Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          inX+IkHQ8AOrMdsFB3HO2xLAZUKMBZd39aqLFZjp7xo=
Subject key identifier:   B3:A8:00:45:B0:D7:96:A4:47:A4:6D:78:FD:A9:96:7A:29:CA:63:6A
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       01A06D2785D8402A82C0556D30C03957F981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1A37
Signing time:             Fri 04 Sep 2026 16:01:41 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:41 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:41 +0000
Files and hashes:         1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
                          2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: +cdils9RsgJ8LWbjltezVyku2iuRCy8ANnRxvY5nFyo=)
                          3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:85:d8:40:2a:82:c0:55:6d:30:c0:39:57:f9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Sep  4 16:01:41 2026 GMT
            Not After : Sep  5 16:01:41 2026 GMT
        Subject: CN=b3a80045b0d796a447a46d78fda9967a29ca636a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:a4:30:9a:69:c2:f6:72:47:c7:0e:83:2a:
                    19:a8:bf:bc:a0:3a:68:42:dc:46:97:86:e3:c3:2d:
                    96:32:cf:d6:fd:f3:87:be:c0:7a:2a:c6:a9:10:85:
                    42:d2:f9:e6:1a:34:ff:71:b5:ab:40:c3:40:fb:d9:
                    61:f8:05:8e:78:1b:92:d9:ca:d5:8e:14:06:12:56:
                    c0:b6:06:3f:6d:9a:f0:49:cf:cf:6d:a0:fe:ec:7b:
                    3c:6f:e9:83:60:7c:cd:3f:a8:db:83:95:03:5f:88:
                    b9:94:47:b4:55:09:3e:6a:fe:43:db:3e:82:6e:d0:
                    96:90:57:28:2c:4e:ae:6e:1c:31:44:ee:11:04:16:
                    f4:48:0f:e1:3d:90:96:5b:cb:31:e6:2f:f3:68:79:
                    9e:a5:71:82:33:ed:58:b5:12:9f:cf:0e:87:21:d3:
                    cd:5b:9c:dc:fe:87:02:d5:60:b4:a0:f9:76:cb:74:
                    b8:cd:3d:1b:12:e6:6e:1c:c0:3f:9f:c6:c1:a0:27:
                    3f:3d:39:d5:1d:2b:52:b1:48:54:9d:b7:50:29:21:
                    35:1b:49:a3:47:e6:50:67:b4:56:d0:c5:22:9b:59:
                    c0:28:d4:98:16:47:39:81:d7:ff:1f:56:b1:e2:4a:
                    21:25:e3:3f:e0:1b:b5:10:7d:b3:a4:87:6c:72:b9:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:00:45:B0:D7:96:A4:47:A4:6D:78:FD:A9:96:7A:29:CA:63:6A
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:bb:fe:b6:29:d9:2f:6f:77:68:f1:a7:26:8d:74:cc:43:
         d4:9e:90:44:2a:4d:92:6d:2d:b7:8f:27:2e:35:e8:62:e9:b2:
         26:67:75:7a:a8:7f:59:ce:7a:bd:8b:5f:b9:9d:68:6b:7c:45:
         00:bb:f7:af:86:25:b6:55:c1:6e:36:34:12:35:ea:4d:ff:2d:
         58:0c:98:a6:8a:f1:92:68:57:63:27:a5:a1:ec:b8:0d:36:d1:
         bf:72:cc:08:86:5e:5e:ad:ec:15:ac:3d:6f:e3:bf:fd:43:16:
         a6:d6:3a:90:f9:4d:f1:8c:36:ff:1d:d5:7d:03:78:b3:d5:f3:
         85:bc:6e:ad:93:59:29:b9:df:f7:a6:8a:1a:a9:1c:4d:8b:a1:
         e1:29:91:9f:3c:a4:b9:e3:87:14:f5:b6:2e:c7:50:ce:2d:f5:
         21:16:11:f2:35:20:2c:12:81:7c:81:12:cf:ca:90:b1:03:b6:
         0d:f4:17:ae:e1:31:7e:d8:5e:f6:c4:09:91:f4:6c:aa:45:d6:
         43:3b:cd:1a:25:a0:7d:8e:66:5d:e9:8e:c4:58:6f:d5:83:da:
         44:f2:0c:0c:d6:f7:88:8d:3b:a2:14:93:8a:18:02:c9:8c:66:
         ac:c3:c3:69:12:c4:a2:1a:a6:29:db:00:ed:de:f5:38:e9:9e:
         0e:a5:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:32:04 2026 by rpki-client