Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          fOzxa5Yc74WBjYNRkzJGZ6bQPI7ngSUCSC2s861J3yU=
Subject key identifier:   71:18:FC:B9:F9:18:48:16:08:57:57:1A:38:D7:29:B7:50:DA:1A:F5
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       01A0DACD119F66472D08ADF984711A919F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          1A75
Signing time:             Fri 25 Sep 2026 23:01:07 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:07 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:07 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: /uj1tK+7c5Mp4+y9wc6K8anHf4BXcy+JHJJRGQpPpX8=)
                          2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
                          3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
                          4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
                          5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
                          6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
                          7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
                          8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:11:9f:66:47:2d:08:ad:f9:84:71:1a:91:9f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Sep 25 23:01:07 2026 GMT
            Not After : Sep 26 23:01:07 2026 GMT
        Subject: CN=7118fcb9f91848160857571a38d729b750da1af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:04:e2:46:65:ff:bb:2b:4a:68:4e:c1:2e:
                    65:89:04:6b:4b:22:d7:55:4d:ac:f6:ad:e5:d0:4d:
                    36:77:ba:89:d1:7d:22:b6:de:8f:67:3a:20:c1:c3:
                    bc:83:fb:19:6a:08:13:f3:e6:c5:f2:9d:ee:06:b7:
                    52:7e:d1:24:db:ec:94:e1:46:b8:68:2b:4d:e6:39:
                    2d:7e:ad:17:a1:bf:64:8c:cd:c8:ae:b6:45:0d:8b:
                    2b:5d:5b:8a:ab:32:04:7e:76:a1:0f:86:f7:ce:29:
                    25:44:7f:6e:64:87:27:50:d0:92:64:64:00:cd:65:
                    a6:b8:c0:2f:40:92:bf:59:0c:61:a5:48:a4:ce:82:
                    c7:16:a1:65:0e:43:8e:a6:d0:e1:ef:ed:f1:0c:3d:
                    d0:a2:64:e9:15:46:dd:28:97:c2:32:07:0f:43:b8:
                    86:a8:43:34:a2:11:7f:c5:b7:3a:57:6f:ba:74:a9:
                    d7:3d:b5:c3:02:3b:f9:e9:76:a3:9f:23:1d:9c:24:
                    28:a5:27:f6:e6:a2:18:dc:93:64:a2:d5:17:ec:28:
                    a7:0c:72:6d:25:e6:1b:b6:1c:20:d5:2e:da:95:74:
                    99:aa:44:41:36:ce:02:b9:b9:dc:35:24:63:fe:f5:
                    a2:bf:d5:ab:b6:33:a6:b0:bb:f1:0c:76:bd:df:73:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:18:FC:B9:F9:18:48:16:08:57:57:1A:38:D7:29:B7:50:DA:1A:F5
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:68:c8:eb:28:78:1f:76:b4:18:d9:c4:c1:78:5a:a5:f3:
         5d:cd:9f:bd:b3:4c:90:b7:6d:6e:9f:39:7b:a9:ea:69:86:c7:
         6b:c0:f9:19:0f:19:96:a1:5b:f6:e3:01:24:a3:63:19:58:fe:
         c0:44:95:ee:64:97:97:1d:a5:fe:e9:52:52:ed:b7:f6:10:95:
         3f:a8:9e:9d:cf:47:15:d3:54:f6:17:c9:07:21:54:3d:8e:cd:
         98:c7:08:a4:0a:c2:74:70:6b:d3:74:75:10:b8:de:ae:78:61:
         ee:d0:00:f6:0d:67:97:2c:2d:15:9c:0e:8c:55:11:fc:be:08:
         f3:6e:d1:f0:09:74:7b:30:ab:7d:e3:45:3e:56:81:b5:47:1b:
         e1:8d:05:a0:fc:b5:b1:18:2a:b8:79:51:f2:e6:15:46:42:3c:
         5e:25:98:a9:87:21:58:20:7e:62:35:03:18:23:8f:d3:ee:cb:
         fe:75:5d:d6:8c:a7:c5:b0:90:c4:54:57:23:83:27:66:30:92:
         00:b3:ce:c1:9e:11:ca:33:78:84:af:6d:98:59:1e:08:7c:f0:
         68:f4:fc:c5:6b:e6:95:aa:c4:4e:65:bd:07:6a:64:0e:b7:4a:
         11:d6:d5:03:6b:8e:4e:14:46:51:36:b9:e8:27:f8:2d:02:e2:
         ff:ad:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:34:32 2026 by rpki-client