:d1:c8:e6:96:e0:c7:19:02:df:20:
                    e6:9f:c2:cc:27:7b:e0:87:fd:6c:62:e0:8d:33:52:
                    74:29:1c:b6:79:52:4f:83:66:ef:98:19:dd:3c:57:
                    d3:e1:25:c6:42:76:53:e8:49:fe:94:cd:8a:30:7f:
                    69:8e:50:68:70:21:a1:1d:34:45:11:00:6a:c4:38:
                    2f:76:71:e6:08:78:a0:50:b7:8f:bc:f4:d2:82:1b:
                    9c:0f:aa:5b:d2:52:21:6b:35:c9:23:c0:91:02:bd:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9E:B1:61:DB:18:EC:8A:10:34:1A:91:74:42:C3:C1:5D:CF:AB:10
            X509v3 Authority Key Identifier:
                keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:20:b2:96:b0:d7:ab:35:62:96:d9:4a:e3:56:54:75:fd:
         7b:90:6d:27:00:e9:53:03:ac:d4:c8:3e:7e:1e:db:d0:1b:f2:
         a0:17:ae:7a:13:cb:8a:1d:77:aa:87:5d:76:5a:b1:ed:f6:51:
         09:14:96:95:48:f2:ff:58:05:86:89:86:ae:ed:1f:3d:71:c5:
         77:7e:a5:c5:84:88:16:dd:90:47:93:b4:c0:d3:8e:d4:15:ba:
         65:46:3d:77:90:c4:8e:5f:f0:bf:0d:8f:fa:3d:e8:df:06:bf:
         d2:dc:eb:7d:1d:a8:fb:61:0c:f8:d1:7b:d4:0f:e3:4f:f3:8f:
         6a:b8:83:97:44:8f:f0:09:88:ae:d3:e8:dc:bf:e7:21:a7:4e:
         86:92:54:c1:b1:a9:d0:1e:62:38:aa:b5:2e:82:1d:32:f2:0f:
         cc:01:bd:1b:9b:4c:c3:7d:0b:15:6f:8e:d7:92:92:cd:10:ff:
         7b:7a:e1:5e:4d:9d:24:cf:c7:d7:94:fe:5b:00:a7:0e:99:db:
         c0:0f:f9:51:04:30:42:ba:2a:d1:11:a0:6b:4f:6d:65:59:c4:
         e5:29:90:9d:d0:87:3a:0b:40:5b:b5:fd:aa:c6:40:e6:80:c0:
         c1:7c:47:29:1a:72:16:b6:c7:4f:cd:95:0b:83:13:3a:11:c2:
         5d:e4:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:10:37 2026 by rpki-client