Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
File:                     3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft (raw, json)
Hash identifier:          M60BvG+yq+kvgVwMSER1B+qODQwyQmmACv+CBaApKsU=
Subject key identifier:   06:07:4E:D4:A5:5B:6B:B9:1A:47:D8:AA:A2:D1:92:EF:93:4C:F3:2D
Authority key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5
Certificate issuer:       /CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
Certificate serial:       01A0CEC80D4BB41AFF64B68BEDC20A9846FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
Manifest number:          0793
Signing time:             Wed 23 Sep 2026 15:00:12 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:12 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:12 +0000
Files and hashes:         1: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl (hash: a49iV7VCijB7nXNiXPiA9xhiBh7CvbWq8Q5HQJDeR2k=)
                          2: h8DfFuvqdUk7YoMeApQAXPJqjdk.roa (hash: ye1ky96HscedkMqsQUVtxrgYXUC8cIgsxg/lZeSLzu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:0d:4b:b4:1a:ff:64:b6:8b:ed:c2:0a:98:46:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5
        Validity
            Not Before: Sep 23 15:00:12 2026 GMT
            Not After : Sep 24 15:00:12 2026 GMT
        Subject: CN=06074ed4a55b6bb91a47d8aaa2d192ef934cf32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:56:9a:79:46:a6:99:0e:4f:46:b5:c7:9d:
                    68:88:01:f5:dd:fb:66:84:9e:0e:dc:f5:00:0f:09:
                    32:10:22:d5:dc:2d:5d:b0:0a:b0:12:02:94:ec:93:
                    a3:c7:ec:db:3e:57:5a:70:89:76:a7:c6:07:f8:46:
                    80:be:58:54:e8:23:1b:8c:f4:75:9e:0c:e3:0c:19:
                    7a:4a:0c:18:b5:45:1c:8c:54:86:31:14:a2:99:b2:
                    54:a6:36:e2:4f:63:64:0f:43:29:d3:aa:39:21:ad:
                    2b:1d:74:f7:cb:8b:aa:38:0f:f0:3a:1b:91:a3:df:
                    88:8a:26:b5:54:44:9e:56:b6:65:28:92:89:d9:a9:
                    09:d7:f8:a9:68:02:06:6f:84:31:3e:94:0b:8b:19:
                    89:62:b8:4c:2e:db:30:a0:6f:0a:4c:3b:28:52:0c:
                    68:fa:7b:e7:ad:3e:b0:3c:37:61:51:0d:fd:bc:9e:
                    f3:c3:30:ba:ad:10:1b:59:15:46:62:d0:69:aa:8e:
                    3c:04:89:8f:4e:94:a2:08:3f:77:12:2e:29:7d:76:
                    cd:e7:74:c8:ad:d1:4b:93:5b:4d:30:01:7e:a4:7a:
                    6e:3b:51:eb:81:6a:29:34:51:c6:a8:e3:f7:73:02:
                    f6:63:53:74:b6:e0:76:41:d5:7d:73:51:64:7b:68:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:4E:D4:A5:5B:6B:B9:1A:47:D8:AA:A2:D1:92:EF:93:4C:F3:2D
            X509v3 Authority Key Identifier:
                keyid:DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:ed:c6:65:3c:81:76:2e:fc:9c:f6:84:5f:6e:75:11:a4:
         f6:7c:5f:ca:b4:e7:15:8d:fb:1a:c1:21:62:63:1f:19:fb:16:
         5a:58:81:a9:cd:28:e7:dd:72:09:4b:af:bc:71:16:7c:bb:6d:
         27:25:50:83:5f:18:dc:cf:50:58:de:76:9a:b0:31:4e:6e:aa:
         8d:55:aa:d3:c2:b7:09:e3:37:ee:c9:b5:0a:ee:91:37:c1:8d:
         a6:ef:04:83:c1:c7:a3:74:00:56:07:02:36:13:8e:df:9d:0d:
         23:fc:03:cd:59:13:e1:14:c9:e0:d8:04:5a:b5:22:17:3a:a3:
         bd:a3:7c:00:32:4f:ee:01:35:25:0f:31:09:1c:cc:67:ed:cb:
         2a:8f:7b:90:70:e3:96:f7:59:78:d6:84:4a:a0:12:b9:f2:4f:
         fc:e2:cf:de:45:33:fb:57:89:53:4f:21:35:2b:74:18:c4:76:
         88:ea:0e:6c:15:d0:29:16:a8:3f:41:7b:76:ff:01:92:a5:e0:
         1a:64:79:a1:05:98:db:7f:c1:43:14:ab:a0:b7:3b:f2:4c:88:
         fc:9c:fc:63:0e:0d:7c:08:c7:69:69:7b:3f:37:12:2c:df:5e:
         7f:be:06:32:b8:c5:0e:b8:6d:1d:13:eb:d7:8b:ba:11:b8:7d:
         da:10:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:01:22 2026 by rpki-client