Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          uqfFYIsbK31n2OkeBYj8r6W5gCen860qG0hPywK7k/k=
Subject key identifier:   07:69:24:04:BF:70:80:F7:31:90:CF:11:A7:E2:09:D4:3A:E7:5E:B3
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       01A13F39ACDA70B13CEE20C9621271F158A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          11D9
Signing time:             Thu 15 Oct 2026 11:01:46 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:46 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:46 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: a65oQfh9bmK5Va8vCRxbZpg6l91n6z7NiFG/HMpzOYY=)
                          2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:ac:da:70:b1:3c:ee:20:c9:62:12:71:f1:58:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Oct 15 11:01:46 2026 GMT
            Not After : Oct 16 11:01:46 2026 GMT
        Subject: CN=07692404bf7080f73190cf11a7e209d43ae75eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:d6:d4:8a:59:66:da:5b:7f:1c:01:eb:bf:
                    8e:8b:ea:78:1d:42:04:9c:ea:88:82:f7:df:3c:b9:
                    f3:94:fb:27:3a:49:63:eb:32:0a:ba:89:b2:7c:b7:
                    40:22:91:ce:db:77:b9:da:ca:3a:c6:73:d0:31:e5:
                    54:12:28:eb:f1:24:26:3f:4b:c0:19:81:31:1f:75:
                    b4:fe:f6:b0:b7:b6:37:24:03:f2:3f:24:80:2b:05:
                    9f:96:e1:1f:90:1e:32:aa:d5:3e:42:8d:8b:96:fc:
                    65:fc:9f:17:41:8d:34:12:01:52:f0:df:4b:73:59:
                    d9:93:38:f3:b0:6a:8f:9c:d9:ff:2d:71:52:ea:b0:
                    45:87:cf:c8:5a:56:67:38:68:80:36:15:e0:57:b2:
                    d1:25:72:5c:a8:5c:e2:c1:e9:44:13:50:29:84:8b:
                    4d:dc:c2:87:31:5f:41:fb:e4:d6:70:cd:30:9b:60:
                    e0:2b:1b:51:27:a3:7b:79:cf:20:e7:fa:09:b8:54:
                    2b:3c:f5:d6:6b:dc:7c:ef:6c:55:13:f0:8c:0e:85:
                    63:f9:8f:df:ee:0b:fc:26:23:18:99:f5:22:cd:0e:
                    c1:0c:6f:c3:e8:87:2b:af:5b:34:3b:42:70:79:59:
                    57:84:25:62:55:de:82:39:7e:4a:0a:1c:c1:78:45:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:24:04:BF:70:80:F7:31:90:CF:11:A7:E2:09:D4:3A:E7:5E:B3
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:f7:7e:0b:a9:e2:4e:d8:37:e2:6c:1a:b1:7d:ad:4e:05:
         5e:f6:82:12:47:5c:ad:12:2a:96:19:07:31:f6:9b:b5:11:3c:
         11:a0:2b:00:02:5a:71:0e:da:b5:ae:76:be:61:c9:b4:e3:4f:
         34:05:21:cb:9b:18:e5:15:e6:f5:38:c1:00:bf:1d:3a:53:58:
         ec:35:74:25:09:6c:7d:07:4a:dd:26:ba:89:24:d2:c8:90:c1:
         18:17:35:a2:16:a5:5b:96:80:13:b8:84:15:8c:a2:52:0b:c1:
         47:12:9f:a6:70:86:58:ad:bb:fc:5c:51:ac:76:9a:7b:27:6b:
         6d:4b:55:8f:61:82:23:de:e5:62:fd:d3:2d:93:f1:a0:2d:cc:
         ba:aa:f8:6e:53:77:48:00:54:7e:e6:d9:f8:0f:1d:d2:a8:cb:
         04:ad:72:28:0f:02:15:d3:62:d6:9a:79:a1:24:c0:2b:07:25:
         d7:4c:13:ee:80:e6:0b:29:7d:49:52:f2:5f:5e:97:60:ca:e0:
         f9:1f:b2:6a:27:68:66:e1:29:da:61:9f:18:5d:b9:ee:11:0e:
         08:ea:51:6a:33:31:8d:e8:b2:71:c4:3e:cb:30:13:69:e7:2c:
         89:27:83:c9:b3:2b:37:2d:fc:23:0b:7a:d3:c1:3c:52:f8:0f:
         0d:d9:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:43 2026 by rpki-client