Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          96nODlB1wXU2uVQBPt5GNRj5TDv5W1EtkqpJCVyXDC0=
Subject key identifier:   B3:65:E6:68:5E:F9:6D:09:44:0A:90:FF:70:99:E3:F6:33:45:2A:E4
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       01A00281EEAF57263F92CE4265BD1DDE8142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          14A3
Signing time:             Fri 14 Aug 2026 23:01:04 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:04 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:04 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 7OGrYLJonj19T+7G1zpvG3L3C04wnGaGuoKQxWY9sTI=)
                          2: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=)
                          3: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=)
                          4: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=)
                          5: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:ee:af:57:26:3f:92:ce:42:65:bd:1d:de:81:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Aug 14 23:01:04 2026 GMT
            Not After : Aug 15 23:01:04 2026 GMT
        Subject: CN=b365e6685ef96d09440a90ff7099e3f633452ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:c2:fd:14:bb:1f:77:45:c7:89:97:c2:d5:
                    2a:44:72:a4:0f:75:94:bd:72:5a:a4:9d:2e:b9:51:
                    2c:b7:88:df:cb:83:bf:ca:83:0f:27:b8:95:e9:44:
                    ba:16:8e:08:8f:ee:e9:b4:67:ff:99:b0:6d:2b:fc:
                    2f:a8:71:17:8a:fc:fc:fe:3c:85:09:ea:46:61:77:
                    4f:3b:10:c1:a3:d6:31:fe:6d:d2:f6:8b:f7:76:c0:
                    c5:b8:0d:a6:7e:66:cf:bb:99:4f:60:9e:47:e9:b3:
                    ac:97:44:06:23:f1:99:f4:6d:e4:3d:4e:44:35:0e:
                    9e:f8:b9:dd:81:da:8a:02:3d:ab:4f:df:96:c1:0d:
                    d9:52:41:87:79:44:14:d5:f1:c8:61:7a:d0:21:e2:
                    dc:f9:84:38:5c:58:b9:6d:b5:a6:8a:b4:2a:18:b6:
                    cd:0c:13:c0:9c:72:2a:17:a9:31:a6:56:3b:e2:96:
                    36:b4:e2:d6:63:6a:e2:68:11:04:ed:7a:a6:21:86:
                    76:18:4b:7b:b2:c3:9b:32:4a:2e:f2:d9:3e:44:35:
                    c9:d0:10:e7:02:71:78:6c:75:78:61:b8:3f:b1:19:
                    11:48:fe:6e:95:61:73:71:7f:fa:2b:97:43:a1:0a:
                    fb:7e:d2:55:27:3e:df:11:08:00:23:55:bc:d4:72:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:65:E6:68:5E:F9:6D:09:44:0A:90:FF:70:99:E3:F6:33:45:2A:E4
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:d0:6a:38:fd:8e:b9:c7:a6:32:3f:52:6b:f5:ae:0a:11:
         49:98:8c:78:f6:96:75:3b:44:a2:1d:84:86:e3:0e:c5:3c:b8:
         28:33:3e:9e:41:59:27:e2:6e:fc:6c:5c:73:bc:40:c6:7b:30:
         c2:c7:a4:a6:a6:fe:55:eb:78:7f:2c:d8:6b:15:1e:b4:6a:10:
         82:65:69:d8:54:36:a1:f4:d5:09:7d:d3:36:08:47:0d:2e:f3:
         89:4a:db:bb:0a:51:93:21:ce:71:db:5f:68:d1:60:a5:8f:a0:
         53:4a:88:fa:a2:ef:c0:da:c0:d4:6a:61:07:4b:cc:90:94:45:
         bd:c4:62:47:e5:da:66:81:34:71:8e:bc:40:f1:ca:a3:e9:70:
         11:e4:ea:c5:78:bb:a9:0e:e0:36:bd:6e:24:98:b1:76:e0:5a:
         5e:93:52:c0:97:fa:3e:f8:64:51:e4:a4:75:3f:29:3d:61:fd:
         c6:2d:78:53:6b:d8:e9:49:fc:44:95:d5:fe:6c:41:5f:16:dd:
         54:11:70:f1:6a:5c:77:75:e4:20:75:09:cb:71:1e:ff:54:9b:
         02:7c:27:7d:95:62:18:88:80:77:56:63:2e:f1:59:b8:50:94:
         4d:1a:84:d5:3f:ad:67:74:9e:49:ab:82:e3:cc:e6:7e:c2:cd:
         05:0c:8f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACge6vVyY/ks5CZb0d3oFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjYwODE0MjMwMTA0WhcNMjYwODE1MjMwMTA0WjAzMTEwLwYDVQQD
EyhiMzY1ZTY2ODVlZjk2ZDA5NDQwYTkwZmY3MDk5ZTNmNjMzNDUyYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b3C/RS7H3dFx4mXwtUqRHKkD3WU
vXJapJ0uuVEst4jfy4O/yoMPJ7iV6US6Fo4Ij+7ptGf/mbBtK/wvqHEXivz8/jyF
CepGYXdPOxDBo9Yx/m3S9ov3dsDFuA2mfmbPu5lPYJ5H6bOsl0QGI/GZ9G3kPU5E
NQ6e+LndgdqKAj2rT9+WwQ3ZUkGHeUQU1fHIYXrQIeLc+YQ4XFi5bbWmirQqGLbN
DBPAnHIqF6kxplY74pY2tOLWY2riaBEE7XqmIYZ2GEt7ssObMkou8tk+RDXJ0BDn
AnF4bHV4Ybg/sRkRSP5ulWFzcX/6K5dDoQr7ftJVJz7fEQgAI1W81HJY7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNl5mhe+W0JRAqQ/3CZ4/YzRSrkMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisPQajj9
jrnHpjI/Umv1rgoRSZiMePaWdTtEoh2EhuMOxTy4KDM+nkFZJ+Ju/Gxcc7xAxnsw
wsekpqb+Vet4fyzYaxUetGoQgmVp2FQ2ofTVCX3TNghHDS7ziUrbuwpRkyHOcdtf
aNFgpY+gU0qI+qLvwNrA1GphB0vMkJRFvcRiR+XaZoE0cY68QPHKo+lwEeTqxXi7
qQ7gNr1uJJixduBaXpNSwJf6PvhkUeSkdT8pPWH9xi14U2vY6Un8RJXV/mxBXxbd
VBFw8Wpcd3XkIHUJy3Ee/1SbAnwnfZViGIiAd1ZjLvFZuFCUTRqE1T+tZ3SeSauC
48zmfsLNBQyP6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:54 2026 by rpki-client