Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File:                     3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier:          U9WwDesr86eC8p28lsf3UpLruu3fTwY5Uslr10xogU8=
Subject key identifier:   87:C9:55:02:ED:B9:AF:41:FE:36:11:99:45:C4:1D:C4:3E:22:9C:75
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       01A0D6148FA7979C6C50BC7B8EC1DDE382EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number:          132B
Signing time:             Fri 25 Sep 2026 01:01:06 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:06 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:06 +0000
Files and hashes:         1: 3egON2jf6e6LPs4tP2ayfLDDjko.roa (hash: FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=)
                          2: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: ZdpVmqLC81khG1qLS4nxt4dS4kytQcly3x8k/sqSviQ=)
                          3: mvCEO_UcfF7FkrN-g_zfUazRAdY.roa (hash: 60BBAVa3nyV59ILHyxDNVmnRbsZGSR5/5E7St8ZMJAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:14:8f:a7:97:9c:6c:50:bc:7b:8e:c1:dd:e3:82:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Sep 25 01:01:06 2026 GMT
            Not After : Sep 26 01:01:06 2026 GMT
        Subject: CN=87c95502edb9af41fe36119945c41dc43e229c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:04:35:f5:7c:6a:2b:27:4e:a6:f8:4c:0b:
                    e2:29:7e:0c:92:7b:5f:3b:89:94:f8:16:c1:d6:b6:
                    be:a9:80:0e:a6:62:df:1e:09:b1:dd:19:ac:9f:3d:
                    f8:19:96:3f:fe:19:eb:62:90:25:b3:7c:4d:26:f9:
                    39:ec:6b:40:04:07:8f:c2:7d:c5:df:5e:61:e3:9c:
                    43:d9:0f:e8:66:5a:46:98:bb:a8:e9:d0:ad:38:31:
                    ae:80:50:80:b0:c1:4b:fe:ee:f8:73:73:68:d0:2e:
                    d3:99:f0:af:39:fc:fa:94:7d:03:3b:a9:88:21:dc:
                    21:72:94:cc:35:6a:9c:c3:2b:af:2b:5e:a0:0d:57:
                    d3:38:48:79:d0:de:29:51:a0:fb:6a:6e:69:ed:83:
                    18:96:85:79:41:1f:cf:27:39:1c:d0:54:e3:5c:50:
                    1e:47:bd:7b:17:2e:14:f4:93:a1:16:01:9a:71:84:
                    c1:e5:e2:39:33:be:b5:42:0f:51:86:05:51:62:4e:
                    05:ae:03:43:f3:d9:68:64:b1:85:31:ea:99:9a:0d:
                    35:4a:29:4f:7d:9f:4e:35:a1:2a:bf:b7:4e:4d:db:
                    5f:83:9e:64:c1:ca:26:8a:2b:88:94:2d:18:77:3a:
                    6d:69:87:c9:5c:bc:e1:d9:42:e1:17:33:d6:45:68:
                    3c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C9:55:02:ED:B9:AF:41:FE:36:11:99:45:C4:1D:C4:3E:22:9C:75
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:97:61:d3:af:df:99:7c:2e:f1:b0:37:9d:93:6b:9b:d5:
         ba:a8:68:35:64:e8:69:6e:5a:e0:40:dd:b4:b8:4a:7e:73:4a:
         8d:af:65:25:3b:56:de:c3:4b:66:85:83:af:10:af:68:a0:b6:
         7d:17:70:a4:3f:51:14:ab:7d:75:a4:ad:46:3f:54:e2:42:2f:
         12:6b:8f:8a:0a:9a:74:06:f9:a1:ca:f2:e4:3e:af:25:d9:0d:
         99:33:9e:cf:7f:b0:ad:74:69:65:1c:56:22:68:5e:c2:4f:89:
         73:b5:48:83:04:64:79:a8:ed:93:9b:dd:7e:b8:ab:d0:cb:7e:
         08:17:95:72:28:b7:38:22:ff:ac:c9:28:67:91:0e:ae:78:d9:
         d4:ec:47:b7:03:38:4b:18:36:f9:16:9a:16:06:db:eb:7c:54:
         37:a6:10:85:8f:80:3a:99:16:7f:7d:24:7d:31:6c:97:d9:0e:
         5a:c3:19:21:f0:44:c6:6a:7f:bf:c8:39:e1:dd:8e:4a:d3:ff:
         bf:f6:a0:dd:7f:dd:e1:aa:17:ef:5c:9d:06:2a:d7:a2:09:f1:
         82:9a:b3:15:92:84:46:10:4d:c9:be:85:ff:2c:d6:0f:d5:a0:
         d1:c8:64:e0:01:b6:9c:60:70:97:f6:1d:13:f3:1b:9d:ce:56:
         b1:79:03:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:33:51 2026 by rpki-client