Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File:                     3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier:          2r2cem61SHsDn6ncEH2qnqakdES5z7fue219AjodnQQ=
Subject key identifier:   68:1C:B6:4B:C9:A3:AC:55:2A:7C:10:79:C5:57:71:B5:E4:2C:9E:A4
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer:       /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial:       01A0CFDB537DF11A8800E3ED1F0F753BCD60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number:          0B8D
Signing time:             Wed 23 Sep 2026 20:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:52 +0000
Files and hashes:         1: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: vrsS+AwdoXKtHn70M4Z3EH4zuCpmPZ38o17iGaElijw=)
                          2: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (hash: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:53:7d:f1:1a:88:00:e3:ed:1f:0f:75:3b:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
        Validity
            Not Before: Sep 23 20:00:52 2026 GMT
            Not After : Sep 24 20:00:52 2026 GMT
        Subject: CN=681cb64bc9a3ac552a7c1079c55771b5e42c9ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:85:91:94:42:06:35:79:b6:c5:c6:b3:97:
                    88:5f:48:6e:9c:ed:c7:78:69:1a:51:08:1e:58:78:
                    0f:96:b9:dd:a7:82:bf:8b:02:5e:77:41:7b:9a:21:
                    af:5e:48:79:a0:7c:68:a5:52:a1:35:c7:21:a2:27:
                    24:7a:85:f7:01:39:34:7a:8b:83:64:85:fa:ff:12:
                    9d:d7:5f:40:e6:4b:05:db:9b:0b:e9:e5:49:8d:44:
                    cf:c3:e9:48:5c:6c:90:a0:2e:67:6b:eb:df:83:fc:
                    a4:11:98:bd:58:11:2a:7e:29:93:0a:0c:b1:1c:e2:
                    c3:9a:db:ae:33:e8:69:2f:4e:e0:be:49:54:5d:3e:
                    1d:79:98:a1:68:09:81:ad:8d:2f:00:6c:11:27:e0:
                    9e:74:0b:04:8d:e2:1a:31:1a:d1:77:3a:f0:34:60:
                    11:09:60:7e:b2:a5:25:5f:69:a5:25:db:32:f3:b1:
                    3c:07:6f:fa:38:d7:20:d2:0c:e2:25:a1:2d:64:fe:
                    5a:1e:1b:00:de:c3:df:8f:45:2b:4a:86:ec:69:d7:
                    62:73:f1:de:86:27:a2:21:0e:9f:5a:87:5b:f7:04:
                    b0:21:7f:28:d6:fc:09:47:55:6a:49:79:82:7a:3a:
                    24:08:e4:da:37:19:f8:88:11:3c:1f:f8:2e:14:3a:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1C:B6:4B:C9:A3:AC:55:2A:7C:10:79:C5:57:71:B5:E4:2C:9E:A4
            X509v3 Authority Key Identifier:
                keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:08:9a:be:d4:a8:1e:e4:76:55:82:59:0c:cd:a7:73:18:20:
         55:1e:7b:35:3c:89:be:57:ea:7b:f6:e8:a1:0b:93:22:d2:f5:
         9e:04:c3:b5:b2:36:4c:b2:da:bc:d5:d1:27:48:7a:73:7e:79:
         b5:d4:c5:d4:bf:46:01:50:00:1f:78:1d:2d:a4:62:95:0f:ac:
         18:35:3f:97:23:38:1c:50:f9:20:77:6e:67:25:55:3e:c5:23:
         ed:07:2a:39:b0:37:86:03:f3:7b:a4:65:d2:35:9d:0c:8b:8c:
         37:80:10:6b:8c:58:f8:88:f7:16:5c:bc:39:2e:1d:b9:a0:74:
         52:3e:b2:00:ee:82:cc:b3:c0:99:d3:f1:d7:bc:11:13:81:b5:
         54:7c:4a:4a:34:81:09:97:15:71:63:f1:06:b4:1b:fc:a1:5e:
         96:e4:8e:12:a7:d9:20:28:94:be:40:7f:e7:44:a5:83:e7:91:
         ca:c5:13:80:14:1a:94:9d:e4:4f:6f:2f:5e:29:32:d9:06:51:
         45:91:57:4e:85:7b:99:83:c8:7f:f7:fa:7d:67:c7:2e:6d:59:
         de:58:04:3f:1d:8c:65:c5:ca:f7:80:73:0e:af:08:69:0f:c9:
         e4:8f:9b:99:be:72:cc:d3:f0:4a:fa:ba:4c:47:ed:26:52:f4:
         1a:ab:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:26 2026 by rpki-client