Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File:                     3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier:          dbCEF+X39vzP70ozgZOTRyn2OHokZBnWPxcHXsHPaO0=
Subject key identifier:   62:E9:ED:C6:A5:05:85:D6:E0:81:BF:32:AB:9B:C6:A4:D4:27:E6:D5
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer:       /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial:       01A0CC6C8D31BA8EC47FFD10CCD22DD3482A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number:          0D88
Signing time:             Wed 23 Sep 2026 04:01:01 +0000
Manifest this update:     Wed 23 Sep 2026 04:01:01 +0000
Manifest next update:     Thu 24 Sep 2026 04:01:01 +0000
Files and hashes:         1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
                          2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: 8hqdCi8KY6t1Vno4iOU87m4oTKvoLLALHLOUn2PbldU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:8d:31:ba:8e:c4:7f:fd:10:cc:d2:2d:d3:48:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
        Validity
            Not Before: Sep 23 04:01:01 2026 GMT
            Not After : Sep 24 04:01:01 2026 GMT
        Subject: CN=62e9edc6a50585d6e081bf32ab9bc6a4d427e6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:8b:b5:d1:56:ad:52:f4:ca:02:11:1e:57:
                    56:b7:94:c0:cb:fb:31:35:a8:96:a3:5c:cd:2d:3c:
                    21:9b:e5:e6:30:5e:0e:ee:cc:97:29:e4:f4:9f:69:
                    e3:f7:58:45:48:35:9d:2e:39:fd:29:14:91:fb:8e:
                    19:b2:24:c5:e2:f1:e8:87:21:6e:dd:7e:ac:11:e3:
                    ee:86:9a:3f:73:a7:d9:0c:f3:5d:1f:f5:ea:dd:1c:
                    c7:e6:52:42:0b:63:05:62:66:94:de:b1:90:d3:56:
                    f1:a0:d0:f2:6c:48:a1:12:1a:1b:ec:7c:fa:d4:7f:
                    1d:42:b7:46:83:c1:48:6d:c1:b8:cd:46:8d:30:4a:
                    6c:b4:aa:47:50:cf:10:5d:dc:41:b7:f7:52:f5:c3:
                    e2:17:b3:e8:61:fa:d2:13:8b:c8:e6:6f:b9:07:33:
                    91:86:a4:1a:90:78:96:69:15:c7:75:d4:dd:2d:51:
                    c7:b6:6d:bf:db:74:4d:35:f2:9c:ac:03:03:84:a9:
                    e1:a2:15:8f:8d:71:a4:9f:fc:cc:71:0c:a0:3a:23:
                    12:9b:47:ba:51:a3:52:b6:d2:15:b5:82:bc:5b:0a:
                    1e:b4:df:81:c2:74:23:10:5c:ea:de:7c:7c:2d:98:
                    24:ae:b6:60:fb:fb:93:2c:3a:98:e9:a5:3b:d7:b2:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:ED:C6:A5:05:85:D6:E0:81:BF:32:AB:9B:C6:A4:D4:27:E6:D5
            X509v3 Authority Key Identifier:
                keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:4d:11:05:b5:a9:bd:7b:82:ad:e2:e9:0e:4c:2c:1f:18:
         83:ba:6f:de:e5:66:87:a4:54:fd:33:7a:71:b5:a4:e4:9f:a9:
         f7:2b:37:ba:c6:ef:f8:47:90:2f:ee:16:d3:4c:70:e7:bb:88:
         7f:07:92:5b:06:d5:4d:f8:c4:c3:2f:60:97:e4:29:e6:7a:d9:
         ad:4a:e3:aa:5f:f4:4e:dc:d2:1a:02:e8:b0:67:1b:04:4c:74:
         3e:11:2c:50:53:f4:7f:43:f3:3c:85:63:90:57:2a:e1:86:20:
         08:f8:bc:04:02:04:e2:74:14:28:97:9d:2e:b2:5c:2c:4b:14:
         a8:7d:be:f5:44:32:f2:0a:a9:6e:b7:57:74:8e:22:cf:37:4a:
         f2:61:f8:76:9b:47:90:11:60:b0:31:bb:9e:ad:99:46:54:26:
         2d:da:83:5c:96:bf:3c:bb:93:e6:54:1a:57:aa:9f:ed:ca:df:
         f6:cd:98:12:0a:35:a4:0f:5b:a6:3d:0a:87:cd:b5:d1:7b:1c:
         e5:7f:0b:4d:81:df:cb:b0:7b:74:2f:92:cd:f2:39:ea:ef:0e:
         5e:13:e1:45:56:e1:b0:0f:08:aa:cb:e8:72:50:4b:55:98:7a:
         73:70:f0:0c:8e:41:03:af:10:08:c5:19:45:0c:54:08:87:79:
         fd:ba:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:38:26 2026 by rpki-client