Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
File:                     339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json)
Hash identifier:          taLzJ3u/ZwbrmwSSnBHMfTBD9usi94sMAc7YF0qNSGY=
Subject key identifier:   30:76:66:02:0C:0E:D5:71:31:7B:3A:93:FD:55:F0:EB:F6:88:0E:24
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       01A140B9A42643AA64829E61DB08BF5DE42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
Manifest number:          17A3
Signing time:             Thu 15 Oct 2026 18:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:10 +0000
Files and hashes:         1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: t5pdvy4xZoO08po1TdoUfQxX0g5p6QxfwPBAjlhqmsE=)
                          2: ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (hash: Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:a4:26:43:aa:64:82:9e:61:db:08:bf:5d:e4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Oct 15 18:01:10 2026 GMT
            Not After : Oct 16 18:01:10 2026 GMT
        Subject: CN=307666020c0ed571317b3a93fd55f0ebf6880e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:82:25:33:50:67:17:eb:b0:1a:bd:8c:3d:
                    eb:8b:5c:e2:ba:9d:a9:20:32:35:9b:87:77:87:0d:
                    e6:4d:ec:3a:48:30:74:ae:4f:3d:82:17:5b:d1:88:
                    c9:1b:57:c8:8e:1d:4e:d0:8b:f1:3b:0c:73:04:83:
                    c4:29:0b:b1:8a:7a:52:d6:6f:e0:1f:9f:a2:f2:32:
                    2e:14:e3:e4:16:fa:22:fa:c9:3f:d3:ab:6a:c0:59:
                    f5:68:9e:8c:90:e0:fb:da:f5:49:6a:55:19:fc:11:
                    bf:68:47:cc:1e:0d:73:e2:35:54:a3:3e:f6:06:f2:
                    5f:20:c0:d2:25:63:0e:fe:5e:e2:ff:ee:f7:12:e7:
                    cd:0d:1c:8a:72:d4:73:86:8e:31:4d:cc:90:94:c8:
                    df:66:c9:b6:ff:0f:df:36:71:94:d9:b2:c1:98:6d:
                    d6:42:2b:86:9b:4e:6b:ee:26:03:4d:56:90:de:ce:
                    5f:a7:fa:c8:cc:74:27:b3:80:c7:49:ea:af:e1:3f:
                    a9:5a:f8:6f:b8:61:d2:2b:90:f3:e8:50:c5:a1:81:
                    98:7f:d5:0a:16:94:c5:ad:b2:5b:4d:0f:97:c4:d7:
                    c7:82:a8:3f:28:e5:be:e1:1a:e1:c0:9d:7f:8f:cc:
                    90:80:c8:39:ae:4e:4b:fb:0b:18:19:dd:1c:f7:00:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:66:02:0C:0E:D5:71:31:7B:3A:93:FD:55:F0:EB:F6:88:0E:24
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f6:36:0a:44:59:65:53:4f:65:32:3a:ac:6b:6b:ec:54:41:
         e8:a5:3a:38:14:b4:2e:fd:88:a4:fe:4f:a4:93:a1:b5:d3:95:
         df:ca:59:06:88:e6:56:16:ee:93:48:ef:2b:0b:14:42:21:0f:
         67:2d:33:98:bc:50:0e:f0:89:01:a9:26:a4:db:3b:55:86:a6:
         49:35:c3:4e:44:87:7c:cc:fb:f3:84:1d:88:81:d1:ff:f1:d6:
         26:04:62:87:28:c5:37:4d:07:5b:5c:a5:ef:7a:08:2a:88:5c:
         68:e4:87:aa:20:f9:09:3d:16:33:a3:8c:2a:72:9f:7e:b2:0e:
         85:31:a7:9b:77:a7:ab:e2:55:9f:68:aa:6d:60:e3:15:b7:2b:
         97:01:28:08:85:79:1f:26:e3:68:2e:b9:c2:5b:ee:38:9f:b4:
         fc:d5:64:cb:69:a9:ff:88:2c:19:a5:3d:97:56:71:49:cb:61:
         76:44:d0:c6:0e:05:cc:99:72:ab:82:c4:5b:8a:08:fb:46:8e:
         1b:df:68:77:b3:ff:bb:a4:b2:8a:f3:3c:27:91:cf:e5:00:0e:
         c2:cc:89:8f:a6:79:de:c9:e2:09:61:da:70:d3:0b:6c:30:89:
         e6:15:21:ee:6c:fc:27:81:be:ba:78:89:11:bb:fd:1a:79:ad:
         87:a4:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:01 2026 by rpki-client