Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File:                     3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier:          WDBP7a7ocGcuJRtqpQ2V95nIpMgbFqD4Zl5OBiuf6es=
Subject key identifier:   1E:58:76:E3:53:13:24:E7:CC:FA:C4:FD:BC:CA:CA:FF:9D:D4:30:DB
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       01A0CC6C2EACBE13C9FBA0D97FD240A5C155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number:          1740
Signing time:             Wed 23 Sep 2026 04:00:36 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:36 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:36 +0000
Files and hashes:         1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: xWKhzfq7FXwoKYCS98VuUv6IXlJ4qGzT1al74Zjry9o=)
                          2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:2e:ac:be:13:c9:fb:a0:d9:7f:d2:40:a5:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Sep 23 04:00:36 2026 GMT
            Not After : Sep 24 04:00:36 2026 GMT
        Subject: CN=1e5876e3531324e7ccfac4fdbccacaff9dd430db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:59:2d:48:03:30:7f:56:6e:67:e2:67:b8:
                    f3:a5:25:45:9a:0a:95:57:b1:37:64:7a:14:45:f6:
                    69:2a:2b:f3:f2:56:1e:1d:70:c9:08:74:24:aa:d8:
                    46:2c:8c:96:05:fc:4b:36:cb:f4:0d:87:bc:59:3f:
                    9e:28:de:61:50:02:c9:65:b1:f6:88:88:ee:aa:bb:
                    28:91:17:81:95:03:60:44:c8:6f:7a:ca:fa:9c:7b:
                    9e:c4:ce:e9:a5:b6:db:7e:d2:6a:95:06:7f:ca:75:
                    aa:be:a3:cb:28:46:72:a2:cf:51:be:bc:0d:43:97:
                    df:8a:f9:34:55:b0:aa:cf:5a:d1:2e:8b:57:76:91:
                    c6:a6:9c:a6:cd:ef:6a:8d:44:08:9b:a3:e4:73:58:
                    68:d1:8f:a8:82:01:ce:7d:32:2d:ac:4b:68:80:79:
                    8d:ee:a5:7a:6d:a7:71:fd:a1:1e:c4:b3:d7:3c:d8:
                    72:86:63:b0:2d:2a:b3:31:b4:ea:9d:b5:b4:ca:71:
                    df:4d:8d:d4:3e:bc:59:9e:cc:e7:88:22:18:6a:51:
                    ec:84:e1:08:d2:6e:e2:d5:39:b2:1c:c6:5c:53:96:
                    cd:72:0c:3b:79:86:3a:04:e2:df:a5:31:89:b2:77:
                    bc:97:4d:a3:42:bf:c3:7c:57:ce:7f:f2:51:c1:30:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:76:E3:53:13:24:E7:CC:FA:C4:FD:BC:CA:CA:FF:9D:D4:30:DB
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:ab:c7:8d:14:84:67:2d:ea:b8:2c:ce:76:02:e4:7b:3e:
         33:59:14:9d:29:98:d2:6f:71:68:1f:08:10:a1:0e:5d:43:4e:
         02:57:cc:ea:65:9f:1a:ad:91:cd:b6:56:bc:01:5c:4d:f7:6f:
         5f:d1:87:8c:bd:46:b6:83:71:05:88:bf:98:10:83:fa:56:d5:
         b8:82:d9:ea:9a:0d:15:0a:70:c9:be:c0:e2:3f:db:37:6b:d6:
         fb:96:2f:39:25:b0:0f:a5:31:69:76:38:19:73:b0:35:37:82:
         0b:a7:23:bd:fd:0a:e2:74:cb:c2:a9:5f:ac:d7:2f:1f:15:e8:
         27:c9:fa:01:e9:70:81:2c:ea:cf:0c:39:cd:32:0f:83:7b:a8:
         25:7d:92:a4:8d:42:3e:62:43:36:68:6b:a6:3a:d0:43:c7:5a:
         3a:a1:52:e4:7a:ef:c6:90:91:63:45:c1:6c:8b:ad:6c:37:d7:
         12:43:48:8e:85:65:05:ae:f7:4e:e5:7f:06:9a:3e:6f:f7:bf:
         77:c9:35:13:f6:98:d6:8b:2c:88:46:12:fd:e8:1a:58:55:c4:
         58:80:e3:88:c2:7f:3e:1d:b1:bd:bf:4e:d2:8e:df:ff:2d:b1:
         ee:53:a8:ba:8a:93:40:16:9c:70:0d:83:17:d9:7d:c1:de:4f:
         f4:19:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:21:53 2026 by rpki-client