Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          UZxUFcwaphbaNCosMYRCaiKpSq7l7xECX4U9c3D50dw=
Subject key identifier:   7E:BC:24:12:48:46:8F:27:8E:1C:DE:79:1A:69:DF:57:03:3A:F0:A9
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       01A0CA7D944570CCDA5D96FC1EDC09198223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0CB1
Signing time:             Tue 22 Sep 2026 19:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:22 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: 6HVrKSt2fXYyeYP4ei8UiNhXHkyK3BvQ+SKLOk2aUlc=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:94:45:70:cc:da:5d:96:fc:1e:dc:09:19:82:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Sep 22 19:00:22 2026 GMT
            Not After : Sep 23 19:00:22 2026 GMT
        Subject: CN=7ebc241248468f278e1cde791a69df57033af0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:cc:ce:14:52:0d:7c:98:24:1c:b1:78:f1:
                    de:91:53:84:2e:c7:92:95:6a:62:a1:9e:6f:61:f0:
                    bf:a9:a0:ee:09:81:13:3e:6f:2c:9f:6c:93:60:f3:
                    30:09:29:ff:39:29:d4:5f:e9:e0:83:d5:cc:05:ea:
                    8d:c1:5b:f9:13:95:c8:e9:00:a0:9f:16:6a:84:65:
                    d2:55:29:3c:08:22:d5:ea:f0:32:02:c0:13:25:a3:
                    68:b2:d3:6c:6d:54:16:50:51:44:80:f4:31:55:2c:
                    bd:5e:ad:6b:27:76:8d:7f:3a:2f:f4:29:76:24:3e:
                    65:ea:f9:c3:74:81:cb:a5:86:3c:74:05:7b:93:a7:
                    aa:db:e5:1d:5b:79:f0:37:00:db:91:ad:50:45:7e:
                    14:15:01:58:bb:96:ea:50:e6:af:12:c1:21:cd:06:
                    d4:bf:cf:1b:9a:97:4c:e1:db:78:bb:4c:31:34:8d:
                    3e:48:92:59:f6:19:ff:ce:cc:11:19:bb:eb:2d:21:
                    80:a0:f5:36:58:02:07:a8:3f:6c:64:ff:f4:e4:80:
                    2f:df:bd:1b:bd:69:d5:11:8b:21:f3:15:13:ae:ee:
                    53:c2:da:a9:05:ff:63:a5:c6:79:56:fb:a3:3f:43:
                    3e:73:36:79:23:57:05:73:18:7b:2d:d6:b7:9a:11:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:24:12:48:46:8F:27:8E:1C:DE:79:1A:69:DF:57:03:3A:F0:A9
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:82:03:b1:6f:04:d8:69:b7:1f:4c:7f:1b:8e:30:ad:33:
         7f:07:74:8c:27:a7:dd:9c:a3:61:40:fd:70:23:6e:15:de:0b:
         b2:e2:c6:bb:cc:12:64:f8:6c:a4:de:12:3b:02:62:19:5a:84:
         29:8c:a6:a8:49:ef:12:a0:ae:74:44:29:21:95:d9:7e:30:3b:
         dd:ca:4f:8d:30:7d:12:c7:f1:c3:fd:4f:c7:40:ac:08:02:0e:
         80:db:25:a6:85:c8:4c:2e:3e:7b:c5:cb:d8:08:29:a2:a8:1b:
         ee:cd:ac:e9:36:67:dd:c0:7f:79:48:f5:bc:73:a7:17:c3:e3:
         2f:23:ea:98:3b:33:6f:c5:b3:36:b3:9b:76:a2:59:53:ba:32:
         2f:79:03:6d:b7:3e:6c:bd:09:1f:17:15:5a:ad:0e:f9:ff:a1:
         02:2f:30:18:30:e1:46:29:bd:93:c3:05:c3:cf:30:92:55:36:
         a8:e0:c8:9a:94:25:fb:f6:27:31:db:d0:10:3a:1e:c1:8e:cf:
         12:50:95:ba:c0:80:ca:c5:fd:51:aa:a0:17:53:f8:05:08:4e:
         60:d3:5d:ca:b0:2d:3c:83:f1:73:1b:3e:7d:85:cb:17:e6:48:
         d4:27:bb:9e:67:74:ed:8f:b2:55:8f:1a:b0:a2:07:7e:27:04:
         02:9a:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:31 2026 by rpki-client