Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File:                     r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier:          ZtGR1NWfdlYCbrj3gDNYL0UoWC656I1UmwWbkOoWH8k=
Subject key identifier:   AC:B6:C0:67:7B:7F:95:4C:46:3D:9F:C4:F7:2F:90:3E:D6:71:4F:F8
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer:       /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial:       01A16E6E046AE44E4A843A5A60FD0936375B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number:          1AC7
Signing time:             Sat 24 Oct 2026 15:01:06 +0000
Manifest this update:     Sat 24 Oct 2026 15:01:06 +0000
Manifest next update:     Sun 25 Oct 2026 15:01:06 +0000
Files and hashes:         1: 4kICntJgsVWHWkY4JO35N1ABDJY.roa (hash: ENs43kJVz2bXsMKabmKE5DgKXDHmDIJ5VjejvZ/w6lU=)
                          2: 73PJtfjKOUuf0kYb-3vXjN2jUgI.roa (hash: 1XKicI3n2lKZgBn2j8dKasUw30d/M7iJpq2R4GQkhjQ=)
                          3: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
                          4: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: 4ubQuGDec8jYHXnNtPBENuKsFCVMst+cLt/KRVJSPDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:6e:04:6a:e4:4e:4a:84:3a:5a:60:fd:09:36:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
        Validity
            Not Before: Oct 24 15:01:06 2026 GMT
            Not After : Oct 25 15:01:06 2026 GMT
        Subject: CN=acb6c0677b7f954c463d9fc4f72f903ed6714ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:45:71:90:6d:3e:94:a9:c0:50:1f:ea:68:
                    1b:85:0d:0a:5d:43:6c:c1:6d:48:95:ab:87:98:04:
                    d7:97:07:0f:c5:f0:95:fc:80:59:c8:49:5a:79:13:
                    8b:6d:ed:ba:2c:06:19:1a:a0:7e:36:c0:b0:00:83:
                    f2:47:1b:e6:67:14:fb:0e:4b:f5:83:68:f6:50:9c:
                    dd:34:49:33:45:65:44:2d:93:11:fb:68:a4:d9:31:
                    32:0e:d4:69:59:d8:4e:f8:a5:33:25:dd:42:21:f6:
                    4f:4c:d0:fe:85:f8:57:36:6f:1b:6c:66:b8:8e:14:
                    4e:47:4e:7f:e0:4e:6a:e9:2f:3c:23:97:49:c0:4d:
                    7a:2e:93:25:cf:59:0b:88:00:22:bb:05:20:c4:d8:
                    b6:f6:06:3d:8f:b1:c9:77:e5:05:8f:50:c5:c0:13:
                    c4:49:ad:23:e4:f3:4c:0b:22:c5:55:1f:36:65:0e:
                    16:06:1e:bb:cd:fe:aa:af:ba:84:3d:16:c5:f9:ff:
                    c9:f1:40:86:63:19:e6:8a:d5:67:fa:e8:1f:9b:14:
                    27:87:b0:04:72:0d:76:f7:76:28:f8:b1:a2:07:8d:
                    fb:ab:39:db:a3:5e:39:d3:d2:b1:ec:4c:10:ca:a6:
                    de:3a:13:d2:f6:ab:29:dd:52:96:c2:1c:bd:c4:2d:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B6:C0:67:7B:7F:95:4C:46:3D:9F:C4:F7:2F:90:3E:D6:71:4F:F8
            X509v3 Authority Key Identifier:
                keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:14:1c:b9:9f:e0:2e:69:d2:7d:cb:f4:78:33:a2:88:59:85:
         03:ba:f5:52:dc:a3:ec:ae:ec:70:f2:20:1f:4e:de:d3:e3:08:
         53:09:64:83:9c:14:14:1d:d6:52:c0:60:46:1f:bb:42:4f:ab:
         31:44:90:60:92:c5:0a:48:bc:e9:3e:35:d5:77:31:99:f0:a4:
         4f:3f:0e:1c:e8:7d:a1:a2:d6:a9:38:ab:07:1f:1e:73:34:0a:
         e7:23:65:5a:c4:cd:8e:ef:a5:f3:93:45:3c:1e:b9:34:e8:ec:
         27:8b:a7:06:43:ec:95:4f:96:92:48:e7:33:d2:36:a9:11:11:
         3f:46:c5:3c:98:19:3e:e5:b9:2f:79:81:62:ec:f3:35:da:19:
         de:3d:78:6d:5d:b8:66:95:4e:0f:80:d9:c6:f3:f5:ab:c0:3c:
         de:d5:ee:71:20:91:47:8c:8a:2e:0c:27:4e:65:fe:5a:37:66:
         cc:2b:0d:50:8a:83:c4:40:10:b3:f3:42:4a:83:0e:d4:d6:71:
         52:2e:3b:2c:ca:3d:17:f4:b2:50:6c:a3:56:2d:ca:87:c3:06:
         8c:a8:65:62:07:98:6d:cc:bb:c7:98:81:3c:d4:8c:6e:8a:9f:
         2b:65:66:5c:4c:47:88:97:b1:3f:a4:06:d1:30:81:07:6b:31:
         0c:2e:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:42:33 2026 by rpki-client