Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          Sk0sD2/ozkVa9LtLkOU0qCK9cNzllmGnrNaRSfKVQd4=
Subject key identifier:   F3:5C:E2:04:DA:D5:6A:10:D5:3F:53:38:6A:E8:F5:F2:52:89:E8:AE
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       01A12B44E8CECA72CE08CA280EBAC7BB1738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          153D
Signing time:             Sun 11 Oct 2026 14:01:38 +0000
Manifest this update:     Sun 11 Oct 2026 14:01:38 +0000
Manifest next update:     Mon 12 Oct 2026 14:01:38 +0000
Files and hashes:         1: 05qgDyHYet-7WBfs25erDDbDn9A.roa (hash: pmCrbCvll+aDpF6qWt8CdpEBEEpH6OZaRLkVhZYDT/E=)
                          2: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: 90rjz9EflLhBk40OeYblC6kAIDc0UiXWqNYNQcOYwNY=)
                          3: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=)
                          4: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=)
                          5: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=)
                          6: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:e8:ce:ca:72:ce:08:ca:28:0e:ba:c7:bb:17:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Oct 11 14:01:38 2026 GMT
            Not After : Oct 12 14:01:38 2026 GMT
        Subject: CN=f35ce204dad56a10d53f53386ae8f5f25289e8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:40:cd:c2:bf:94:a3:53:17:0f:27:b4:f0:28:
                    b0:c0:fc:df:58:21:45:b7:fe:1c:2f:c0:47:f6:24:
                    30:fe:eb:e2:74:55:3f:f6:91:c0:42:69:05:2f:33:
                    31:c8:d7:65:be:99:8c:21:ba:5e:50:b4:f2:17:e1:
                    4a:9e:60:f6:2f:33:9b:60:96:90:60:3f:5e:6c:b9:
                    f5:47:e5:36:a6:2d:b9:2e:83:b4:22:6d:b7:0c:bd:
                    da:55:f4:2b:33:88:ef:14:93:b2:ff:11:4c:fc:a7:
                    f6:c3:d7:6a:8c:b4:cf:2e:55:74:dd:8b:53:c1:50:
                    0c:61:0e:c7:50:d9:82:fe:1c:1c:34:5e:b5:c9:22:
                    eb:43:af:59:0d:22:17:9d:3d:20:57:9c:23:19:1e:
                    b4:38:e9:96:60:28:3b:6b:c4:8f:d6:bf:78:13:56:
                    cf:28:c4:0d:27:7d:16:26:06:95:2b:61:19:ad:6c:
                    a8:c0:fd:5b:c6:4b:c0:be:1e:9b:3a:00:31:6b:df:
                    30:8a:b1:d0:95:16:d1:ba:7e:75:aa:78:b0:3b:1d:
                    ea:ac:39:d8:10:27:0a:4e:85:36:03:8f:ea:5c:59:
                    d0:a0:26:ed:50:96:de:ab:2b:b3:7d:db:1f:7b:4b:
                    42:bd:f1:42:a5:08:cd:95:3b:c2:9b:c6:e8:44:0d:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:E2:04:DA:D5:6A:10:D5:3F:53:38:6A:E8:F5:F2:52:89:E8:AE
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:a3:ae:f1:4f:bf:4b:8b:89:e0:28:69:90:61:19:8a:5f:
         1d:3b:3f:c4:8c:a3:cb:42:1e:48:cc:d3:37:6e:5d:4e:ee:c8:
         b8:20:a8:eb:31:2c:89:bd:b6:65:61:e1:61:cf:c5:21:93:f4:
         92:e7:00:57:de:15:c0:c2:78:85:3c:a7:ca:c6:f4:4b:6c:09:
         31:9b:98:5f:6a:8f:a6:6d:46:83:c6:07:a0:d9:17:f5:b4:91:
         65:a2:47:40:01:b1:29:6e:81:a8:c0:0d:6e:ad:e3:61:1a:8a:
         32:0e:53:a6:a6:f8:17:94:ad:f3:50:99:22:00:4a:85:93:03:
         e1:bf:f0:92:7d:32:7d:8b:6e:b8:74:ba:2f:72:0c:f4:7a:e1:
         45:de:d3:6a:f6:2d:27:19:18:56:0d:b8:8f:1e:d5:e7:3d:64:
         3e:2d:f5:16:c7:06:bd:2e:fb:de:3d:71:30:e4:cb:ae:72:e9:
         82:66:e0:81:11:16:f7:d8:c8:43:28:aa:bf:0b:ae:0d:fd:34:
         5f:32:c7:4d:df:79:af:e9:47:18:e9:e5:00:9d:10:25:31:d1:
         81:33:72:2c:8f:41:1a:c3:3f:23:68:3e:c3:02:8f:77:7a:3f:
         fb:ba:85:0e:01:8e:84:7b:e7:ad:cc:c0:61:93:88:f5:9d:bc:
         e9:9f:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:01:43 2026 by rpki-client