Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          ad8koaN7murVMR9JRdmlurKLDwoOFBc9BVTHbhdqLH0=
Subject key identifier:   C8:25:62:E9:59:57:BB:08:06:6E:B1:1F:74:A6:7B:3E:16:07:74:29
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       01A0CBC703293AC7D1E22D7C99B640922C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          114E
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:12 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:12 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 2lTGuTfMSnzV3LRwKhbPWL8qybn0oA6CRmogcSYas4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:03:29:3a:c7:d1:e2:2d:7c:99:b6:40:92:2c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Sep 24 01:00:12 2026 GMT
        Subject: CN=c82562e95957bb08066eb11f74a67b3e16077429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:58:2b:11:bc:67:23:45:15:8d:9e:80:a9:
                    5d:ce:60:57:3f:3d:6d:a4:6c:31:e8:76:a6:07:ac:
                    f9:97:9b:12:39:a0:f9:36:79:2d:82:32:28:f7:f2:
                    7d:27:cb:69:58:de:24:40:bf:92:59:9e:78:cd:5b:
                    46:cb:c2:3f:c9:99:0a:e0:10:83:5e:f7:4d:f0:72:
                    b6:93:c8:c7:76:26:33:65:13:01:33:7e:7e:90:97:
                    3c:2e:ed:60:c4:f9:ca:ec:ea:16:6f:03:3d:11:b1:
                    fb:f1:6f:e4:b7:b8:36:8d:60:e2:40:78:0c:d0:c3:
                    31:a6:01:54:3e:e6:fe:ac:3f:41:3e:72:3a:27:de:
                    66:52:17:a6:3b:ca:f2:6c:d7:79:d3:f2:05:0c:69:
                    2d:80:33:49:21:4d:05:f5:79:49:99:31:d5:f9:e8:
                    c2:c6:7f:96:11:d9:9d:25:bf:35:ae:02:f3:0b:bb:
                    37:00:3e:b2:af:76:55:24:8e:dd:4f:4c:aa:f3:39:
                    67:9c:e2:f3:0c:dc:74:ac:bd:74:ec:f0:57:97:63:
                    88:38:5e:02:27:96:23:b2:67:14:7a:e9:4d:f6:aa:
                    0c:19:d5:34:8b:26:76:d0:36:5b:80:90:a9:22:cd:
                    80:46:4e:81:ff:e0:19:f3:ee:f3:e0:73:f1:ce:21:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:25:62:E9:59:57:BB:08:06:6E:B1:1F:74:A6:7B:3E:16:07:74:29
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:6d:04:14:8b:c7:86:d8:6b:12:fd:2f:6b:68:da:4e:34:
         e4:54:86:12:41:4b:41:db:c7:57:29:b0:ac:83:e7:7e:21:26:
         ea:b7:93:0d:c6:a1:7a:41:f7:c9:1f:8d:b8:c9:c3:4b:d0:c4:
         f2:00:ed:3a:9e:d6:64:b1:39:d5:98:9d:fc:4a:7d:c9:bc:7e:
         2c:44:c8:c0:dc:d8:1f:65:39:af:5b:9e:60:f5:c7:24:54:2c:
         a6:c4:f2:20:1c:4c:ca:ff:2a:50:08:70:94:70:64:13:62:7e:
         d2:76:83:db:43:d0:f5:8a:c9:27:7c:02:81:14:05:b2:bf:58:
         1e:7f:b4:33:ae:c7:9e:25:67:bb:e4:23:72:a6:78:8d:f6:7d:
         d0:76:3c:3a:ec:0a:53:c5:cc:23:ec:cb:8e:35:fb:c2:2a:58:
         bb:04:f0:b6:91:37:b9:15:86:47:89:0d:1c:4b:28:64:6e:41:
         13:7b:3b:50:06:77:7c:d8:68:8f:2a:f7:da:31:a5:ec:ec:0c:
         cd:c5:56:b5:b1:b1:4a:89:43:88:a1:57:38:44:af:ad:7b:77:
         93:65:ce:ba:07:9c:25:7f:19:8f:82:c7:42:29:42:3f:b5:3c:
         eb:6c:ab:0b:0d:65:60:39:26:7b:d5:48:f4:98:0a:5a:c0:6c:
         45:ee:bb:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLxwMpOsfR4i18mbZAkixrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmU3MGU0MzZlMWMwMjVhYTBlMGUzZmJhODUyYjk4YWQz
Yjg0MTAwHhcNMjYwOTIzMDEwMDEyWhcNMjYwOTI0MDEwMDEyWjAzMTEwLwYDVQQD
EyhjODI1NjJlOTU5NTdiYjA4MDY2ZWIxMWY3NGE2N2IzZTE2MDc3NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2FYKxG8ZyNFFY2egKldzmBXPz1t
pGwx6HamB6z5l5sSOaD5NnktgjIo9/J9J8tpWN4kQL+SWZ54zVtGy8I/yZkK4BCD
XvdN8HK2k8jHdiYzZRMBM35+kJc8Lu1gxPnK7OoWbwM9EbH78W/kt7g2jWDiQHgM
0MMxpgFUPub+rD9BPnI6J95mUhemO8rybNd50/IFDGktgDNJIU0F9XlJmTHV+ejC
xn+WEdmdJb81rgLzC7s3AD6yr3ZVJI7dT0yq8zlnnOLzDNx0rL107PBXl2OIOF4C
J5YjsmcUeulN9qoMGdU0iyZ20DZbgJCpIs2ARk6B/+AZ8+7z4HPxziEiowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMglYulZV7sIBm6xH3Smez4WB3QpMB8GA1UdIwQY
MBaAFN1ucOQ24cAlqg4OP7qFK5itO4QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUt
N2I2MWE2OTVkMTMyLzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUtN2I2MWE2OTVkMTMy
LzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOE1tBBSL
x4bYaxL9L2to2k405FSGEkFLQdvHVymwrIPnfiEm6reTDcahekH3yR+NuMnDS9DE
8gDtOp7WZLE51Zid/Ep9ybx+LETIwNzYH2U5r1ueYPXHJFQspsTyIBxMyv8qUAhw
lHBkE2J+0naD20PQ9YrJJ3wCgRQFsr9YHn+0M67HniVnu+QjcqZ4jfZ90HY8OuwK
U8XMI+zLjjX7wipYuwTwtpE3uRWGR4kNHEsoZG5BE3s7UAZ3fNhojyr32jGl7OwM
zcVWtbGxSolDiKFXOESvrXt3k2XOugecJX8Zj4LHQilCP7U862yrCw1lYDkme9VI
9JgKWsBsRe67iQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:47:49 2026 by rpki-client