Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File:                     3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier:          j0ifG3pzjP+wHZW3MagT9Mw4cimzyX+u6nVthU0+OAc=
Subject key identifier:   9F:1D:C0:6B:48:CD:61:91:1B:63:D4:4A:0B:14:7A:AC:33:F0:70:44
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer:       /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial:       01A105133CF23FC0004D432497A8C554DF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number:          0181
Signing time:             Sun 04 Oct 2026 04:01:49 +0000
Manifest this update:     Sun 04 Oct 2026 04:01:49 +0000
Manifest next update:     Mon 05 Oct 2026 04:01:49 +0000
Files and hashes:         1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: aKLpu3ncpxcFdoVEXb3U4IV1qtplCPabLoyWNp9ZCi8=)
                          2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:13:3c:f2:3f:c0:00:4d:43:24:97:a8:c5:54:df:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
        Validity
            Not Before: Oct  4 04:01:49 2026 GMT
            Not After : Oct  5 04:01:49 2026 GMT
        Subject: CN=9f1dc06b48cd61911b63d44a0b147aac33f07044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:99:6d:fc:c8:bf:a6:07:85:f5:59:a1:51:
                    83:d3:2c:4d:55:d2:1b:30:6e:46:c6:9a:4c:b7:d1:
                    ea:98:3d:3c:d9:a7:98:3f:f5:be:ba:fa:d0:b5:1c:
                    da:f3:1b:69:5e:09:5a:41:e5:99:cb:b9:aa:e1:ba:
                    b6:41:ca:98:62:96:4b:8d:b4:42:a8:e7:aa:55:31:
                    03:d6:73:5c:4e:99:e5:cf:28:d3:b4:a7:55:f4:d2:
                    2f:0a:cc:67:66:ef:89:7d:fc:26:83:23:61:b0:2f:
                    39:69:d0:22:2b:78:a0:53:66:f5:5a:31:a4:ea:77:
                    5e:73:a2:1d:1e:cb:60:3a:f1:0b:63:5b:3c:c1:cb:
                    01:af:da:f5:43:e2:30:5e:0f:a0:58:9c:3b:5b:5d:
                    92:3f:4f:9b:ce:19:81:3b:63:36:1f:d0:a6:7c:40:
                    72:ec:c3:2b:6e:ca:bc:7d:55:a6:94:5c:2f:b2:b6:
                    a8:85:23:ce:f4:83:a2:8d:05:6e:f2:a1:f9:95:7b:
                    22:05:4f:f1:6e:ea:28:f8:67:be:6c:0d:09:13:34:
                    c9:fd:fe:14:e6:c1:94:cf:eb:f1:d2:1e:97:db:5b:
                    d7:8c:20:62:36:be:52:05:f1:e4:66:fe:dc:d8:0f:
                    fd:eb:87:fc:c6:6c:18:7d:63:9c:d1:81:e4:6b:6b:
                    8e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:C0:6B:48:CD:61:91:1B:63:D4:4A:0B:14:7A:AC:33:F0:70:44
            X509v3 Authority Key Identifier:
                keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:36:42:73:7c:6c:63:21:80:37:ff:79:eb:a6:2a:6d:6d:
         bd:c1:34:be:06:36:b4:a9:9f:e5:f2:55:7d:6b:dd:d2:b2:db:
         f8:41:e9:0e:3f:79:c2:6f:27:a6:55:fb:77:48:34:4c:37:09:
         02:55:9f:cd:40:62:ed:b2:c4:72:e7:75:7f:00:5b:27:7d:aa:
         34:bd:0c:6f:93:2c:35:a8:80:89:34:e0:29:61:c9:4e:34:48:
         cb:ee:84:0a:be:14:28:2e:48:00:a7:d5:55:ff:35:04:a8:af:
         cc:40:b5:fa:d5:e3:95:ad:d7:44:b2:9a:87:a5:cd:45:bd:08:
         be:ff:3a:56:8f:f5:b9:61:a4:b8:88:6d:3b:81:18:a3:e5:bc:
         d8:bf:16:ea:0b:f0:99:90:a5:70:2f:b9:21:f4:5d:34:95:11:
         f4:29:7b:1c:19:f7:e1:05:99:ae:4e:94:06:02:80:6f:e5:91:
         37:76:ce:83:92:47:27:07:4e:ce:3a:19:91:98:ad:c6:37:0b:
         94:5e:ad:b9:51:d6:eb:4b:6e:51:22:ed:fb:ea:13:f4:17:cb:
         89:dd:d2:52:4e:d4:6c:01:e1:f9:3f:40:4d:2d:fb:ad:14:08:
         d4:8b:ae:f4:aa:94:f4:d5:2f:0e:50:32:19:75:f6:69:80:9b:
         c4:bb:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:46:38 2026 by rpki-client