Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
File:                     3UbviV9ioiHeWcCl4MubNGn-UgE.mft (raw, json)
Hash identifier:          q+0aCJuGG3QHVADmv2T7NwIA/wiRc5bH7C3c+Orz1Eo=
Subject key identifier:   16:37:90:F4:15:E7:85:1A:4A:CF:97:51:C3:E3:CC:53:C9:F9:13:54
Authority key identifier: DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
Certificate issuer:       /CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Certificate serial:       01A0DBA8D2C79D945682879628178B333E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:01:09 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:09 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:09 +0000
Files and hashes:         1: 3UbviV9ioiHeWcCl4MubNGn-UgE.crl (hash: vh31NxnhTetTcL3cAYGchrHtOnVexYiu3BYJKCyVaWg=)
                          2: Sdcf2dHZqQivboyuko2C7HiYjjk.roa (hash: TB/q3GnkSetf9euk52uPTmgDhdeYTD4KIv37dJknSdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a8:d2:c7:9d:94:56:82:87:96:28:17:8b:33:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
        Validity
            Not Before: Sep 26 03:01:09 2026 GMT
            Not After : Sep 27 03:01:09 2026 GMT
        Subject: CN=163790f415e7851a4acf9751c3e3cc53c9f91354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:2e:a9:f2:3e:94:18:60:e5:c4:af:56:ff:
                    5f:9e:ac:3c:08:42:22:a1:97:e7:a4:45:9a:1d:78:
                    43:71:86:41:f8:2c:f6:24:d4:df:4d:26:8e:24:4c:
                    ca:3c:df:cb:8a:3b:cf:c3:22:8f:37:1a:95:f0:5f:
                    0b:35:7a:70:34:b1:29:44:4e:0e:aa:b5:ae:e4:6f:
                    01:48:a0:01:30:13:15:e6:91:2e:6a:3f:3a:b3:61:
                    be:1e:8a:84:da:86:c2:bb:a6:7c:68:b1:85:a3:47:
                    e4:ab:65:df:83:5d:08:9e:a0:99:73:5e:13:74:77:
                    8f:66:db:45:3d:2b:33:0d:ac:20:69:81:13:11:4a:
                    5e:56:04:44:e5:e6:d7:c5:4d:12:ff:6b:82:eb:f3:
                    40:b3:c8:e2:dc:e2:6b:04:5e:c0:94:ea:f4:69:d7:
                    ab:65:b7:e1:3d:da:fe:27:bd:b8:8f:fc:44:ec:fe:
                    e3:9f:20:2a:f8:da:d8:f2:b8:73:7b:22:cc:dd:92:
                    ec:c3:90:5a:51:64:1e:84:29:b7:78:ff:db:02:c0:
                    91:88:58:b8:89:0c:43:15:33:8e:ad:e5:50:08:63:
                    45:74:f9:2c:57:cd:3b:1d:31:79:ae:8d:b0:f4:e9:
                    c2:70:9a:09:ab:cb:c1:e1:08:4e:fd:11:fe:76:7f:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:90:F4:15:E7:85:1A:4A:CF:97:51:C3:E3:CC:53:C9:F9:13:54
            X509v3 Authority Key Identifier:
                keyid:DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:50:22:7c:82:f1:ed:e6:f5:48:b1:51:b1:e5:31:99:c7:
         07:0d:73:29:fd:36:68:4b:65:10:3e:5a:83:25:68:8b:49:f8:
         a8:ec:c4:d7:c9:4b:18:0b:99:48:5f:09:c7:42:ab:3e:29:42:
         49:37:d1:73:38:be:8b:d2:2e:ab:2c:54:ae:57:f6:30:6e:e7:
         01:6a:16:8f:35:5a:cc:1d:41:27:8c:b6:02:26:c0:d8:9b:22:
         5a:91:d3:c1:68:21:5f:82:b9:c9:53:93:1a:11:45:51:c9:d6:
         ba:55:48:2a:bd:50:60:4e:82:68:ec:7d:15:8a:7e:7c:5f:bc:
         63:5a:00:aa:e8:0f:41:e3:2c:d0:97:ce:0f:27:de:32:b0:19:
         bf:0e:95:67:a5:05:30:a8:4f:0e:3e:32:d0:f4:bc:60:05:7d:
         81:29:0c:c1:2c:60:d2:cd:bb:1d:a4:e9:c8:82:43:cc:2c:cb:
         08:50:d1:34:2b:7f:68:37:dd:48:fa:d9:08:72:2d:30:1c:35:
         ac:c0:16:f2:c4:38:70:7b:2b:e6:c4:dc:c2:53:39:18:cb:4d:
         d6:f0:28:c2:c0:28:45:ef:ca:5a:5c:8b:49:0e:3f:bb:38:63:
         4d:e1:cf:83:a0:e3:ed:86:18:dc:3e:8b:74:c5:88:48:4e:22:
         4b:36:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:31:41 2026 by rpki-client