Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          HNgLoAcm80cjFaJgCo/cCMWonaDCgfaT6WyfXCB1P5M=
Subject key identifier:   A0:E2:56:34:28:8E:89:F1:41:5A:29:A7:6E:B4:53:53:47:32:02:04
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       01A0CE5A4CF5B158268793A0E91D7FE2A453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          1A77
Signing time:             Wed 23 Sep 2026 13:00:19 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:19 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:19 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: qaK+MC/iVXSOg10jZafKGTWpilxK0l0TqYE/wph16BY=)
                          2: C6zjpcBdZcRudxtmosvZuextZiI.roa (hash: zfnjDDGxVh2c7H/SnJCHldm/s9nx6Q4NSeuXoVoEuIA=)
                          3: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (hash: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk=)
                          4: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (hash: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8=)
                          5: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (hash: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8=)
                          6: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (hash: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:4c:f5:b1:58:26:87:93:a0:e9:1d:7f:e2:a4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Sep 23 13:00:19 2026 GMT
            Not After : Sep 24 13:00:19 2026 GMT
        Subject: CN=a0e25634288e89f1415a29a76eb4535347320204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:04:0b:ca:ff:ff:69:cd:65:5a:72:67:94:
                    d3:3e:29:9c:c5:61:8a:d8:de:ad:0d:e9:6b:bd:5f:
                    75:37:13:58:1e:3f:6a:22:50:85:64:46:f3:25:57:
                    76:78:6d:fb:9c:4e:98:3b:29:fc:a6:17:a4:92:cc:
                    66:35:3f:f7:0a:2b:0a:fb:5e:7e:9d:41:0b:84:75:
                    a8:82:3d:31:17:52:10:5b:30:15:7b:d1:9c:8b:ed:
                    75:d8:e2:65:39:7b:e1:9e:1c:17:b8:d2:f0:e9:c6:
                    3b:c3:b7:11:cb:ee:d5:6a:88:f5:be:e5:c1:67:ab:
                    be:73:a5:4f:e5:4d:f0:21:b9:3b:9d:73:86:b1:96:
                    f0:ff:b9:45:15:9f:62:89:3f:b0:3c:66:56:bf:ca:
                    2d:fe:68:a1:ba:b2:4e:f3:fc:e1:62:0a:08:c0:6a:
                    3d:a3:4b:40:f6:f9:4d:2d:0d:ed:db:4f:b8:23:ef:
                    24:6a:20:d9:8a:46:ac:22:21:43:30:52:20:75:08:
                    0e:4c:26:68:5a:79:e9:e0:ba:ec:6d:09:1e:80:b3:
                    29:6f:c9:3a:3c:83:2b:d6:38:27:c0:0f:f2:98:2e:
                    71:25:78:88:3a:71:91:51:66:07:47:99:46:0f:d8:
                    b0:19:1f:88:7b:16:da:55:24:d0:e3:86:13:30:87:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E2:56:34:28:8E:89:F1:41:5A:29:A7:6E:B4:53:53:47:32:02:04
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:89:b8:94:4c:a1:24:af:89:5c:45:4a:4b:f8:d6:2b:a0:
         4b:95:4a:b8:7c:f3:c7:1c:97:9b:e7:68:2a:bd:66:6c:42:0e:
         65:9b:aa:58:4f:22:fa:1a:17:10:1d:8e:2c:56:93:a6:a7:3c:
         ec:71:8d:92:89:d8:a6:13:3d:d0:3c:42:bc:bd:02:d6:67:b5:
         42:63:4d:77:d6:9a:f6:b0:d8:78:34:a2:c3:26:de:ca:65:7e:
         ce:1b:17:91:8f:07:85:54:73:f4:8e:f2:43:d4:28:d2:f9:8b:
         cd:15:00:5b:99:26:a0:f6:02:e0:ca:f1:7a:12:e9:b5:6d:cc:
         1f:db:48:ef:5e:2b:da:e0:62:5f:d4:83:07:12:ca:c4:3c:74:
         da:e6:0f:b5:fe:4d:94:40:ea:b0:6b:73:14:6b:4b:af:24:a5:
         64:16:04:83:b0:8d:b1:57:f7:c1:1d:99:3b:2f:ac:bf:51:98:
         40:8e:48:cd:ae:78:ad:79:ed:c8:e0:3d:06:34:e5:17:39:5e:
         70:17:bf:24:53:d6:bf:80:ce:6d:96:93:2f:04:d1:89:77:0b:
         ea:1a:cb:75:bd:7e:01:ce:68:f8:81:e9:57:be:db:c3:44:fe:
         77:dc:51:dd:bc:77:20:b7:2a:22:0e:40:b1:a7:4f:28:ee:f9:
         b4:65:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:39:35 2026 by rpki-client