Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File:                     B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier:          Vw2Tzq118YkQSp4q0jRPoGmsOEM+6k5tALgMuRm2KuY=
Subject key identifier:   F1:6F:49:0C:6A:53:E7:B7:39:B2:4B:FA:9A:DE:0A:60:23:F7:02:1B
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       01A0CCA2C0185077CE0E981FED0620DDB250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number:          0536
Signing time:             Wed 23 Sep 2026 05:00:12 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:12 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:12 +0000
Files and hashes:         1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: LheFILpUHycH5kMw73jw2gEs5s337lHb1fux5dPr1TI=)
                          2: sz9G7DpWjEEMUVJVVxcUaKAB47w.asa (hash: qMSm9Lo5lhWN3TZsyk9ikcvCy7eunxVm7Ys7+c4vy5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a2:c0:18:50:77:ce:0e:98:1f:ed:06:20:dd:b2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Sep 23 05:00:12 2026 GMT
            Not After : Sep 24 05:00:12 2026 GMT
        Subject: CN=f16f490c6a53e7b739b24bfa9ade0a6023f7021b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:3c:c4:cb:88:83:2a:3b:84:de:d4:43:c3:
                    e5:e1:a0:2e:0e:4f:23:90:99:63:3c:ff:08:d1:4a:
                    b4:bf:d7:cb:d8:f9:fd:f3:cb:f1:cf:9f:12:f0:f8:
                    de:b0:76:73:1b:73:10:4c:2b:26:a0:80:3e:ec:9e:
                    63:b5:c1:27:da:fd:4b:d7:89:ef:ff:bc:5c:65:6d:
                    d3:13:5c:66:9d:07:2e:15:c3:3f:f8:9c:f2:33:fb:
                    42:8e:5b:2a:0c:45:87:30:01:5d:d4:fe:d7:85:dc:
                    85:6c:83:ce:4f:ff:f9:5d:36:6e:15:9b:6d:28:0e:
                    b1:6e:86:62:0d:1f:17:bc:bf:4f:42:38:8e:a1:10:
                    7b:fe:cd:e4:04:b5:6f:59:7c:df:5b:94:0f:67:8e:
                    84:01:a5:77:04:31:02:b6:1d:22:93:67:98:6c:88:
                    0e:9a:d5:45:ef:17:33:fc:65:c4:c7:f5:63:aa:f3:
                    56:15:88:bb:9f:57:20:1d:85:92:eb:e8:79:6f:e1:
                    ce:d8:4b:4b:44:0e:11:3a:b5:f8:07:1d:45:9b:33:
                    44:f8:de:19:7b:11:39:f0:ab:47:75:da:dd:cf:48:
                    59:ba:d8:fa:eb:29:fa:a3:91:40:65:9f:cf:09:c4:
                    30:5a:fe:71:71:55:ad:5a:8b:26:1e:4e:0a:55:6c:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6F:49:0C:6A:53:E7:B7:39:B2:4B:FA:9A:DE:0A:60:23:F7:02:1B
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:04:19:48:2d:14:31:64:c2:60:c0:0f:ab:fd:52:1e:fc:5d:
         d5:53:80:bd:81:56:70:ed:ce:be:a1:85:0a:59:44:d4:0f:0b:
         1b:2a:82:7e:a4:a6:54:fb:84:e0:81:b9:d2:36:a6:7f:9e:20:
         f8:95:68:9c:86:c3:3e:fe:7b:1f:77:87:00:be:4e:b8:a7:bd:
         23:2b:ff:1c:81:bc:f4:43:85:d7:0e:05:fe:4f:7f:b0:39:76:
         88:f3:7b:96:2f:85:51:f0:23:b0:96:63:46:f9:4c:f5:05:8a:
         df:31:0b:42:64:a5:a3:61:9d:93:69:43:c4:19:84:15:fb:9d:
         7e:e3:c0:0d:74:bc:9c:15:82:c4:2b:cb:76:39:eb:c7:1d:0f:
         91:aa:79:a9:a7:fd:d8:ea:39:7c:41:53:20:c9:17:cd:b8:db:
         60:8e:ac:92:4f:80:da:34:ac:b7:90:91:9b:2d:94:ff:c5:5c:
         ca:16:d3:a3:fe:ac:f0:f0:e9:61:3e:9d:77:86:f5:20:56:34:
         fb:ea:46:48:d5:24:38:e4:4a:51:75:31:4c:fd:7b:c1:81:b1:
         52:3f:ac:f5:ce:61:db:cb:96:4e:a2:1b:5d:d9:8a:2c:36:6a:
         af:86:a3:8f:e6:e7:5f:31:c1:ca:5b:38:bd:ec:b5:a1:25:0c:
         76:2e:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:25:38 2026 by rpki-client