Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          ntbeHnRrVuRtMZscupCrleaPqJ6cX3hEGaGHAcxvHFQ=
Subject key identifier:   24:E0:20:E0:5F:9F:3F:C3:61:B5:DB:8B:C6:16:9C:08:76:0D:9C:23
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       01A08C7A931CC9D295DC79D85703499D933C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          171D
Signing time:             Thu 10 Sep 2026 18:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:38 +0000
Files and hashes:         1: 204umdoIBOqtcTbJI3jfclBQCyw.roa (hash: IwWlQnWIC7tAHQ+uxk+vueYs6Cuvcq1jNuaEjgSin/4=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: uzyhA8JhN2rwxYsYR407N81usi0SqgQJjZKx7n7zf6g=)
                          3: 8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa (hash: L+fAM2wTev7jcaaHyppAq65XRuAVybyECH1GJHGUgB8=)
                          4: Y09xLkmt7VHTVYtC64eFlrK6j58.roa (hash: iA768afUcGVOaqrvOSx3MnWnS2M+3J4maoqeEMVN/wE=)
                          5: p0VUng2o1_gaZHh--wu0wK0iIL4.roa (hash: oO1bw6THJUf9h7ZSPQOfZA0dBR3CVemJCl3j27Vlz30=)
                          6: v0q74nFVUklRHXEbX3DfFnuxDhk.roa (hash: G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:93:1c:c9:d2:95:dc:79:d8:57:03:49:9d:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Sep 10 18:00:38 2026 GMT
            Not After : Sep 11 18:00:38 2026 GMT
        Subject: CN=24e020e05f9f3fc361b5db8bc6169c08760d9c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:b1:22:29:3b:c5:36:8d:0e:e2:86:af:d0:
                    d3:90:11:13:bd:e2:31:e3:1c:28:64:62:81:73:d2:
                    0e:72:b3:dc:6b:b0:7c:a2:ce:35:f2:47:b1:01:dd:
                    5b:4a:c6:18:f9:d9:5d:5c:82:bd:63:e0:16:cc:0f:
                    ce:aa:d4:f1:b1:f3:b5:8d:f4:10:ad:82:ce:97:08:
                    71:0b:74:07:be:95:88:10:14:68:d8:c8:8d:b3:40:
                    5c:7d:f0:31:d8:b0:9e:39:21:91:a7:45:fc:b4:03:
                    98:ce:55:6c:2d:69:d4:17:30:20:19:29:84:08:5c:
                    4e:e9:42:b1:42:c8:67:e7:5e:33:4c:e5:8a:ce:5e:
                    3b:d6:2f:60:3a:5f:6e:3a:f5:11:f3:c8:46:65:1d:
                    10:62:ad:15:2a:d2:87:4e:b1:7e:d1:e8:88:ff:db:
                    f4:7a:aa:6a:2f:3a:7f:4b:45:11:71:3f:14:af:63:
                    21:4c:5c:4a:cf:24:88:05:23:07:5f:a7:c0:70:ab:
                    36:15:72:a8:58:07:b8:70:cc:16:6f:fa:89:61:ae:
                    60:5d:10:13:5b:1b:ca:fd:06:4a:5e:7f:b6:43:ca:
                    17:83:9d:40:f6:4f:00:f4:8e:4d:26:b7:27:fe:75:
                    1a:66:ea:34:dd:f0:a2:14:18:eb:76:b7:5d:3b:1c:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:20:E0:5F:9F:3F:C3:61:B5:DB:8B:C6:16:9C:08:76:0D:9C:23
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:75:c7:de:b4:e2:9c:df:81:f7:5f:ec:03:c6:59:03:4e:09:
         e9:0a:59:c3:c5:e9:c5:02:6f:c8:b8:f0:d6:d1:6d:a8:ea:56:
         4a:4a:c6:b0:53:65:de:c8:09:4c:86:59:b6:21:ae:db:c0:6d:
         20:03:63:5f:31:cf:84:fb:f2:41:ef:55:d2:48:a6:de:74:fd:
         72:ab:67:f6:ba:da:6e:7f:75:1f:b6:93:67:6f:b7:62:d2:43:
         4e:22:80:c5:9c:72:fb:84:ce:a7:d4:52:3e:b1:1c:82:e7:11:
         42:7d:c0:7b:01:09:45:05:97:90:41:7b:83:8c:ad:cb:27:fd:
         99:9a:17:a5:7c:37:97:78:81:17:28:a5:24:e5:dd:d3:48:61:
         c8:85:35:47:1e:ac:17:40:d7:51:fd:d3:d1:c8:39:a8:42:29:
         e5:9c:6a:f9:55:b2:1e:5b:05:d5:93:6c:a7:99:4a:71:05:b5:
         2c:7a:df:6b:4e:dc:c2:30:9e:da:ad:c6:0f:c7:77:6d:28:d7:
         c3:10:54:31:50:65:0a:2f:1a:d6:37:24:9f:c4:b0:80:5e:2a:
         3b:c3:62:32:be:84:d5:d5:8b:6b:67:d6:d6:9f:06:3e:fb:8b:
         e1:82:bc:a4:66:46:c7:1c:ca:59:1f:f6:20:80:ba:33:cd:56:
         16:0a:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:46:24 2026 by rpki-client