Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          wDNNlUKnx2B3ECE/UfiN/gg+yEq4w0vxnRa1A757Fds=
Subject key identifier:   1C:66:02:4C:A8:57:69:01:41:50:48:68:3C:BD:A9:E0:C6:25:ED:64
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       01A13E94B2A53754CEC899FCE4C1F41F1BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          1165
Signing time:             Thu 15 Oct 2026 08:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:34 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: mORU2vcgabBt3TnTVV2Q2tptpxkSnRA/ab5XQeyI7hs=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:b2:a5:37:54:ce:c8:99:fc:e4:c1:f4:1f:1b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Oct 15 08:01:34 2026 GMT
            Not After : Oct 16 08:01:34 2026 GMT
        Subject: CN=1c66024ca8576901415048683cbda9e0c625ed64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:d1:4b:dc:a9:eb:72:65:f5:ad:f9:83:13:
                    b3:18:c7:e7:9c:3b:8b:1e:1e:9c:ea:03:b7:8b:15:
                    17:08:af:16:ae:55:1b:05:44:6b:b1:38:3c:67:8e:
                    3d:26:2e:ba:dd:81:3c:b3:20:68:41:b8:ed:47:9e:
                    d2:77:a6:f5:48:d1:83:f4:a2:fc:3a:07:cf:a4:53:
                    68:9c:9b:12:4a:59:ad:be:c5:bf:79:10:d1:a1:33:
                    7a:1b:91:3a:9e:fb:2f:ef:2f:e3:12:21:3b:4c:02:
                    52:27:d7:c8:5f:66:15:39:d3:2a:3b:f5:b9:7c:40:
                    e6:0f:01:84:50:bd:5d:9e:dd:06:d1:fd:b4:3e:66:
                    8e:58:d9:be:df:24:a0:36:5d:10:71:4d:cd:65:56:
                    29:09:99:c2:72:9e:b8:8c:52:6e:02:26:5c:c3:07:
                    ca:9d:29:a8:31:13:a4:a8:80:3c:05:ee:f4:2a:f7:
                    98:b7:55:db:fb:36:c5:69:99:67:dd:d4:b7:08:0d:
                    c8:3c:82:b8:17:69:87:65:83:f4:d1:cf:1e:4a:f1:
                    cb:35:c1:d0:4a:fc:8f:81:ef:b1:0e:a8:e7:8a:50:
                    4b:4d:78:d7:83:39:56:19:34:b2:34:28:08:1b:50:
                    e3:3a:db:93:c9:f5:15:e4:73:99:af:51:0d:d1:8c:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:02:4C:A8:57:69:01:41:50:48:68:3C:BD:A9:E0:C6:25:ED:64
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:19:7e:ea:eb:6a:9d:04:5c:b6:48:42:13:e3:54:7e:1d:ca:
         28:5a:38:71:4a:93:01:f5:f3:49:11:98:b5:e9:f3:0f:a0:ba:
         98:bb:c3:10:15:42:82:a9:40:6a:91:da:bf:b9:56:ce:c0:7b:
         47:b7:af:d3:0c:f7:ce:f4:6c:11:10:1b:a6:14:b8:6e:ed:31:
         2b:89:de:ba:a0:b4:25:e9:1a:e2:50:6e:93:8d:60:b5:89:25:
         a7:c8:93:7b:ce:06:72:a1:e7:41:9b:68:26:da:01:be:62:01:
         30:31:c3:6e:7c:2c:4d:0c:ba:5b:46:8f:32:7c:67:0c:d1:45:
         a6:92:0a:fa:f2:a7:5c:4d:fc:1d:c1:f9:13:75:67:c7:15:a5:
         b7:de:f3:64:ab:ad:60:8b:09:33:16:25:81:6e:1f:c6:ac:af:
         2d:de:9d:9f:ce:41:ea:2e:f9:fe:b5:9e:16:96:d2:e2:a3:f4:
         88:e5:bf:cc:ce:a9:44:c4:6d:12:64:39:70:26:f5:a0:be:f6:
         3f:cd:a5:99:09:d8:3f:df:99:d7:c1:e6:20:3b:98:d6:f1:0a:
         00:9e:9a:0e:78:20:90:78:32:a5:1c:53:7f:1c:df:7a:9f:ea:
         97:9b:9c:d2:43:af:79:31:d5:a6:9b:32:b3:c4:85:d8:77:55:
         40:9f:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:12:31 2026 by rpki-client