Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File:                     3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier:          GE8BBvgsIbDkamZ9RpijJcgL8c5yj3v1xJGCxw01ZMQ=
Subject key identifier:   D7:14:7A:BC:78:B1:6B:A3:27:CE:94:64:04:6E:EC:17:19:81:4B:63
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer:       /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial:       01A06EA78FCEEB657EA775F4430A1EB1B9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number:          0326
Signing time:             Fri 04 Sep 2026 23:01:10 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:10 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:10 +0000
Files and hashes:         1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: bEd/8sW7kaorcfXM6u7ksEGA0uPi5QbsFz2U59ZAmHA=)
                          2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:8f:ce:eb:65:7e:a7:75:f4:43:0a:1e:b1:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
        Validity
            Not Before: Sep  4 23:01:10 2026 GMT
            Not After : Sep  5 23:01:10 2026 GMT
        Subject: CN=d7147abc78b16ba327ce9464046eec1719814b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:4c:40:c3:c9:d3:4e:5a:57:68:40:cf:38:
                    3a:f6:cd:bb:6d:ca:78:2c:40:75:a1:8a:62:4a:9b:
                    ee:20:0c:13:ed:9a:88:20:d1:1b:d9:4a:d7:cd:92:
                    2c:44:b3:96:8d:b7:14:76:f5:8d:34:0d:e4:2c:df:
                    3d:22:11:13:fd:5c:96:70:75:a6:35:59:1d:c6:a8:
                    e5:16:c2:eb:b4:2f:5a:bd:05:06:0d:a3:aa:f4:b7:
                    d4:72:c5:d4:02:3c:17:36:f5:76:cf:64:43:67:23:
                    8d:4c:93:f1:96:4d:9c:97:e6:13:4d:21:b2:15:2a:
                    83:70:70:c6:ed:3f:e6:95:1e:de:62:39:a3:be:54:
                    34:b8:39:ec:3a:7d:18:e3:89:ee:41:c8:dd:e3:65:
                    9c:b9:52:25:2f:cc:4b:58:82:76:cf:35:2a:84:7d:
                    b3:4e:57:cb:5d:1b:ca:21:20:71:c2:38:a4:0d:75:
                    4c:bc:5f:94:f4:20:62:47:c0:c8:b0:92:6a:3a:c7:
                    69:8d:3c:d2:e0:5a:1b:54:b4:5f:d4:25:24:22:4c:
                    2e:56:9b:f8:b6:20:b2:35:19:a6:c0:32:6f:35:55:
                    80:0d:17:d2:a1:ef:2e:ce:10:d9:15:fb:30:f8:4e:
                    70:ac:37:9f:76:f1:61:29:9b:f4:38:3b:26:6e:ec:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:7A:BC:78:B1:6B:A3:27:CE:94:64:04:6E:EC:17:19:81:4B:63
            X509v3 Authority Key Identifier:
                keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:14:62:0d:d2:92:e9:dd:93:75:1e:87:d9:09:a5:e0:85:
         62:d6:b7:48:db:3c:62:96:20:bb:53:3a:63:97:8b:26:71:19:
         53:69:da:60:07:e1:6d:95:6e:ce:6b:c5:ed:6d:fe:80:7a:cf:
         a3:98:5e:ad:6a:81:cf:5b:93:c1:75:66:4e:c6:82:43:a9:4a:
         fe:d0:9d:6a:ff:a8:2a:5e:d1:f3:8c:be:cc:34:b4:00:ae:09:
         03:d5:32:c5:49:6e:6d:29:da:05:9f:55:5c:84:68:36:86:e6:
         b3:55:2c:bb:96:3f:0e:2d:e4:e8:a9:e3:36:60:61:69:4d:87:
         1b:4f:88:e0:fa:5b:61:75:73:4b:83:eb:e5:38:94:10:c6:28:
         7d:de:05:59:61:2c:fe:25:9d:8c:75:ed:97:4e:2d:17:98:9c:
         b6:77:a2:ae:41:c8:b9:0d:a7:3e:de:48:50:4a:32:72:14:61:
         b9:81:33:01:06:d5:9a:07:e7:5b:b2:50:ab:c3:74:7c:50:24:
         f8:b1:af:92:ee:bd:0e:43:e6:96:fc:92:2a:3b:c6:08:b4:32:
         3c:07:d6:3e:60:ca:db:72:6f:d6:d3:d5:4c:ac:2d:70:49:7b:
         48:13:55:c8:95:66:1a:0f:de:10:da:e7:f2:74:d8:73:78:15:
         76:86:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:37 2026 by rpki-client