Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File:                     3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier:          JkOugEyV2w+etmCTkIkedQE0j23kWGNcJJ85V4JAi/E=
Subject key identifier:   A4:B1:3B:A5:1C:C7:CC:B6:3E:DC:10:5B:10:53:A7:A6:57:2A:AE:6D
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer:       /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial:       01A13936BE32B52922EDF2A585E2B310E833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number:          0991
Signing time:             Wed 14 Oct 2026 07:00:51 +0000
Manifest this update:     Wed 14 Oct 2026 07:00:51 +0000
Manifest next update:     Thu 15 Oct 2026 07:00:51 +0000
Files and hashes:         1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: 7zmrId1r1JGK2gcV6O4u3HKySHDmf9GwcP/53k90ILU=)
                          2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:36:be:32:b5:29:22:ed:f2:a5:85:e2:b3:10:e8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
        Validity
            Not Before: Oct 14 07:00:51 2026 GMT
            Not After : Oct 15 07:00:51 2026 GMT
        Subject: CN=a4b13ba51cc7ccb63edc105b1053a7a6572aae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:16:dc:46:b9:94:39:1d:9f:c5:95:18:84:
                    b9:86:b1:74:0c:0f:75:e3:b0:9a:f9:e6:8e:9b:fe:
                    79:68:df:9b:28:8f:60:09:ca:39:3a:7d:d8:2e:27:
                    9b:9f:67:67:e5:4b:ca:33:61:4b:e0:22:17:d2:65:
                    ad:d7:9c:3d:d0:c6:ae:89:5a:88:cc:fe:ca:24:ec:
                    b9:d2:9e:50:c3:c9:4e:f7:ff:c5:53:48:73:4a:8d:
                    00:60:f3:de:58:47:e4:99:ae:22:a6:ce:81:eb:79:
                    f6:8b:8d:bd:be:60:5a:6e:ed:0f:be:ce:90:6e:4a:
                    02:6f:bd:54:03:7f:dd:0c:90:01:d4:0d:13:de:08:
                    2b:ba:58:d2:6d:21:8a:15:ef:2d:be:d4:6b:95:a9:
                    54:5c:fb:4a:b7:ac:59:8c:bd:7a:aa:c4:14:36:ce:
                    ae:11:e2:06:c1:c7:02:c8:c6:b3:c9:6c:9f:ca:4d:
                    42:02:70:f1:03:9f:a2:dc:08:63:43:17:3c:e1:01:
                    3b:d9:ec:97:27:ba:57:a8:ac:c1:b9:92:00:88:62:
                    fd:9c:9f:a0:37:3d:f9:a1:f9:d9:ec:2f:73:9b:fe:
                    d4:6a:94:07:0c:a5:10:eb:c8:c4:ad:84:5f:5d:e6:
                    bb:5a:27:b9:76:5c:23:8a:eb:50:31:47:26:95:bd:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B1:3B:A5:1C:C7:CC:B6:3E:DC:10:5B:10:53:A7:A6:57:2A:AE:6D
            X509v3 Authority Key Identifier:
                keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:c4:91:f1:e6:9f:e1:03:c4:f9:94:20:37:e7:de:34:88:
         c4:dc:0d:6c:0c:3d:94:e5:9e:e4:5b:02:7b:ed:47:9f:d0:2f:
         0c:66:2c:41:0c:e9:7b:5f:5b:9f:8b:07:52:71:fe:22:e0:c9:
         0c:47:e2:9a:05:71:b6:1b:cf:eb:31:72:2e:ca:26:47:b5:6b:
         bc:92:15:2a:78:7b:47:30:8b:c1:c3:24:22:3e:fa:2e:3b:d4:
         a4:56:a6:c7:d0:45:07:50:6c:1c:eb:fb:1a:46:37:fe:3b:56:
         e2:f2:9d:10:cf:67:73:1d:9d:7b:38:28:1d:fa:5e:96:2f:22:
         c5:5a:77:1c:9d:ba:e1:af:e1:7b:f4:f3:82:05:5d:4e:9a:8e:
         5d:2e:d7:d4:95:b8:67:71:99:5f:62:20:8c:ce:16:7a:72:06:
         13:e3:9e:38:e1:37:76:7b:25:f2:4b:e1:4f:c1:90:5c:58:c4:
         d3:a9:4b:87:8b:02:bc:f9:7a:f0:81:01:68:b6:92:e1:86:e2:
         52:e3:8c:59:d6:d2:25:c3:1c:e6:4c:24:ab:15:0f:c9:02:53:
         12:e9:a8:52:c3:8f:0e:1d:69:04:e8:26:8f:ea:d3:18:b2:41:
         4c:da:a2:4e:14:c1:e4:05:2d:cb:37:27:6d:b7:d6:01:a2:e9:
         aa:0d:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:33:55 2026 by rpki-client