Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File:                     b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier:          SW/8f+iP9gHBhUKkA9iZWVf1WjCqqqYhe1VbtG/LAkY=
Subject key identifier:   39:A1:96:E9:EB:AD:F6:1C:FD:B8:71:70:E2:37:CE:FC:B9:B0:CB:B1
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer:       /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial:       01A08AC37177B2DB4E110EAF229963D61339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number:          19DA
Signing time:             Thu 10 Sep 2026 10:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:59 +0000
Files and hashes:         1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: PbnFtjSk4J+dXU3xegKxabcYctU4YuQIBnoPaYiRwlk=)
                          2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:71:77:b2:db:4e:11:0e:af:22:99:63:d6:13:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
        Validity
            Not Before: Sep 10 10:00:59 2026 GMT
            Not After : Sep 11 10:00:59 2026 GMT
        Subject: CN=39a196e9ebadf61cfdb87170e237cefcb9b0cbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:4d:04:27:95:cd:04:b8:72:93:a5:71:88:
                    47:5f:56:a2:9c:f7:e8:6e:b1:f9:c5:d7:c8:03:25:
                    e8:26:0a:4a:db:e8:16:fc:41:ea:a4:e9:05:d1:e1:
                    0c:94:e3:c2:37:00:77:88:97:8d:e5:e4:c4:67:cd:
                    ae:ca:d5:55:56:24:f3:78:48:75:80:5e:dd:1d:ba:
                    40:0f:f3:5f:06:76:e4:cf:87:1c:90:e4:4a:c7:a1:
                    6a:7e:b3:ce:3d:33:cb:5b:19:09:97:1a:6a:22:fb:
                    2d:2e:6c:d6:38:4d:d4:d6:31:5f:c9:28:ad:73:d0:
                    b4:05:a6:b8:4c:54:69:af:88:fa:cb:6b:06:17:61:
                    68:2e:d8:e8:56:7b:f5:1a:93:ad:81:3d:c7:09:96:
                    de:9b:1b:f3:e7:67:38:93:a0:a6:fe:0a:09:0e:47:
                    20:42:7c:c4:84:a7:c7:26:1c:05:fb:fb:38:74:a4:
                    5b:7e:02:41:22:46:94:99:30:9b:f3:58:d9:8d:c9:
                    9f:95:31:fb:db:64:df:85:2b:df:d1:33:5b:dc:2c:
                    54:0d:64:a9:2f:a1:62:5b:9c:c8:7c:8c:af:ff:b6:
                    ff:a4:a3:b3:bf:11:d8:1c:39:fd:4d:82:70:86:c0:
                    9c:5e:28:fa:f9:bb:b8:c9:96:f0:ec:6d:da:dd:11:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A1:96:E9:EB:AD:F6:1C:FD:B8:71:70:E2:37:CE:FC:B9:B0:CB:B1
            X509v3 Authority Key Identifier:
                keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:84:e8:b1:e1:af:df:ba:99:04:c8:75:af:a3:93:3c:82:f1:
         12:a0:20:7b:5d:f1:a8:53:f0:e9:36:fb:03:3b:4e:d9:2d:cd:
         36:7d:f9:29:db:be:8f:cf:d8:06:29:cb:4b:a0:3a:f5:99:b3:
         13:1b:e7:ed:d4:a8:db:f8:6d:19:80:04:df:cc:db:24:9e:53:
         33:17:04:87:bd:9a:79:a5:24:b7:21:a1:4b:94:1c:26:4c:b6:
         35:cd:c0:59:ad:ae:55:74:a0:bd:88:b2:56:ff:0d:0f:aa:c6:
         db:2f:60:24:85:91:91:61:f5:05:30:7c:01:e4:77:c1:a4:91:
         c5:05:73:57:0f:b2:cb:ac:11:5f:24:5a:50:50:ba:6c:a4:5e:
         bf:bc:76:4d:0c:56:98:5f:b2:25:7b:be:42:83:d6:0c:7a:f2:
         ef:1f:bb:ee:e5:8f:8b:83:23:db:9a:8d:f3:bc:0d:87:b7:35:
         a2:e5:44:b2:1c:28:61:79:2b:1d:6b:65:c9:a5:8c:0b:ab:69:
         13:35:c4:65:c3:46:54:9e:93:dd:88:82:85:a3:0f:a5:ff:f1:
         d3:b9:91:26:8c:cf:0e:29:fc:23:f1:ee:44:04:64:c9:3d:5e:
         ee:c5:f2:f3:9d:15:62:26:1a:56:48:6e:2d:81:72:67:50:20:
         8d:a1:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:22 2026 by rpki-client