Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          QDYlIVPIwHd9yfN5ycYyWvJm7/E5SYxi+jQphP1Rvs0=
Subject key identifier:   01:68:8A:80:DC:8D:43:BC:69:56:F9:53:10:D0:54:D1:97:28:60:26
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       01A0F8699967864BC832480AD629F4C5CF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          1A81
Signing time:             Thu 01 Oct 2026 17:01:04 +0000
Manifest this update:     Thu 01 Oct 2026 17:01:04 +0000
Manifest next update:     Fri 02 Oct 2026 17:01:04 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: dJuZcrwbrd8l1dR3eRwRGz/hMjgEB6YEb/3O4OIAOIg=)
                          2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:69:99:67:86:4b:c8:32:48:0a:d6:29:f4:c5:cf:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Oct  1 17:01:04 2026 GMT
            Not After : Oct  2 17:01:04 2026 GMT
        Subject: CN=01688a80dc8d43bc6956f95310d054d197286026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:22:4a:b9:4b:ae:5c:83:85:2e:70:b0:8d:
                    3a:80:5f:77:ad:c4:b1:61:63:be:d7:25:18:cf:d9:
                    2a:d1:b4:36:59:5d:a2:7c:1b:35:20:85:d4:93:1f:
                    9c:cd:20:50:65:3d:a8:fb:2a:39:ba:d3:bb:0f:57:
                    c8:3c:09:65:83:0e:20:18:74:ff:32:0f:d6:1d:a9:
                    41:c1:26:18:5a:4e:fe:57:63:f8:d9:88:f0:f9:e7:
                    5e:16:8c:17:b0:7a:9e:d5:f3:8d:d2:9d:b3:a4:a7:
                    79:0c:c8:60:7f:ee:74:04:7e:af:cd:0e:7c:72:92:
                    38:cf:0f:82:3c:41:d0:c9:05:eb:f6:6b:0d:c2:f8:
                    15:53:cd:26:a5:2f:36:c4:28:2e:9a:eb:18:45:aa:
                    c5:31:a7:5a:a5:65:67:03:89:a9:ac:eb:90:29:b8:
                    d7:1b:64:dc:0d:cc:9c:d2:27:3b:a8:e9:6d:f2:99:
                    2b:b2:7d:90:3f:80:ec:11:fb:33:18:86:2b:53:6f:
                    78:af:7d:42:74:a3:01:68:9e:05:81:7e:15:13:c9:
                    47:fe:ab:14:03:1f:1d:c1:d6:6f:31:c2:10:e6:87:
                    80:bd:01:bb:08:18:cb:63:e9:a4:4a:78:2c:5c:b9:
                    ec:70:5d:c0:ec:0c:9e:3f:13:07:13:db:34:f1:4a:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:8A:80:DC:8D:43:BC:69:56:F9:53:10:D0:54:D1:97:28:60:26
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:49:86:ea:c6:b3:cf:7a:f7:21:cb:e4:07:68:9a:79:58:a5:
         76:63:b5:0c:47:8b:4d:4d:b5:55:00:90:7d:db:3d:00:18:5d:
         dc:4e:eb:8e:d7:0d:c3:72:8e:83:86:73:71:a0:8c:dc:a4:c6:
         c1:2f:9e:42:08:50:2e:61:67:92:2d:43:b8:db:42:a7:d6:55:
         d9:c1:7d:cb:30:69:6e:0b:e5:bf:45:42:21:51:0c:bf:be:74:
         06:b9:b2:b4:51:7a:a9:c0:35:db:37:4b:cd:42:10:32:28:d7:
         48:be:ff:98:d4:b0:8c:ac:b4:62:c1:4a:d7:52:68:3a:cd:42:
         45:02:2c:71:d9:f8:49:aa:09:f6:ff:54:95:50:8d:59:c8:c0:
         74:f3:9a:46:5f:27:64:21:34:77:3f:53:7d:08:ca:c3:d9:07:
         cf:ed:66:b4:57:b7:13:6b:36:cb:b7:fc:4f:60:9f:6f:75:6f:
         19:f5:d1:c3:39:fb:b6:58:fd:d2:02:66:58:bb:2a:a2:12:c6:
         c4:9f:a6:ed:f3:f4:b3:61:08:db:42:66:4c:24:fa:be:b0:2e:
         93:4f:fc:e7:09:f5:45:63:2e:13:93:02:c4:ba:12:88:b9:4c:
         21:1c:13:d2:2a:aa:0d:da:51:d7:c6:85:09:e3:23:7c:4c:18:
         f8:40:b4:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4aZlnhkvIMkgK1in0xc9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjA0NmI2ZTMwOWU5YTg2NjUyMmMyYTQwYzY2ZmZjNDJm
YmI4NDMwHhcNMjYxMDAxMTcwMTA0WhcNMjYxMDAyMTcwMTA0WjAzMTEwLwYDVQQD
EygwMTY4OGE4MGRjOGQ0M2JjNjk1NmY5NTMxMGQwNTRkMTk3Mjg2MDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pMiSrlLrlyDhS5wsI06gF93rcSx
YWO+1yUYz9kq0bQ2WV2ifBs1IIXUkx+czSBQZT2o+yo5utO7D1fIPAllgw4gGHT/
Mg/WHalBwSYYWk7+V2P42Yjw+edeFowXsHqe1fON0p2zpKd5DMhgf+50BH6vzQ58
cpI4zw+CPEHQyQXr9msNwvgVU80mpS82xCgumusYRarFMadapWVnA4mprOuQKbjX
G2TcDcyc0ic7qOlt8pkrsn2QP4DsEfszGIYrU294r31CdKMBaJ4FgX4VE8lH/qsU
Ax8dwdZvMcIQ5oeAvQG7CBjLY+mkSngsXLnscF3A7AyePxMHE9s08UrnAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFoioDcjUO8aVb5UxDQVNGXKGAmMB8GA1UdIwQY
MBaAFN6wRrbjCemoZlIsKkDGb/xC+7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDkt
MWM5NDkyMjQ1Y2FiLzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMjRiYzItNDJmMy00NmQ5LWJkZDktMWM5NDkyMjQ1Y2Fi
LzEvM3JCR3R1TUo2YWhtVWl3cVFNWnZfRUw3dUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUmG6saz
z3r3IcvkB2iaeVildmO1DEeLTU21VQCQfds9ABhd3E7rjtcNw3KOg4ZzcaCM3KTG
wS+eQghQLmFnki1DuNtCp9ZV2cF9yzBpbgvlv0VCIVEMv750BrmytFF6qcA12zdL
zUIQMijXSL7/mNSwjKy0YsFK11JoOs1CRQIscdn4SaoJ9v9UlVCNWcjAdPOaRl8n
ZCE0dz9TfQjKw9kHz+1mtFe3E2s2y7f8T2Cfb3VvGfXRwzn7tlj90gJmWLsqohLG
xJ+m7fP0s2EI20JmTCT6vrAuk0/85wn1RWMuE5MCxLoSiLlMIRwT0iqqDdpR18aF
CeMjfEwY+EC0+Q==
-----END CERTIFICATE-----
Generated at Fri Oct 2 08:38:57 2026 by rpki-client