Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File:                     3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier:          8ZI97JyQnAtiPYTE5EGCa1itPQE/Y9tEl2iuoeogy18=
Subject key identifier:   13:97:37:6F:1E:07:69:E9:79:3A:33:A8:0D:9D:E3:6B:01:CF:A1:BE
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer:       /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial:       01A13C6E9BBEE0984C061EB25A02E25E3E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number:          1748
Signing time:             Wed 14 Oct 2026 22:00:44 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:44 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:44 +0000
Files and hashes:         1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: ZyrZyE5RRWbSQlXx5kOAH1gEKSCbE9YR/yFSrrVt0mU=)
                          2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:9b:be:e0:98:4c:06:1e:b2:5a:02:e2:5e:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
        Validity
            Not Before: Oct 14 22:00:44 2026 GMT
            Not After : Oct 15 22:00:44 2026 GMT
        Subject: CN=1397376f1e0769e9793a33a80d9de36b01cfa1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:c6:44:28:63:77:47:60:c4:06:dc:82:bb:
                    ba:3b:93:ca:a3:db:93:38:e1:bd:b0:91:fa:8d:32:
                    16:4f:57:2f:32:34:b2:c2:1b:c9:ea:17:78:69:98:
                    06:c4:15:22:7e:8c:ad:a1:a2:94:fa:04:44:59:78:
                    60:57:09:c0:76:60:f0:ae:71:2d:3c:bf:1c:8b:a2:
                    79:1b:79:31:25:3c:b4:62:d1:8f:ec:4c:4d:c2:9f:
                    fc:2c:37:43:6d:5e:c6:4a:6f:fd:08:51:79:77:70:
                    6f:b2:76:26:56:b3:75:72:cb:7b:5b:cb:0f:88:d3:
                    cb:34:9d:29:33:00:e4:85:df:43:fb:7d:69:1d:c6:
                    d7:ee:89:e3:4e:42:44:4d:ae:39:07:0f:9a:95:23:
                    3e:57:fc:c5:5f:61:6c:a7:e8:74:87:06:e8:b8:81:
                    5b:85:50:c9:b0:ee:f1:60:4d:d6:0c:00:24:bf:38:
                    77:ce:80:0f:96:66:d8:e4:8a:d5:64:de:db:21:17:
                    54:c6:7e:f2:62:8d:a1:52:e7:aa:30:a9:d9:4c:5b:
                    8c:63:01:6a:65:71:a6:55:8b:81:fa:21:45:ba:e8:
                    e8:7e:ce:8a:99:4c:b7:55:fb:ce:bf:49:35:9d:e1:
                    85:3b:23:1e:de:2c:23:24:2a:54:f3:d1:ef:d9:20:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:37:6F:1E:07:69:E9:79:3A:33:A8:0D:9D:E3:6B:01:CF:A1:BE
            X509v3 Authority Key Identifier:
                keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:36:c5:01:97:05:5a:77:66:4c:2b:c5:20:6f:a0:f2:3b:22:
         59:e7:2c:f6:e7:3c:88:91:dc:af:17:f0:8f:55:79:39:3f:62:
         0f:21:6d:fc:ff:d8:61:aa:77:96:e7:d9:43:95:f8:de:28:ad:
         d9:5e:b4:04:44:d0:92:75:9b:fe:03:9a:aa:e1:34:9d:0d:8b:
         fa:cd:14:0b:e3:28:35:27:54:77:37:81:d6:04:57:f5:ed:84:
         09:e7:4b:29:e6:f2:64:b6:b8:c8:12:5e:f4:c5:1c:93:59:b1:
         36:16:e7:5b:71:ed:11:56:f4:fe:0d:f4:80:ad:01:7d:b1:10:
         4b:22:17:b4:e2:6d:13:ed:c4:3c:06:1b:85:b6:66:89:ad:9a:
         ba:16:a6:c2:2f:a6:1f:87:9a:93:6e:07:65:36:77:ca:88:1b:
         e2:6e:23:6b:ae:8b:77:0c:b7:98:40:ef:af:72:9c:0e:69:3b:
         f0:dd:e9:37:e4:dd:e5:6a:ae:d5:68:b2:6d:27:40:e6:88:ab:
         d0:d3:0a:91:39:d0:08:1d:b7:8f:ec:4e:10:b0:53:b2:3d:d0:
         5f:8b:5b:9b:3c:bb:aa:32:af:23:b3:c2:ef:16:35:ba:b4:3d:
         53:12:c8:4b:b1:9c:7a:13:64:1d:bc:df:78:5a:ed:96:38:c0:
         45:e0:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:45 2026 by rpki-client