Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File:                     1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier:          jfE9V6sV2btEW+fF19+L7pcytU9eYdShiJlDr27cKdM=
Subject key identifier:   D0:54:31:EE:3B:41:D5:F7:46:98:E5:D8:A3:12:ED:55:D3:93:ED:C5
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer:       /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial:       01A0CC353ADA470A34A3EACE3DD2DAE3843E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:35 +0000
Files and hashes:         1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: LT6XDbj5agQgtCHnknHwXczUeTxMWm4qNnw0sHv4puM=)
                          2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:3a:da:47:0a:34:a3:ea:ce:3d:d2:da:e3:84:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
        Validity
            Not Before: Sep 23 03:00:35 2026 GMT
            Not After : Sep 24 03:00:35 2026 GMT
        Subject: CN=d05431ee3b41d5f74698e5d8a312ed55d393edc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:6b:61:72:9f:a0:d1:f5:be:b0:37:12:8a:
                    d8:68:d7:34:69:84:f8:ec:32:de:c8:46:f7:e8:82:
                    e4:9c:9b:b3:38:e3:34:45:5b:df:94:74:d4:5a:81:
                    ab:76:2f:02:71:f2:33:e1:33:4e:24:6d:ea:c2:ac:
                    35:e8:64:47:e1:65:8f:8c:7d:e2:3e:bb:c5:38:e9:
                    7f:1e:04:ab:e8:b8:ec:5b:af:47:1d:0e:33:1e:2c:
                    f5:f3:5a:ce:ef:e1:70:17:9f:d1:3c:75:40:fe:7d:
                    bd:0e:1c:3c:1d:9d:77:16:da:b0:d2:71:83:e8:86:
                    b1:2f:5b:14:5f:08:01:2e:85:71:bd:e5:fc:be:bc:
                    f5:18:10:5e:96:8c:fc:8a:f3:52:31:98:28:ac:7b:
                    d6:60:1a:06:d3:b9:95:65:fd:db:05:61:01:39:fb:
                    bc:45:db:9e:5b:3a:e0:95:9b:cb:9d:0e:2f:2c:2c:
                    26:57:f7:b6:d1:f6:b0:ec:4f:ed:9c:79:d4:38:aa:
                    94:cf:38:cc:e1:8f:1d:17:3e:0e:0b:65:a0:94:8b:
                    69:e2:44:a3:9e:36:ef:24:27:21:c0:df:8e:72:e6:
                    02:39:42:e4:21:1c:35:6e:31:c0:c5:15:98:20:da:
                    ae:3b:e6:98:9b:57:91:ec:d0:3a:c4:eb:99:e6:d5:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:31:EE:3B:41:D5:F7:46:98:E5:D8:A3:12:ED:55:D3:93:ED:C5
            X509v3 Authority Key Identifier:
                keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:26:e9:9c:31:e9:a9:e5:55:68:58:e7:89:e3:db:49:dd:
         11:9a:51:b7:59:13:f6:f6:1e:c8:be:21:e3:6e:3b:93:c3:25:
         25:c4:26:c1:46:cb:bc:cd:83:f7:c2:3e:e3:53:44:c1:63:b2:
         39:c6:cc:07:f9:b5:6f:5b:df:59:b8:3c:0b:7a:61:0c:43:ee:
         1f:f7:fc:f0:bc:b8:17:03:56:57:b5:bc:af:98:d2:d1:ab:ac:
         e6:57:9f:17:03:1a:50:0f:5c:6c:7a:b3:20:95:40:9a:e8:1a:
         de:46:07:cc:d6:98:85:5d:f5:15:87:c8:03:87:ab:68:e0:0e:
         b8:db:ee:58:b6:c0:19:f0:ed:44:4b:94:be:1d:e6:b0:d9:aa:
         e9:22:5b:f9:e4:3b:99:d5:29:87:12:fc:9b:e4:3a:3c:d6:e5:
         c1:7c:a0:60:f1:8d:dc:ad:a3:50:f3:8f:d3:de:a2:b6:c3:80:
         4a:bb:7c:12:0a:5e:dc:88:e5:ea:c0:3c:1d:4a:12:42:b4:cb:
         86:00:17:09:cc:e1:df:01:5c:d9:96:97:0a:4d:dd:51:a3:d7:
         67:d3:4e:6d:22:b7:88:41:25:5f:b8:4c:a0:02:e2:4f:89:fa:
         fd:9f:a6:5e:03:ab:93:ae:1e:63:df:0d:da:bb:fb:ff:b1:35:
         0c:c1:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:47:16 2026 by rpki-client