Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File:                     3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier:          Z0ISmx4tjpkXqvK2LCHUek0Dzvo37xAnc18afLx8l9Y=
Subject key identifier:   67:A0:1D:A4:47:C3:5C:36:F8:16:F3:12:06:33:A8:F2:DA:30:7D:10
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer:       /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial:       01A0D45D401C514CB33A814E7F343C284B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 17:01:16 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:16 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:16 +0000
Files and hashes:         1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: FA200AbamPqlRGxBFx2MWnjrRAsX/5DnSAdMK8ufbFA=)
                          2: UQBamIu_tf9wPCOvESltx6uxaSM.roa (hash: 0H4wa03fUeDSOPCaqZfvn2P/bbZkgwu98158FsqzTX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:40:1c:51:4c:b3:3a:81:4e:7f:34:3c:28:4b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
        Validity
            Not Before: Sep 24 17:01:16 2026 GMT
            Not After : Sep 25 17:01:16 2026 GMT
        Subject: CN=67a01da447c35c36f816f3120633a8f2da307d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:a4:9a:bc:2e:fa:8b:67:e5:83:2d:50:75:
                    04:8d:92:77:3a:8d:80:69:84:8c:4b:ee:be:e7:ee:
                    19:4c:b6:28:f5:20:ad:63:9b:2b:15:bb:f2:d8:16:
                    a7:98:7c:c9:ef:4a:00:d2:0d:b4:c3:36:da:88:84:
                    ba:e0:14:98:a0:12:5f:21:07:f9:99:f2:17:b1:20:
                    30:67:ad:de:2a:04:f3:41:7f:a8:75:7f:0f:cd:9c:
                    d2:d7:b0:ca:32:d5:3e:87:3a:ef:c6:0c:f8:4e:b2:
                    e3:23:03:7c:03:f6:12:58:22:bf:04:7b:5d:b4:54:
                    16:5d:74:30:06:c8:5f:b7:9a:01:ab:12:d0:1f:00:
                    b4:87:bb:d3:f6:4e:91:c7:86:f3:2a:4a:e4:c1:ae:
                    f9:a7:84:09:41:8e:16:ad:e6:65:c8:7c:a2:f9:f2:
                    c4:f5:12:3b:74:33:a6:0e:69:90:4f:72:d7:e5:01:
                    d3:35:fe:8a:3c:81:1f:44:a0:70:35:b4:63:33:ac:
                    37:c1:a0:03:97:38:44:9d:a1:c2:0f:db:01:ec:1f:
                    23:fe:f6:5e:b1:15:14:ea:9f:da:b2:3e:91:32:5b:
                    78:db:5f:ac:9b:d3:f6:2d:2e:06:b8:01:03:e6:a2:
                    8e:e5:8f:9c:a1:73:d9:fe:f9:5a:c7:35:49:83:82:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A0:1D:A4:47:C3:5C:36:F8:16:F3:12:06:33:A8:F2:DA:30:7D:10
            X509v3 Authority Key Identifier:
                keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:24:44:8b:db:b2:ec:79:0c:0b:d4:c9:6f:75:c2:e7:40:55:
         78:2e:88:b6:5e:6a:9c:76:10:61:e6:d3:9e:48:b2:a8:69:8e:
         73:a0:cc:49:e2:c8:b5:dc:b7:c6:c9:7d:7e:d2:5e:40:f4:57:
         27:b4:75:f9:49:2f:89:42:cd:eb:2a:7d:47:83:c4:af:fb:a0:
         65:62:5a:8d:9c:5e:38:2e:cf:d1:d6:f3:c3:e7:a8:7c:9d:79:
         0d:2a:eb:d0:85:18:e2:d3:1a:57:f4:24:d8:c3:0b:ef:31:f5:
         0e:b7:fc:01:50:de:32:bd:46:ee:96:2e:dc:c3:8b:a1:1e:30:
         a8:12:25:d4:c3:69:e1:f3:06:23:25:ab:2c:73:c6:dc:8b:f5:
         d2:cc:4b:9a:c4:bf:3b:d5:02:b7:ff:0c:e6:78:b7:c5:52:71:
         01:df:b6:a2:f4:7a:93:73:c4:db:9c:63:26:31:d7:7e:bb:bf:
         3a:9e:3a:c9:00:d3:36:f4:18:fb:00:e4:be:08:35:aa:86:4a:
         28:fc:3f:76:e9:e6:d4:53:5c:d3:96:b1:74:86:72:ee:fe:b5:
         31:14:e5:ad:f2:fa:29:46:c5:5f:07:70:5d:c6:ac:55:0b:78:
         e3:06:3f:da:56:87:f1:bb:05:52:4f:46:d5:ac:22:ea:1f:51:
         c4:a2:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:55:48 2026 by rpki-client