Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
File:                     3s7amMFkxwXMRqi6t0UQFkpOVEM.mft (raw, json)
Hash identifier:          dxrQZe+oO9LPKUuGUJ3yJfIMsgKMoc5SUbzLyiT6Dsc=
Subject key identifier:   0F:1D:C8:7F:E2:51:37:3A:31:CA:1A:A9:5E:EC:14:94:D6:2C:80:7B
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Certificate issuer:       /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial:       01A0412A6EFB94D4646DC831F21B03F1B293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
Manifest number:          9B
Signing time:             Thu 27 Aug 2026 03:01:34 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:34 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:34 +0000
Files and hashes:         1: 3s7amMFkxwXMRqi6t0UQFkpOVEM.crl (hash: 55u2C3/guBULkWs6QvcqcQUQSwbR+oN0XIyuK1uN1ps=)
                          2: QSxz1MJOKVPcnOAb056M9bNuEpY.roa (hash: ACtE1+dO+kmAK+SFZkqW3ICcwAl9l/2TWZxLXdg3uWE=)
                          3: YOD6juWqLr8ovSKXGYZyl_bOXhU.roa (hash: /zUn9PBvmeNcg8L6ufut/ybOdlqaK/FgJWENlir8bts=)
                          4: ZWOTRDJQMD4-rtb-xFUMCAg7gDU.roa (hash: 6f38evNyVeY4e3APE9OwAblMTMZ3jvAThwdCqi0P2nU=)
                          5: nfeUx9_uQdTXEUedvn5FMkt6AIU.roa (hash: EU+TkvyM5nsvnk885XKH0d9je4qaR8Qx4ANcG5mboyM=)
                          6: pPf2iGyWiaY4dfpnvK3V2vJT6bk.roa (hash: qTzf/5Qr4fJ14UNUZwfxNKju8Q8irY6182qreKazzbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:6e:fb:94:d4:64:6d:c8:31:f2:1b:03:f1:b2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
        Validity
            Not Before: Aug 27 03:01:34 2026 GMT
            Not After : Aug 28 03:01:34 2026 GMT
        Subject: CN=0f1dc87fe251373a31ca1aa95eec1494d62c807b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:9e:db:95:f4:9a:10:a9:2b:a0:1b:42:cd:
                    e0:6e:8e:b0:d6:65:9b:a2:0c:15:3b:15:a5:11:45:
                    05:22:43:e7:3d:ee:14:7e:5a:ea:04:4f:45:ad:2d:
                    37:74:b8:0b:46:25:5c:fd:55:44:78:61:e2:2a:91:
                    98:67:c2:bf:63:a9:10:90:57:f8:04:4b:3a:e2:1c:
                    f4:8a:2f:9d:2b:4d:c0:fa:27:de:bd:32:21:33:2a:
                    af:51:0b:57:23:e6:8f:e3:05:6f:44:ce:e7:54:6e:
                    e0:2d:11:e6:8f:60:fc:1f:4d:72:35:66:9d:8a:18:
                    a4:41:c1:35:b4:d6:68:79:41:cb:d7:15:ab:57:89:
                    9e:6d:1a:a3:1e:ce:46:cd:f7:33:b9:35:b3:cc:a9:
                    3a:71:c9:27:58:9b:20:a1:06:25:ac:bc:86:8d:99:
                    25:e2:25:ee:59:61:c5:59:8e:ac:a7:0f:e9:99:5e:
                    34:83:02:1f:ad:ca:18:4c:21:e7:e3:a3:1a:44:86:
                    e4:c5:26:58:13:64:45:7d:74:0f:e1:8a:d8:06:26:
                    ad:fb:e8:61:8c:a5:5a:dd:48:bb:e6:28:61:88:0a:
                    3c:67:e3:65:9d:0e:8c:3e:d6:e8:b0:a0:f3:09:ec:
                    b9:46:14:94:36:0b:7a:dd:9e:7c:42:41:9f:44:ea:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:C8:7F:E2:51:37:3A:31:CA:1A:A9:5E:EC:14:94:D6:2C:80:7B
            X509v3 Authority Key Identifier:
                keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:58:ab:86:4c:9a:e9:8d:94:f3:00:5b:75:ee:db:ff:9e:f9:
         0d:8f:57:13:3a:23:14:31:59:22:2d:b3:1b:e5:9e:01:64:77:
         01:88:09:a0:63:13:3d:1e:30:0b:e3:7b:77:de:fd:80:23:9f:
         60:fe:88:81:8e:30:8d:cb:c2:3c:e8:93:89:5a:e9:aa:cd:60:
         87:70:4d:85:34:0a:ff:79:19:a1:65:9d:e1:71:dd:21:5c:bd:
         8a:a1:d8:95:3a:46:07:d4:ed:74:01:ab:2d:e0:ee:2c:cf:19:
         03:96:74:62:1d:a2:29:e0:cb:98:40:c6:71:69:54:67:9f:f9:
         ca:be:44:21:c2:4e:f8:a8:aa:df:90:6b:e3:a9:b5:8d:62:6b:
         53:e7:1d:dd:1c:e2:b2:d3:86:99:97:b5:64:13:bf:4b:e8:e1:
         3d:81:4f:2f:8d:d1:c5:e0:f3:1f:af:83:4a:1e:8b:16:1e:03:
         9e:7d:e7:50:e2:50:a9:c4:f2:bc:c0:0f:7e:d8:60:25:d2:9d:
         43:f1:7a:dd:4f:3a:ec:95:59:70:f9:ac:bf:14:f1:3b:17:7a:
         38:7d:27:05:cd:61:b6:09:9d:fc:d9:04:67:e1:ca:41:d1:c0:
         bb:18:31:4d:c1:cc:3f:b1:0f:6b:ea:c6:07:4a:2d:fd:18:bc:
         d4:90:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:05:46 2026 by rpki-client