Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
File:                     3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft (raw, json)
Hash identifier:          UMWUyRd17hrIYBD/5uJGhlh2AqnZmt8w4uXUUQxwwjA=
Subject key identifier:   C0:C4:68:15:CC:81:2F:73:C1:D0:C2:AB:86:8B:32:3C:D6:8E:A0:F0
Authority key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D
Certificate issuer:       /CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
Certificate serial:       01A0D124CE3DA789307B733A05B78DB5F97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
Manifest number:          06BB
Signing time:             Thu 24 Sep 2026 02:00:45 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:45 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:45 +0000
Files and hashes:         1: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl (hash: STntRZNSwla40Z3DRY3wFDR418+qX5fu3Ry/etyDIwU=)
                          2: _tzPs4jJj87d7Cluh9sgQm06Oy8.asa (hash: zWtQvDfWVHth5+g0jzyRaLgIhTdtWs7KPbDKeSI3a2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:ce:3d:a7:89:30:7b:73:3a:05:b7:8d:b5:f9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d
        Validity
            Not Before: Sep 24 02:00:45 2026 GMT
            Not After : Sep 25 02:00:45 2026 GMT
        Subject: CN=c0c46815cc812f73c1d0c2ab868b323cd68ea0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:2e:8a:ce:32:d3:b9:9d:02:4a:c1:0b:c5:
                    71:12:eb:7c:96:ed:3a:76:f0:62:cf:d0:02:7b:53:
                    66:a2:bb:64:5f:2d:d5:f3:8a:44:49:b0:64:da:d5:
                    8d:6b:1b:85:77:75:28:6a:43:75:da:b0:8d:76:28:
                    7e:ec:d1:b1:22:43:b4:2b:a0:ed:38:82:1e:a0:33:
                    3d:ce:08:91:3a:aa:6a:8d:7e:9f:b8:35:5a:df:3f:
                    27:bb:05:8c:dd:42:35:e9:3f:65:b5:cc:c4:b0:c7:
                    ac:ba:65:1c:fe:ad:4e:06:00:42:a8:75:54:d5:f0:
                    ca:da:cb:2a:23:82:1b:d4:fb:2a:f0:ef:b5:6f:65:
                    de:95:78:96:29:27:95:92:01:84:14:0e:1e:98:1d:
                    ac:0e:e8:55:2a:03:59:76:be:e9:66:32:9b:d0:2b:
                    3e:56:80:1b:44:49:f4:a6:6f:ab:54:91:bc:a4:ce:
                    8e:c6:aa:1d:ef:df:b2:a7:7a:8a:9d:b9:2b:ca:0a:
                    8e:d5:4e:27:ac:91:06:94:b1:c1:22:db:4d:15:c9:
                    3b:f3:22:08:35:9d:8f:51:91:87:67:b3:47:80:45:
                    e9:e0:14:6e:85:99:b8:61:31:51:b2:da:60:8a:7a:
                    5f:af:af:6b:00:6e:d3:e6:cf:10:4f:01:85:c0:fb:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:68:15:CC:81:2F:73:C1:D0:C2:AB:86:8B:32:3C:D6:8E:A0:F0
            X509v3 Authority Key Identifier:
                keyid:DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:91:3e:c4:33:18:7f:eb:e7:55:cd:64:c2:ea:e4:af:02:
         8e:57:5a:ff:6b:e5:6d:58:13:95:1f:c2:86:14:c0:28:75:df:
         f4:68:ca:64:f7:1e:9b:84:a2:92:19:45:55:2b:7d:17:2e:66:
         32:22:53:d8:d8:9d:de:66:39:b7:a0:fe:e3:4d:67:ab:c0:c8:
         94:c6:22:5f:92:50:c6:8c:68:b6:5f:45:7a:52:cc:8d:ac:27:
         86:3b:af:8f:7d:87:09:21:51:85:66:a5:29:6c:4e:09:03:45:
         da:71:ca:c5:73:98:52:d2:75:14:2e:83:f1:57:84:d9:39:67:
         d5:73:62:16:cb:8a:34:c6:92:47:4c:09:2d:bf:06:a2:77:82:
         fa:01:f8:8e:f9:e8:11:50:17:af:61:d8:0a:0b:c1:0c:e1:08:
         8d:2f:40:bb:26:a8:d5:d7:13:38:8c:9a:c9:f3:65:cc:bc:c6:
         1c:4b:1a:e5:2a:b8:f1:98:05:68:18:d9:4b:b9:c3:d7:15:76:
         62:ad:1d:35:55:fe:4b:80:8c:51:02:1d:28:28:f6:8d:4b:50:
         1a:a7:af:22:10:4f:77:69:6b:4d:4f:ce:7c:f4:e2:28:41:3d:
         f5:7c:c2:7d:94:ec:84:95:bd:4d:50:32:87:35:fd:59:78:2f:
         9f:ee:ef:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJM49p4kwe3M6BbeNtfl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2QzYTk4NDk1YzI3YjljZTM1MGFlNWI4OWY5OTE0NGIw
YTRjOWQwHhcNMjYwOTI0MDIwMDQ1WhcNMjYwOTI1MDIwMDQ1WjAzMTEwLwYDVQQD
EyhjMGM0NjgxNWNjODEyZjczYzFkMGMyYWI4NjhiMzIzY2Q2OGVhMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFkuis4y07mdAkrBC8VxEut8lu06
dvBiz9ACe1NmortkXy3V84pESbBk2tWNaxuFd3UoakN12rCNdih+7NGxIkO0K6Dt
OIIeoDM9zgiROqpqjX6fuDVa3z8nuwWM3UI16T9ltczEsMesumUc/q1OBgBCqHVU
1fDK2ssqI4Ib1Psq8O+1b2XelXiWKSeVkgGEFA4emB2sDuhVKgNZdr7pZjKb0Cs+
VoAbREn0pm+rVJG8pM6Oxqod79+yp3qKnbkrygqO1U4nrJEGlLHBIttNFck78yII
NZ2PUZGHZ7NHgEXp4BRuhZm4YTFRstpginpfr69rAG7T5s8QTwGFwPuzHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDEaBXMgS9zwdDCq4aLMjzWjqDwMB8GA1UdIwQY
MBaAFN49OphJXCe5zjUK5bifmRRLCkydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEt
Yzg4OGIyMDQ4OWZjLzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYjQxMjctOGUwNi00N2Q5LWJkZjEtYzg4OGIyMDQ4OWZj
LzEvM2owNm1FbGNKN25PTlFybHVKLVpGRXNLVEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqORPsQz
GH/r51XNZMLq5K8Cjlda/2vlbVgTlR/ChhTAKHXf9GjKZPcem4SikhlFVSt9Fy5m
MiJT2Nid3mY5t6D+401nq8DIlMYiX5JQxoxotl9FelLMjawnhjuvj32HCSFRhWal
KWxOCQNF2nHKxXOYUtJ1FC6D8VeE2Tln1XNiFsuKNMaSR0wJLb8GoneC+gH4jvno
EVAXr2HYCgvBDOEIjS9Auyao1dcTOIyayfNlzLzGHEsa5Sq48ZgFaBjZS7nD1xV2
Yq0dNVX+S4CMUQIdKCj2jUtQGqevIhBPd2lrTU/OfPTiKEE99XzCfZTshJW9TVAy
hzX9WXgvn+7vSg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:26:46 2026 by rpki-client