Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
File:                     3eDv_-eZBjbry_628Ek2EyYQcq8.mft (raw, json)
Hash identifier:          cD/lbUFlELUvn/QZ4KBGXsGa+3ukNxkoDNTVSKXxAr0=
Subject key identifier:   9C:93:4E:91:3B:17:C4:83:40:B4:E6:79:9F:D9:60:07:57:31:11:BC
Authority key identifier: DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF
Certificate issuer:       /CN=dde0efffe7990636ebcbfeb6f0493613261072af
Certificate serial:       01A0CCA3B4A2B421A77F4E9525939E3007E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
Manifest number:          E0
Signing time:             Wed 23 Sep 2026 05:01:15 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:15 +0000
Manifest next update:     Thu 24 Sep 2026 05:01:15 +0000
Files and hashes:         1: 3eDv_-eZBjbry_628Ek2EyYQcq8.crl (hash: esvCcakM5SIgKvU/yYT1UyLvFRVTXqEsbi/csOjdbd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:b4:a2:b4:21:a7:7f:4e:95:25:93:9e:30:07:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde0efffe7990636ebcbfeb6f0493613261072af
        Validity
            Not Before: Sep 23 05:01:15 2026 GMT
            Not After : Sep 24 05:01:15 2026 GMT
        Subject: CN=9c934e913b17c48340b4e6799fd96007573111bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:31:fc:07:f4:f1:4d:ed:52:de:44:2d:db:
                    5c:02:02:43:26:09:07:88:ac:75:32:5f:32:e2:9a:
                    83:b1:3e:d7:e1:d8:88:ea:ea:d4:4e:43:33:43:e1:
                    e9:a8:28:51:be:f8:29:be:aa:6e:6d:39:8f:9a:1e:
                    3a:52:d4:6c:69:a7:8c:a6:b5:85:ba:98:16:96:31:
                    08:4b:4b:3b:1b:91:95:f7:35:57:c3:3c:68:9d:c2:
                    12:28:79:b9:c8:b6:e9:d9:2e:e0:33:77:e6:61:d4:
                    64:2b:b3:60:92:48:e4:4c:1f:bb:aa:44:6f:30:96:
                    6a:23:dc:29:0b:8b:ec:59:99:eb:5d:23:1e:9d:04:
                    2d:c8:aa:f5:46:5d:c8:55:fe:07:bc:61:9b:8f:15:
                    d0:6c:83:e1:b1:68:3a:4e:dc:2a:1e:ca:6e:f2:47:
                    eb:8b:ed:cb:55:e9:9a:ec:5c:f7:ae:7d:a9:57:00:
                    08:ea:92:00:6e:51:7c:b9:82:93:3b:ba:cf:39:a9:
                    25:20:96:4a:4e:c9:7f:48:e6:2c:98:86:b4:c6:1f:
                    a2:66:19:92:95:0d:8c:44:cb:83:af:ef:dd:3e:ec:
                    18:db:e7:33:f4:8c:d7:b9:18:dc:70:a2:15:69:52:
                    50:00:53:de:ab:0a:d9:d2:0b:50:65:ca:44:00:4c:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:4E:91:3B:17:C4:83:40:B4:E6:79:9F:D9:60:07:57:31:11:BC
            X509v3 Authority Key Identifier:
                keyid:DD:E0:EF:FF:E7:99:06:36:EB:CB:FE:B6:F0:49:36:13:26:10:72:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eDv_-eZBjbry_628Ek2EyYQcq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b3d8b2-2854-4561-814e-fcf4f131c3d4/1/3eDv_-eZBjbry_628Ek2EyYQcq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:18:1b:82:e0:ad:a9:81:09:ab:b1:19:60:7d:d9:54:4a:9a:
         d5:f9:d8:1c:53:cb:e6:74:77:1f:4e:d8:40:4a:dc:36:7d:19:
         b1:7b:14:0f:fe:03:b9:33:77:b2:11:88:e8:48:63:e3:e8:cc:
         c3:0c:66:06:e2:d6:21:f1:85:24:e6:59:fa:7f:15:50:3c:ef:
         47:10:28:c3:3a:f9:06:1d:8c:2b:0c:5a:bd:6c:53:b9:4c:cd:
         2e:6b:3d:b8:a1:80:fc:51:37:22:be:2c:82:22:4e:84:b1:b0:
         62:43:c5:5c:c6:d8:b3:fc:81:3f:52:fa:7d:e9:36:31:77:cf:
         92:42:af:96:5e:62:ee:70:cc:6f:43:d8:3d:e2:34:fc:50:db:
         a1:66:57:60:13:52:b3:2e:9d:05:8d:2e:d5:a0:3c:25:d6:c7:
         f8:c3:46:19:fa:db:86:02:62:d7:a2:51:a7:b3:31:c3:4a:73:
         f0:84:96:c0:6e:d6:82:86:de:62:f9:9a:be:b8:f4:72:ae:7e:
         96:39:55:ea:c0:d6:52:63:0e:02:b4:41:3c:94:04:21:63:20:
         f0:51:b4:68:cf:f4:e2:2b:46:a4:5f:50:dd:ea:cf:e3:25:5c:
         ba:b5:0e:0d:02:b7:00:27:08:e3:4c:7d:60:cd:42:3f:d4:0e:
         f0:9c:79:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo7SitCGnf06VJZOeMAfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTBlZmZmZTc5OTA2MzZlYmNiZmViNmYwNDkzNjEzMjYx
MDcyYWYwHhcNMjYwOTIzMDUwMTE1WhcNMjYwOTI0MDUwMTE1WjAzMTEwLwYDVQQD
Eyg5YzkzNGU5MTNiMTdjNDgzNDBiNGU2Nzk5ZmQ5NjAwNzU3MzExMWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypox/Af08U3tUt5ELdtcAgJDJgkH
iKx1Ml8y4pqDsT7X4diI6urUTkMzQ+HpqChRvvgpvqpubTmPmh46UtRsaaeMprWF
upgWljEIS0s7G5GV9zVXwzxoncISKHm5yLbp2S7gM3fmYdRkK7NgkkjkTB+7qkRv
MJZqI9wpC4vsWZnrXSMenQQtyKr1Rl3IVf4HvGGbjxXQbIPhsWg6TtwqHspu8kfr
i+3LVema7Fz3rn2pVwAI6pIAblF8uYKTO7rPOaklIJZKTsl/SOYsmIa0xh+iZhmS
lQ2MRMuDr+/dPuwY2+cz9IzXuRjccKIVaVJQAFPeqwrZ0gtQZcpEAEwy8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyTTpE7F8SDQLTmeZ/ZYAdXMRG8MB8GA1UdIwQY
MBaAFN3g7//nmQY268v+tvBJNhMmEHKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VEdl8tZVpCamJyeV82MjhFazJFeVlRY3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iM2Q4YjItMjg1NC00NTYxLTgxNGUt
ZmNmNGYxMzFjM2Q0LzEvM2VEdl8tZVpCamJyeV82MjhFazJFeVlRY3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iM2Q4YjItMjg1NC00NTYxLTgxNGUtZmNmNGYxMzFjM2Q0
LzEvM2VEdl8tZVpCamJyeV82MjhFazJFeVlRY3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRgbguCt
qYEJq7EZYH3ZVEqa1fnYHFPL5nR3H07YQErcNn0ZsXsUD/4DuTN3shGI6Ehj4+jM
wwxmBuLWIfGFJOZZ+n8VUDzvRxAowzr5Bh2MKwxavWxTuUzNLms9uKGA/FE3Ir4s
giJOhLGwYkPFXMbYs/yBP1L6fek2MXfPkkKvll5i7nDMb0PYPeI0/FDboWZXYBNS
sy6dBY0u1aA8JdbH+MNGGfrbhgJi16JRp7Mxw0pz8ISWwG7WgobeYvmavrj0cq5+
ljlV6sDWUmMOArRBPJQEIWMg8FG0aM/04itGpF9Q3erP4yVcurUODQK3ACcI40x9
YM1CP9QO8Jx50A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:39:56 2026 by rpki-client