Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File:                     3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier:          0kH0OGoaDqQAIPdNDKyBeexIons5KTEiJYrWRHdQTfA=
Subject key identifier:   3A:F8:3B:72:1C:61:5E:31:AB:2D:2F:18:F6:F0:37:A4:F5:F3:1C:77
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer:       /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial:       01A0D94D46934BEDBB99D2000C081E0CFB41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number:          1A6C
Signing time:             Fri 25 Sep 2026 16:01:55 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:55 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:55 +0000
Files and hashes:         1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: 6B47NZf+0YhNm9omYApShDUAGUBhEk8DJcmHL7YWaIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:46:93:4b:ed:bb:99:d2:00:0c:08:1e:0c:fb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
        Validity
            Not Before: Sep 25 16:01:55 2026 GMT
            Not After : Sep 26 16:01:55 2026 GMT
        Subject: CN=3af83b721c615e31ab2d2f18f6f037a4f5f31c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:72:58:8f:f9:7e:13:88:8a:df:ff:8d:4d:
                    01:4c:0e:03:d3:23:6a:cf:82:34:3c:ec:e0:be:b0:
                    a7:76:60:d4:95:fe:76:7a:ba:5b:49:de:7b:f2:10:
                    4b:13:0a:c0:d4:2c:a0:ca:09:55:e3:9f:07:29:11:
                    ba:21:b9:aa:07:d9:07:f0:92:b2:61:eb:46:1f:d5:
                    09:dc:36:5b:20:2e:87:87:30:ac:82:22:c9:d5:ec:
                    32:8a:b7:c3:3b:35:c8:97:f3:5f:64:87:07:fd:d9:
                    34:20:44:6f:47:c7:87:cf:49:3b:d8:7f:7e:e6:1b:
                    9a:8f:d0:f4:bc:24:a1:6f:62:8e:e3:2b:e1:4b:ef:
                    cb:52:02:cf:bd:ec:cb:df:8b:b4:6d:be:7d:87:36:
                    90:95:a7:8c:fc:7f:ec:81:2c:af:0c:a6:1a:66:e8:
                    6e:d6:42:1f:3d:61:99:04:8e:19:e0:8d:3e:23:30:
                    88:97:fd:63:d8:8b:1a:b9:07:6c:a2:0e:3c:1a:85:
                    56:b9:53:2c:b9:96:d3:03:e9:60:de:0c:44:58:15:
                    66:9a:7a:73:bd:19:dc:19:cf:e0:ae:36:0a:56:6c:
                    85:bc:cd:88:4b:c0:a6:be:62:b6:25:4c:e6:ab:f5:
                    3a:90:42:df:ec:17:92:14:23:08:e3:e8:11:7f:a1:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F8:3B:72:1C:61:5E:31:AB:2D:2F:18:F6:F0:37:A4:F5:F3:1C:77
            X509v3 Authority Key Identifier:
                keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:3c:2d:a1:3e:13:2b:4f:ca:47:c0:65:38:76:a2:3a:09:
         a6:fa:4b:75:93:eb:a7:1e:63:6a:d9:57:76:29:59:e4:b7:7d:
         38:c3:1d:db:49:9b:17:bb:2e:eb:00:ea:ec:0a:44:b6:09:fd:
         91:b1:bc:8e:05:a4:45:52:fc:2a:cd:ec:1c:bf:65:e1:b6:53:
         94:ea:0b:f2:11:81:d2:3b:ba:aa:aa:7c:e5:a2:17:38:ce:5f:
         94:47:a5:7a:e0:c1:f5:5b:a8:8b:0b:80:ad:b6:09:11:49:71:
         65:17:e4:f3:b1:06:64:4f:ee:ae:2e:fa:83:f2:25:b7:60:80:
         67:18:6a:84:42:ae:e7:0d:ad:3c:c4:ae:f7:1f:c9:86:2b:b6:
         72:f4:49:67:a4:0b:cc:3a:68:a4:e1:cb:7a:2a:73:b2:32:16:
         11:2b:ea:24:5f:1a:39:d2:e8:13:df:1c:fe:04:0f:77:00:45:
         25:04:f4:fc:5d:30:4b:39:5a:78:2a:01:dd:0e:44:5c:08:f2:
         d2:32:29:0e:aa:5b:75:a7:32:ce:d3:71:db:06:bf:c9:f8:0d:
         cd:9f:42:3a:f4:ba:aa:1e:ae:d7:7a:09:6e:c2:fc:7b:f8:a5:
         83:b2:a9:8f:4b:fa:f5:75:fd:f4:94:0c:cc:ac:28:73:80:ae:
         a3:41:b1:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTUaTS+27mdIADAgeDPtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw
YjZlNTEwHhcNMjYwOTI1MTYwMTU1WhcNMjYwOTI2MTYwMTU1WjAzMTEwLwYDVQQD
EygzYWY4M2I3MjFjNjE1ZTMxYWIyZDJmMThmNmYwMzdhNGY1ZjMxYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGtyWI/5fhOIit//jU0BTA4D0yNq
z4I0POzgvrCndmDUlf52erpbSd578hBLEwrA1CygyglV458HKRG6IbmqB9kH8JKy
YetGH9UJ3DZbIC6HhzCsgiLJ1ewyirfDOzXIl/NfZIcH/dk0IERvR8eHz0k72H9+
5huaj9D0vCShb2KO4yvhS+/LUgLPvezL34u0bb59hzaQlaeM/H/sgSyvDKYaZuhu
1kIfPWGZBI4Z4I0+IzCIl/1j2IsauQdsog48GoVWuVMsuZbTA+lg3gxEWBVmmnpz
vRncGc/grjYKVmyFvM2IS8CmvmK2JUzmq/U6kELf7BeSFCMI4+gRf6GTqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr4O3IcYV4xqy0vGPbwN6T18xx3MB8GA1UdIwQY
MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt
NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx
LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJ48LaE+
EytPykfAZTh2ojoJpvpLdZPrpx5jatlXdilZ5Ld9OMMd20mbF7su6wDq7ApEtgn9
kbG8jgWkRVL8Ks3sHL9l4bZTlOoL8hGB0ju6qqp85aIXOM5flEeleuDB9VuoiwuA
rbYJEUlxZRfk87EGZE/uri76g/Ilt2CAZxhqhEKu5w2tPMSu9x/Jhiu2cvRJZ6QL
zDpopOHLeipzsjIWESvqJF8aOdLoE98c/gQPdwBFJQT0/F0wSzlaeCoB3Q5EXAjy
0jIpDqpbdacyztNx2wa/yfgNzZ9COvS6qh6u13oJbsL8e/ilg7Kpj0v69XX99JQM
zKwoc4Cuo0Gx/Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:26:05 2026 by rpki-client