Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File:                     3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier:          VTLs/SNTh4fz0JvdG9mMswjiR4ccDEpw0+xLbwaKxy0=
Subject key identifier:   3E:0D:B3:59:8C:20:69:2E:F2:9E:62:53:88:BD:00:08:6D:FC:84:CF
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer:       /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial:       01A150D1946F417B123DAD56BC15600D9986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number:          0BBD
Signing time:             Sun 18 Oct 2026 21:01:14 +0000
Manifest this update:     Sun 18 Oct 2026 21:01:14 +0000
Manifest next update:     Mon 19 Oct 2026 21:01:14 +0000
Files and hashes:         1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: u3lPbXx87W51HuYUOPBJRLp1OONy74l3Y3CwbV5ZXbk=)
                          2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 19:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:d1:94:6f:41:7b:12:3d:ad:56:bc:15:60:0d:99:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
        Validity
            Not Before: Oct 18 21:01:14 2026 GMT
            Not After : Oct 19 21:01:14 2026 GMT
        Subject: CN=3e0db3598c20692ef29e625388bd00086dfc84cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:67:c2:17:97:4d:1b:41:f4:f8:b7:89:aa:
                    60:c9:ce:51:e8:e6:ba:5a:18:7f:1e:d7:fe:ef:5a:
                    04:ca:be:d3:c3:cc:11:e7:7f:ca:f4:a8:31:09:72:
                    97:bd:dd:4c:51:c0:da:f0:fa:93:7a:a3:e7:fc:f6:
                    81:30:38:39:c6:ff:4d:26:22:c6:a9:b0:4d:94:c9:
                    02:b2:b3:fb:e6:30:3a:79:da:f6:99:98:7e:37:ef:
                    d2:80:ae:c4:90:09:06:0a:04:e2:9a:db:6d:c7:46:
                    2b:64:0a:d5:ca:4b:97:4d:73:a9:4c:ed:f3:3d:9f:
                    65:bc:1c:94:69:f4:e2:ee:cd:70:e4:84:39:3f:fc:
                    34:03:15:0d:9f:fc:c3:f4:3c:c3:62:99:fe:ff:57:
                    ba:53:2a:41:fe:4c:13:e8:12:c3:46:c2:8a:55:c2:
                    fe:12:66:6a:cf:f0:d8:30:d3:23:aa:e5:2b:9a:ad:
                    82:58:18:bd:50:bd:1e:37:a5:0e:56:90:aa:4d:52:
                    2b:c9:3e:c8:14:95:01:80:4e:df:35:9f:5d:6f:51:
                    52:bd:2a:bb:05:f4:9f:34:03:64:84:e3:97:43:26:
                    13:50:9f:1e:4f:5e:00:f6:dd:04:15:d2:dd:75:15:
                    1e:4a:07:15:54:c9:47:58:af:e8:9b:bc:5c:48:d8:
                    a6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0D:B3:59:8C:20:69:2E:F2:9E:62:53:88:BD:00:08:6D:FC:84:CF
            X509v3 Authority Key Identifier:
                keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fb:cd:c6:10:87:62:91:8b:aa:45:91:35:45:7b:88:5c:35:
         64:ca:f5:72:e8:3c:a8:f8:a2:3e:db:f8:48:63:07:e2:44:93:
         27:ca:f5:32:f0:48:6f:5e:42:89:02:3f:e1:e6:7e:7a:4e:cc:
         85:da:10:c3:d9:63:3e:c7:a7:9e:ab:37:4f:ef:fd:56:25:96:
         87:d3:42:83:06:00:84:be:b5:84:1c:3b:24:38:52:41:ab:57:
         38:e8:77:ee:f2:fc:44:7f:30:42:2b:05:99:10:ee:92:dc:7d:
         7e:0e:06:55:7b:c4:8a:3c:36:da:11:7a:4a:78:85:3f:69:01:
         95:37:c3:a8:62:68:de:e4:d5:d7:b8:17:13:2a:7e:54:21:d3:
         ff:54:75:d6:a5:10:4f:55:ee:1e:2c:ef:91:30:29:a8:91:3e:
         93:e2:32:f8:4a:6c:ba:e9:77:9e:58:2f:f0:6a:61:8f:4b:c8:
         a4:df:9d:f2:9e:08:02:49:2d:82:d8:42:7f:ce:79:b5:6c:53:
         1b:b2:ed:ab:44:0d:39:49:75:b7:7c:48:18:6a:1c:46:4b:31:
         08:cb:43:92:06:95:c0:42:4a:48:b1:c9:18:28:b4:be:2c:c2:
         77:b0:da:ac:23:07:b5:ad:8b:31:3b:22:6b:b2:cc:f3:5f:d0:
         83:5f:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:23:54 2026 by rpki-client