Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File:                     3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier:          ivMJTqtmxEYA8Fje7NT+mk2Ga97obdGOoVjpi3LeiQA=
Subject key identifier:   7E:94:60:B2:AA:F1:1B:6D:33:EC:93:2A:94:46:26:B8:5F:30:D7:AC
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer:       /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial:       019CC6E2AC780F0B9D522E8D378535481B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number:          1861
Signing time:             Sat 07 Mar 2026 06:01:09 +0000
Manifest this update:     Sat 07 Mar 2026 06:01:09 +0000
Manifest next update:     Sun 08 Mar 2026 06:01:09 +0000
Files and hashes:         1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
                          2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: 1tmcrNcGGziYD8WpaSZEyedreetLdj4orzb6GJrhC9s=)
                          3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
                          4: AFp3F2X8yQTaBQfkM_zsF9UYmww.roa (hash: 7p1zPt6PNmGU8W+3TijuQxRqjYyJqKF96JpQUyZBeZY=)
                          5: EHQpUpEMo4S4SvN6ygFHQVkQJ6A.roa (hash: aL98OrOlu07CFPxf6rwXnJMO4vbO/beSHKJmE+F/5nQ=)
                          6: l6dcV9zJ9n_Ctd5EzzonA7X-jFo.roa (hash: mwxDuvlYfTCoynYTFAQOpS/BivdbtxW1voj1voq8fsg=)
                          7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:e2:ac:78:0f:0b:9d:52:2e:8d:37:85:35:48:1b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
        Validity
            Not Before: Mar  7 06:01:09 2026 GMT
            Not After : Mar  8 06:01:09 2026 GMT
        Subject: CN=7e9460b2aaf11b6d33ec932a944626b85f30d7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:f1:d6:cf:a7:71:2d:5f:2e:6d:be:91:09:
                    ac:31:56:b1:da:83:17:03:73:2e:3e:87:b7:64:c5:
                    45:c2:49:f4:1e:e7:a3:92:29:24:8d:37:da:94:59:
                    34:f8:d3:5a:ee:93:07:0f:90:a9:cd:27:b2:f3:9e:
                    57:05:14:d0:2a:81:b7:7a:f1:7e:65:19:95:52:ed:
                    1d:0e:7e:c1:7e:47:e3:fa:41:2a:b6:cb:4a:ed:b9:
                    6c:10:23:f7:2f:c9:7d:5a:cd:43:cc:7c:8a:56:26:
                    a4:f4:d4:3c:89:d8:38:65:b5:4b:7e:74:4f:bc:6e:
                    97:f8:c9:2a:9f:37:86:88:ad:d6:cb:b6:d7:b0:e3:
                    30:f2:9d:c6:f1:f0:e4:17:43:3f:34:b8:32:1d:2a:
                    f2:5d:0c:02:53:c7:39:4a:34:f6:ec:e3:bb:92:d8:
                    0e:e0:4b:57:a9:19:a2:c6:42:ca:27:e3:31:7b:c9:
                    27:78:16:2d:9d:d0:98:97:c4:77:a2:05:de:5b:73:
                    3a:c1:fd:db:05:2c:8c:75:39:39:44:ba:39:a2:f8:
                    df:40:1d:6c:b3:f3:01:13:74:e1:2d:00:3d:9c:99:
                    12:f6:01:89:6a:7d:75:27:5f:8c:17:aa:f4:38:f1:
                    f8:04:d1:96:a8:4f:9a:c2:9a:f1:07:a2:c1:17:af:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:94:60:B2:AA:F1:1B:6D:33:EC:93:2A:94:46:26:B8:5F:30:D7:AC
            X509v3 Authority Key Identifier:
                keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:66:d1:a0:f4:ec:5f:a0:e5:89:bf:77:28:34:b2:a4:f7:
         aa:aa:88:24:7e:0b:8e:ed:e1:52:5c:09:14:71:dc:58:bc:c2:
         4a:82:35:fa:a4:ff:06:26:23:6b:89:b5:ac:a8:8c:7a:ac:87:
         e2:19:b6:7c:18:7a:06:92:61:23:18:d1:ea:04:e4:82:8f:c0:
         66:a9:0d:da:91:11:1b:e7:b3:b1:5a:5a:75:a3:fe:f6:1f:0a:
         c4:14:f7:3f:db:91:31:b1:c2:00:4a:e7:25:30:3e:60:d4:66:
         97:c1:eb:2e:6e:aa:b9:ae:fe:15:91:dd:6f:e7:27:b1:b5:84:
         3c:cd:fd:53:54:52:bb:43:ff:6a:e1:7d:ae:b3:ba:59:fb:d8:
         6f:0b:a4:17:99:4d:bc:73:ba:53:38:18:6c:0a:f7:e1:07:3b:
         25:8c:6f:fc:66:de:3b:ce:5c:89:4b:c1:fb:45:5d:7b:cf:fb:
         99:c8:14:a9:4e:5d:cd:77:1a:cd:fa:88:05:f0:f8:2e:df:f0:
         d5:40:b5:e7:8d:e9:8d:26:74:03:f0:43:48:49:2f:60:a2:3f:
         8e:f1:b0:f6:c3:d7:7f:cd:60:75:42:45:64:72:a9:ae:4f:10:
         8a:51:50:49:e1:30:a3:0c:41:e5:a0:70:1f:f6:22:aa:28:70:
         3e:8e:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:14:52 2026 by rpki-client