Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File:                     3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier:          w+6tV4HqGRS91VVs4zHHunL5s3LMUcESjkBnlaj2qHs=
Subject key identifier:   0A:4B:4E:56:A6:4A:75:4F:15:5D:47:23:E7:CF:D7:D3:5A:50:B1:07
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer:       /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial:       01A13D4A01C9FF27B2E4E4A7E16E234CC9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number:          1019
Signing time:             Thu 15 Oct 2026 02:00:22 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:22 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:22 +0000
Files and hashes:         1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: o7VQAGHx2x9lKd1JkrGfA0sD/P8i0riJCv2UVD+fjDc=)
                          2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:01:c9:ff:27:b2:e4:e4:a7:e1:6e:23:4c:c9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
        Validity
            Not Before: Oct 15 02:00:22 2026 GMT
            Not After : Oct 16 02:00:22 2026 GMT
        Subject: CN=0a4b4e56a64a754f155d4723e7cfd7d35a50b107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:52:a1:05:23:f1:9c:d5:80:22:a2:e4:c5:
                    d8:c9:36:a5:28:5e:a3:8a:5f:40:fd:de:10:51:bf:
                    6f:9d:79:bd:0f:6d:9f:64:29:25:6c:2b:1d:81:7b:
                    e5:d2:46:39:6f:7e:52:57:e4:4f:ad:72:be:d7:92:
                    b2:b0:3c:61:1a:c2:3f:b0:b5:56:b0:78:7e:de:b7:
                    43:50:0a:03:2f:2f:04:5e:81:6d:a2:7f:f3:eb:67:
                    bd:b0:1e:68:60:41:e0:78:68:ed:1c:44:1a:5c:8e:
                    5d:c1:dd:1e:2f:9a:5f:2d:26:4f:38:b7:e3:da:72:
                    80:d4:ff:14:4a:3a:c7:9d:59:c5:ea:eb:62:5d:04:
                    a6:cd:85:e0:48:be:0f:84:8e:9f:24:81:0f:b1:9d:
                    02:24:ef:14:0c:28:05:74:2d:19:e8:b9:a9:7f:34:
                    ef:f2:75:45:58:15:c0:27:3d:60:88:ee:3d:5e:f0:
                    5d:a8:5d:03:8b:32:16:49:91:0c:31:c6:2b:da:ca:
                    26:c3:f5:cb:3d:1c:56:29:cf:af:99:30:26:f0:98:
                    3a:bb:10:48:9e:2e:e4:cd:39:5d:c8:75:9a:3e:cc:
                    af:53:d0:6c:a5:3d:9d:fe:52:d9:4a:a1:71:4a:f4:
                    62:5f:47:1d:0e:89:b0:09:12:ad:97:16:86:b3:1f:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4B:4E:56:A6:4A:75:4F:15:5D:47:23:E7:CF:D7:D3:5A:50:B1:07
            X509v3 Authority Key Identifier:
                keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:db:d4:c9:f0:35:10:90:f5:82:bc:88:37:64:42:93:c0:
         7a:09:72:b1:39:92:29:78:4c:0d:3e:21:ee:c6:83:90:8a:c9:
         b3:21:c8:23:0c:20:8f:7d:93:5f:0e:f9:5e:dc:1c:8c:bd:44:
         20:a8:09:74:01:70:77:69:cc:61:33:5f:79:87:c8:0f:e2:d3:
         79:be:b5:d7:a8:4f:d8:b2:18:c7:54:09:e0:f0:a4:4c:14:1a:
         e1:9f:c6:13:09:99:a3:12:4a:cb:8a:d9:66:c7:86:1c:99:c1:
         c9:bd:6b:fb:cf:36:9d:01:d7:28:78:02:a3:78:a9:ec:3d:f3:
         de:73:c1:f4:d3:2e:50:18:22:e5:e2:d4:5d:12:50:21:82:4d:
         6d:e3:42:aa:32:f9:91:48:c9:63:43:fb:5d:2d:39:28:78:de:
         42:1a:dc:83:97:1b:f1:43:87:59:4c:44:da:6c:9c:48:8b:d8:
         f0:f7:11:24:65:bd:02:87:47:db:71:ac:0d:1f:e4:45:39:0b:
         0e:45:bd:21:49:2b:7b:4a:f1:44:47:fb:6c:da:ca:d6:88:e3:
         b9:c8:47:b6:30:a8:56:42:f1:7f:4e:18:07:f3:39:53:4b:1e:
         fd:d3:4f:25:55:67:ab:84:06:fa:c9:6a:22:d6:30:2f:7d:a2:
         1b:d1:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:22 2026 by rpki-client