Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          tdFQapag5fdzLRUrYbZ+X23LzodscCOXHT1UZ1O4YhI=
Subject key identifier:   70:68:6A:D7:49:BA:69:03:33:3B:C5:F4:92:F9:DF:BF:73:AE:BE:B0
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       01A1DD9495057A6B8B884B989C70C51BE5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          1AFE
Signing time:             Sun 15 Nov 2026 05:01:04 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:04 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:04 +0000
Files and hashes:         1: Diekl2zXb7n0CuVf0d8CIZAQiD4.asa (hash: hMHM+mgfuiqacZb7CGDbpnq9AnNye/JIV78fFjQkmQ0=)
                          2: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: c9619TCJwjgj4EG6ZLqbhfYrNLPDKXYPaX6916kJvWA=)
                          3: p91jRhgPPPPCD8AUVVRLrLT2tSc.roa (hash: VHDy7CGzOsa6Fe1X3O2C9FkcWyn52HsGJPVnDhyYsx4=)
                          4: qqaQ4enj9kD29mGGzp_xaeYYmtQ.roa (hash: /ilDb7HMvOlm/UTTWTM8BFNf5LLlJsVssBSKgu7I4Do=)
                          5: qyiVEH1YwkLH0sAEgDKOVXBdA_I.roa (hash: iDOUGeKcdD6V1eq/ZjCXEfsnMVXSPyM428Wp1i5Qy0I=)
                          6: vRpn5QOd-d0RVG2bwdPVjMC_Eq0.roa (hash: Jk/e9Y8CnxRj/DTYYCH6euq93lPLWUg+CGFDbw48V3A=)
                          7: xWBiJmvWmusSflJu9_V6W7XfYmc.roa (hash: Skb1BGsT8j6jKgXJRquu4p4R1kYLRXUsM6g5LOMdMrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:95:05:7a:6b:8b:88:4b:98:9c:70:c5:1b:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Nov 15 05:01:04 2026 GMT
            Not After : Nov 16 05:01:04 2026 GMT
        Subject: CN=70686ad749ba6903333bc5f492f9dfbf73aebeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:a6:b9:a5:42:96:42:ab:b4:bd:d4:f8:aa:
                    af:87:90:fa:6a:cf:02:db:f9:ed:f6:e6:e0:fa:c7:
                    af:2d:4d:63:fe:33:5f:84:3a:ab:7e:50:50:1a:0b:
                    75:a1:9e:17:22:ee:50:02:ca:38:24:3e:31:e3:a2:
                    7b:7d:96:62:0d:2d:92:9d:2f:04:57:4a:54:a1:c7:
                    29:bf:9f:94:8c:15:58:59:2f:19:e5:4c:37:b6:ff:
                    26:5f:32:41:50:d1:3a:aa:20:5c:a0:a9:0b:ff:88:
                    90:a8:04:e5:61:59:c4:3a:0a:ee:1d:65:53:bc:07:
                    e2:82:29:ac:dd:c8:8a:b5:fb:34:a4:29:40:f0:28:
                    f9:c5:3d:a4:ac:52:cc:e3:66:99:c9:30:34:da:0e:
                    ae:c8:89:8a:b6:de:77:bf:04:8f:73:fd:ba:a7:3a:
                    26:5b:b4:4f:e7:df:c2:de:02:e4:bf:e9:22:95:0b:
                    8a:88:54:fa:24:f1:36:cf:6a:f6:84:b9:86:a4:a3:
                    df:58:3b:bf:78:e2:b6:42:ed:62:54:ba:a3:f5:8b:
                    8a:4d:06:57:ae:c9:9a:31:ab:a3:a8:e3:ab:a7:cc:
                    0a:4d:7c:54:b8:a8:20:71:75:6e:7a:20:10:34:e0:
                    74:76:87:97:a5:4e:06:d8:a4:5e:f5:b8:7c:c8:ca:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:6A:D7:49:BA:69:03:33:3B:C5:F4:92:F9:DF:BF:73:AE:BE:B0
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:53:2d:d7:54:ff:1f:9b:70:71:ff:0b:39:c3:8e:b0:08:8a:
         c0:94:cd:80:90:8d:94:9f:3e:0d:66:61:34:11:65:3f:ec:41:
         e6:f0:5a:60:60:92:7b:80:9b:6c:db:34:94:98:bb:ae:3d:15:
         05:a7:19:2e:9d:0a:9e:c9:8c:7b:62:98:3c:18:81:41:21:03:
         fa:ff:4a:69:59:9d:23:fa:00:e6:b0:5e:d3:1a:54:01:b5:50:
         f6:a8:a0:4d:92:35:4a:f6:69:07:f7:d4:8d:92:fc:37:b1:99:
         e2:33:40:db:ab:ab:21:0a:5a:3e:49:2d:03:37:b1:52:0a:64:
         d8:f8:b4:4f:d7:65:f8:bf:16:30:db:be:62:2e:63:13:ea:d3:
         07:5d:5d:0a:05:1d:fc:48:76:cf:30:e0:52:af:ec:91:51:2d:
         5b:95:0b:c9:b9:cc:1e:fc:b2:19:51:06:ec:68:5a:8f:4b:03:
         b9:fc:38:69:d1:e6:8a:74:1b:1d:15:d9:ab:44:2e:61:d0:d3:
         72:3a:2f:1f:0f:c5:0d:a3:17:d3:c4:ad:dd:1b:89:0b:a3:ce:
         01:88:25:b7:12:47:27:14:c1:b7:73:bc:5c:97:8b:b7:7b:df:
         e6:1f:fa:0c:b0:0d:60:61:74:41:a3:f4:76:9a:76:65:6b:b1:
         6f:eb:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:36:28 2026 by rpki-client