Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File:                     3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier:          eiE+efWzQHGqGaFnEdSYIrwmS1YQXQSrPdxeCjowi8A=
Subject key identifier:   7F:62:35:02:29:42:BD:18:B1:95:E0:11:7A:AC:95:2B:FD:82:71:37
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer:       /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial:       01A17B4DB2EFCE59C90DC074C22170A6689B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number:          0D36
Signing time:             Tue 27 Oct 2026 03:00:51 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:51 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:51 +0000
Files and hashes:         1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: iPZK31Hc0/seMENvZV+FgS/J/HrXWHmRThuzA7SqU30=)
                          2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:b2:ef:ce:59:c9:0d:c0:74:c2:21:70:a6:68:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
        Validity
            Not Before: Oct 27 03:00:51 2026 GMT
            Not After : Oct 28 03:00:51 2026 GMT
        Subject: CN=7f6235022942bd18b195e0117aac952bfd827137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:88:b3:5b:51:e9:1a:f3:00:f5:16:b4:23:
                    c9:44:84:cd:41:69:cc:c4:47:2b:cb:9e:bc:b3:9e:
                    ea:93:37:d7:ec:4e:43:3e:51:95:49:5d:0c:4e:7f:
                    11:a0:90:e7:75:84:f5:5e:04:09:58:d3:52:71:5e:
                    f1:55:41:ec:8d:3a:42:8b:f0:97:2c:0b:a7:54:34:
                    e2:d0:d3:d9:ab:59:67:02:32:59:2e:81:65:a3:ab:
                    2f:7a:cc:ce:0a:40:b5:9e:4c:84:e0:dc:65:c5:07:
                    91:15:0e:fb:98:76:e7:6e:85:86:40:d2:2c:62:63:
                    5c:4b:42:83:83:9b:31:d9:8d:e9:6e:f5:f5:07:cb:
                    af:fa:1a:25:fa:7a:dd:ef:38:91:c5:6d:4f:94:eb:
                    02:a1:ec:e4:ae:c3:41:b2:0c:5d:96:28:1f:be:38:
                    67:f3:b8:13:19:6d:d3:ac:b7:14:66:66:27:b3:a4:
                    b5:58:01:f0:88:3a:e8:99:45:52:ef:24:76:1e:7e:
                    66:52:ed:79:f0:d6:33:a4:b8:64:58:4f:14:b2:6b:
                    72:4d:b8:d6:eb:5c:79:0e:26:ce:b0:a3:bb:26:79:
                    17:ae:43:8a:f4:65:02:2f:d9:30:9f:62:18:ff:c4:
                    99:12:67:73:41:4f:3d:e6:98:cd:aa:78:dd:2c:ba:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:35:02:29:42:BD:18:B1:95:E0:11:7A:AC:95:2B:FD:82:71:37
            X509v3 Authority Key Identifier:
                keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:b0:ff:7e:79:4e:bc:1d:99:9b:83:9e:bd:ee:ce:37:16:
         df:94:8b:09:e2:fc:5c:a5:d8:2e:a2:a6:17:a7:a5:09:b4:a2:
         77:77:49:6f:2f:ac:de:66:eb:6a:d0:80:e0:a5:ac:d3:7f:7b:
         aa:aa:c2:49:6b:49:5c:74:84:77:71:75:a6:20:69:9b:26:63:
         e4:3e:56:4d:48:9b:15:3e:6f:fb:31:8a:fa:a5:56:2b:90:04:
         de:c3:40:60:67:1a:10:cc:f6:c0:c9:61:4b:33:6f:72:8b:1a:
         e0:75:8f:63:b9:24:b2:3d:49:b0:66:31:f9:2b:cd:b9:87:59:
         7a:11:7f:cb:7c:7d:82:35:57:7b:72:25:b3:c0:9a:75:81:2b:
         84:16:76:52:42:37:20:fa:bf:8a:34:7a:72:f6:23:3b:99:b4:
         cb:15:4d:0c:04:c3:7b:a7:1d:65:6b:91:3e:08:82:1f:d3:a4:
         f4:2b:37:48:bf:ae:ab:06:ad:d3:9b:54:17:5f:71:ce:2f:8f:
         f0:a2:8d:ba:a1:94:e3:54:cd:3d:3b:3a:5e:58:61:b6:f8:c5:
         68:ad:6b:4d:60:38:40:2b:81:dc:37:50:ee:ba:b5:19:24:01:
         46:96:fa:6e:27:14:ef:50:5b:a2:84:80:04:05:39:d1:2d:65:
         b6:63:ed:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:37:51 2026 by rpki-client