Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
File:                     RhTuNEGQGX9UPnHNb05PDidRXV0.mft (raw, json)
Hash identifier:          OIA4XBAtTqJ/WrOYTyIDt9eAt68fz4/YAcSRCAUWlSQ=
Subject key identifier:   1C:75:35:D2:35:FE:41:16:E2:FC:28:63:ED:67:90:56:64:38:A6:A8
Authority key identifier: 46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
Certificate issuer:       /CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Certificate serial:       01A0CC3555CEC1C6CA24CBCC6BBCB0F2AE00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:42 +0000
Files and hashes:         1: 1-RS3CAUjad02YIbiVU1F5-819y0.asa (hash: 1BubvCrQ2zsMtupe0NwYXlBK8aNp/ATG1ilUxTldYBs=)
                          2: 3Xi5tv4f9ZTp-NVxa7r82OrMxQ8.asa (hash: tgVHdTeJUIAlqKv0GSTC5YQUxy31ezVId2JQeEf5oTc=)
                          3: RhTuNEGQGX9UPnHNb05PDidRXV0.crl (hash: bpxAc0ft5ZS7VMfw3gaJquR1sMogkn2bUvK/qmsTGNw=)
                          4: UbteF0EGCdi6gfORL30dQO-_S4U.roa (hash: ackfEEjxOVy94oJBRuk+2oKVVk+t5G4fWLvdaqS5jFw=)
                          5: Vl8uczSnLZvnr4hJxmOltHRV27k.roa (hash: HxK/vDt6JA/Pn8tCf3kJJHpGggMAkjgi5391zitvHTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:55:ce:c1:c6:ca:24:cb:cc:6b:bc:b0:f2:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
        Validity
            Not Before: Sep 23 03:00:42 2026 GMT
            Not After : Sep 24 03:00:42 2026 GMT
        Subject: CN=1c7535d235fe4116e2fc2863ed6790566438a6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:5e:c5:8c:33:4c:9d:c8:26:d8:b2:5d:f1:
                    5a:7d:15:15:b7:cc:ac:ef:65:cf:94:09:40:4e:70:
                    d9:d2:a6:65:a4:af:5f:20:c0:f8:72:bd:f5:4c:f4:
                    66:97:e9:d9:be:89:ed:72:df:7d:d5:7b:c9:c8:55:
                    16:01:d8:bb:07:8b:99:14:a6:47:82:a2:bf:24:ee:
                    70:b6:f1:f6:f5:d7:0f:13:05:e6:d0:f1:6b:fb:ed:
                    8c:73:60:23:2e:5f:a3:48:5d:84:9f:29:b9:13:1c:
                    d4:4a:6d:a8:c6:bf:39:38:60:46:c7:38:85:96:6d:
                    ae:94:d7:e1:06:db:b6:c1:d0:27:b2:7e:ff:e3:a5:
                    5a:84:11:89:ff:06:25:3a:ab:71:ad:73:5c:b4:b8:
                    96:97:a0:9b:d0:77:5b:b7:c1:8e:02:b8:cc:5a:44:
                    13:c4:27:17:1a:31:38:74:c6:63:82:9e:4b:13:94:
                    81:2b:b3:26:a1:af:4c:f2:ba:d5:5e:39:65:a1:78:
                    f6:39:d4:22:8a:bf:f2:27:b0:cb:bb:df:8c:a1:4f:
                    24:35:b9:24:13:71:33:ea:39:40:c8:d3:4e:92:24:
                    82:cb:2e:d6:7d:f7:63:c8:48:e5:39:49:67:2e:83:
                    05:83:6b:f6:d6:b0:dc:ee:7b:a9:ef:32:42:09:cd:
                    28:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:75:35:D2:35:FE:41:16:E2:FC:28:63:ED:67:90:56:64:38:A6:A8
            X509v3 Authority Key Identifier:
                keyid:46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:62:17:41:8e:9b:e5:bf:48:ac:1e:e4:a6:6f:8e:1b:71:4f:
         4f:f4:15:e6:37:08:c0:7d:a9:8c:92:aa:63:8b:1b:de:ff:4d:
         1a:4f:fc:24:0a:f1:81:03:f8:d5:9d:7d:8a:df:d3:b7:63:16:
         6e:89:c5:80:2d:19:22:1b:5d:a9:ae:11:ba:fd:39:45:f2:9e:
         28:33:4c:66:af:f7:14:a4:29:69:88:a0:83:27:48:c4:e9:40:
         d9:aa:5e:4c:26:6c:95:ea:c5:73:0e:ef:3f:66:e0:1c:8f:cb:
         3a:8c:6f:c5:83:1b:30:f1:6e:db:66:98:29:12:dc:09:42:b3:
         1c:77:28:aa:52:b4:c2:f7:84:4f:d6:be:06:3f:cf:b7:a0:04:
         f7:41:d7:f6:67:79:08:22:b1:0e:38:4c:1b:ed:1f:72:7a:b8:
         44:ac:65:e8:fe:05:4a:14:25:96:31:db:9c:0e:e1:54:8f:71:
         09:78:7b:45:6c:08:f5:5a:a6:7b:be:a3:a2:c5:e1:1b:97:92:
         58:f4:c9:a7:22:70:29:17:25:c2:df:c9:de:40:41:0b:b6:69:
         8a:b3:95:08:96:c0:3a:f7:86:3b:c7:7a:12:45:8a:53:79:73:
         e2:55:b5:eb:63:f2:ef:28:ae:cd:97:37:6f:c2:a5:77:9e:ce:
         6f:5d:4a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNVXOwcbKJMvMa7yw8q4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTRlZTM0NDE5MDE5N2Y1NDNlNzFjZDZmNGU0ZjBlMjc1
MTVkNWQwHhcNMjYwOTIzMDMwMDQyWhcNMjYwOTI0MDMwMDQyWjAzMTEwLwYDVQQD
EygxYzc1MzVkMjM1ZmU0MTE2ZTJmYzI4NjNlZDY3OTA1NjY0MzhhNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPVexYwzTJ3IJtiyXfFafRUVt8ys
72XPlAlATnDZ0qZlpK9fIMD4cr31TPRml+nZvontct991XvJyFUWAdi7B4uZFKZH
gqK/JO5wtvH29dcPEwXm0PFr++2Mc2AjLl+jSF2Enym5ExzUSm2oxr85OGBGxziF
lm2ulNfhBtu2wdAnsn7/46VahBGJ/wYlOqtxrXNctLiWl6Cb0Hdbt8GOArjMWkQT
xCcXGjE4dMZjgp5LE5SBK7Mmoa9M8rrVXjlloXj2OdQiir/yJ7DLu9+MoU8kNbkk
E3Ez6jlAyNNOkiSCyy7WffdjyEjlOUlnLoMFg2v21rDc7nup7zJCCc0oBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx1NdI1/kEW4vwoY+1nkFZkOKaoMB8GA1UdIwQY
MBaAFEYU7jRBkBl/VD5xzW9OTw4nUV1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhUdU5FR1FHWDlVUG5ITmIwNVBEaWRSWFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvUmhUdU5FR1FHWDlVUG5ITmIwNVBEaWRSWFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvUmhUdU5FR1FHWDlVUG5ITmIwNVBEaWRSWFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2IXQY6b
5b9IrB7kpm+OG3FPT/QV5jcIwH2pjJKqY4sb3v9NGk/8JArxgQP41Z19it/Tt2MW
bonFgC0ZIhtdqa4Ruv05RfKeKDNMZq/3FKQpaYiggydIxOlA2apeTCZslerFcw7v
P2bgHI/LOoxvxYMbMPFu22aYKRLcCUKzHHcoqlK0wveET9a+Bj/Pt6AE90HX9md5
CCKxDjhMG+0fcnq4RKxl6P4FShQlljHbnA7hVI9xCXh7RWwI9Vqme76josXhG5eS
WPTJpyJwKRclwt/J3kBBC7ZpirOVCJbAOveGO8d6EkWKU3lz4lW162Py7yiuzZc3
b8Kld57Ob11KQg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:30:46 2026 by rpki-client