Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File:                     S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier:          VkdYrNwnYnl6TqVINL9LhE3HmqYrs8XJ1qysz1mQyXw=
Subject key identifier:   4C:4B:7C:85:03:50:AF:5A:2D:63:ED:AF:80:B3:50:BA:CB:D1:07:E5
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer:       /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial:       01A184F5DC75B7CC2480926D35BCB307FD7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number:          03D3
Signing time:             Thu 29 Oct 2026 00:01:07 +0000
Manifest this update:     Thu 29 Oct 2026 00:01:07 +0000
Manifest next update:     Fri 30 Oct 2026 00:01:07 +0000
Files and hashes:         1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
                          2: DXccqbGebS1oWRZWwtuGkEM6mrE.roa (hash: sAlKBAN/NVbEzYwknbZfL2yJYktB8VaTsi+xqD0lVdY=)
                          3: HRsaNSH7K7gQIpvBegWGreESM_c.roa (hash: l8HiNYAa3uanY7zDmX7yurzSLByL+f17mBRuyOPffhs=)
                          4: It-qSuqg1nORN9qz8qJhvVHh0Tc.roa (hash: KxdlqZXgyK58HjjchXGa22KcxK8WWRG2Djtkh0Q+II4=)
                          5: OTNnq40RHs6-RO1vnyF5GX8jSSo.roa (hash: GEnAb11gm/0k4gAv45gZBRalx642vYu648871Hhzo1c=)
                          6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: mzfUC1NzXPJOk+Y2VzG9KgdqlHz87CtqDEOBtdoJn6Y=)
                          7: qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa (hash: P+9IofTZBAc1XWPoAjdQhkamibGq6Uq0JX0SkWEsNv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:f5:dc:75:b7:cc:24:80:92:6d:35:bc:b3:07:fd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
        Validity
            Not Before: Oct 29 00:01:07 2026 GMT
            Not After : Oct 30 00:01:07 2026 GMT
        Subject: CN=4c4b7c850350af5a2d63edaf80b350bacbd107e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:47:45:06:2c:dd:3d:1a:05:b0:f8:ea:99:
                    44:fb:de:49:dd:c5:7c:49:8a:87:0c:80:ca:25:e6:
                    a7:17:2f:d3:80:e6:5a:a5:4b:16:9a:ef:3d:c0:e5:
                    25:97:ab:1f:9e:0a:a3:c0:c8:92:e6:c1:e4:0c:d9:
                    94:64:5d:16:4e:20:7a:b5:fa:7a:63:bb:bf:d1:40:
                    14:55:91:cf:c3:19:9b:a7:c8:23:a0:a4:2f:09:d4:
                    ed:91:32:9d:78:b5:aa:28:50:95:23:2b:23:4b:b1:
                    a1:5f:e6:70:08:c5:97:69:65:0d:c4:06:cc:d5:32:
                    e5:01:90:3d:9d:d2:9b:06:e3:7e:85:16:36:e0:75:
                    1e:c9:5a:67:ce:74:21:9a:4f:2d:05:52:02:85:99:
                    9a:8b:e4:5b:9c:31:d4:33:c7:7f:15:a8:ca:bf:72:
                    1b:65:37:db:01:cb:15:76:70:c7:ae:d4:de:c6:42:
                    02:1a:53:37:d2:b3:31:a3:2e:ca:49:8f:6d:bb:ab:
                    44:35:e2:e0:1f:7d:b1:cb:74:25:c9:b0:1e:1d:12:
                    e4:7d:90:4d:a7:5b:71:34:0c:ed:84:39:e0:9d:90:
                    8b:56:a6:4b:37:c3:df:b3:f1:63:3a:6e:e1:95:05:
                    ee:8d:7d:ee:b5:b1:09:b4:6c:5a:ef:38:87:b8:20:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:7C:85:03:50:AF:5A:2D:63:ED:AF:80:B3:50:BA:CB:D1:07:E5
            X509v3 Authority Key Identifier:
                keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:74:87:a8:8e:5e:d5:b0:fd:65:58:16:1a:75:58:1f:b5:53:
         b8:c9:29:0d:0a:ea:1a:34:4f:9b:03:72:30:95:e7:2b:5c:d2:
         ba:10:c4:e8:96:0f:7b:b6:49:1c:bd:36:68:33:dc:c2:78:41:
         e0:d9:c1:37:59:01:3b:fa:5f:d2:e9:22:ce:0c:fc:9d:60:61:
         ed:af:90:ee:bd:ce:c3:47:e4:15:1c:1f:34:65:32:a3:29:4b:
         97:e0:53:9e:26:cb:45:47:75:b9:41:ad:3a:18:71:02:bf:e9:
         48:e1:23:b2:b5:33:29:14:4f:14:ce:ff:a7:fe:ca:e7:e9:3d:
         8f:87:8d:bc:e2:57:69:d1:a9:ea:2a:a7:04:9f:c2:7f:2a:d9:
         c4:f3:a2:55:1b:43:e0:99:d5:e2:40:d4:18:5a:ef:54:85:3a:
         cc:df:a2:ac:6e:08:80:c7:97:ff:a7:2c:e5:39:09:a9:b2:7e:
         f8:7a:99:e4:64:a8:ae:cd:3c:09:32:c9:e4:d1:5e:b1:d5:62:
         ad:19:52:45:05:77:ea:1d:35:51:ba:fd:a1:76:fb:84:5e:59:
         c9:0b:8a:88:a7:ad:d1:33:e9:e4:9d:a6:09:12:63:80:a2:7a:
         59:48:bb:3e:52:20:f0:30:c8:26:cf:65:94:1f:b0:ee:98:0b:
         88:56:78:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGE9dx1t8wkgJJtNbyzB/18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi
ZWJmZjgwHhcNMjYxMDI5MDAwMTA3WhcNMjYxMDMwMDAwMTA3WjAzMTEwLwYDVQQD
Eyg0YzRiN2M4NTAzNTBhZjVhMmQ2M2VkYWY4MGIzNTBiYWNiZDEwN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1BHRQYs3T0aBbD46plE+95J3cV8
SYqHDIDKJeanFy/TgOZapUsWmu89wOUll6sfngqjwMiS5sHkDNmUZF0WTiB6tfp6
Y7u/0UAUVZHPwxmbp8gjoKQvCdTtkTKdeLWqKFCVIysjS7GhX+ZwCMWXaWUNxAbM
1TLlAZA9ndKbBuN+hRY24HUeyVpnznQhmk8tBVIChZmai+RbnDHUM8d/FajKv3Ib
ZTfbAcsVdnDHrtTexkICGlM30rMxoy7KSY9tu6tENeLgH32xy3QlybAeHRLkfZBN
p1txNAzthDngnZCLVqZLN8Pfs/FjOm7hlQXujX3utbEJtGxa7ziHuCDPkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExLfIUDUK9aLWPtr4CzULrL0QflMB8GA1UdIwQY
MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt
NjNjZWQ4NzYyMDQyLzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy
LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnSHqI5e
1bD9ZVgWGnVYH7VTuMkpDQrqGjRPmwNyMJXnK1zSuhDE6JYPe7ZJHL02aDPcwnhB
4NnBN1kBO/pf0ukizgz8nWBh7a+Q7r3Ow0fkFRwfNGUyoylLl+BTnibLRUd1uUGt
OhhxAr/pSOEjsrUzKRRPFM7/p/7K5+k9j4eNvOJXadGp6iqnBJ/CfyrZxPOiVRtD
4JnV4kDUGFrvVIU6zN+irG4IgMeX/6cs5TkJqbJ++HqZ5GSors08CTLJ5NFesdVi
rRlSRQV36h01Ubr9oXb7hF5ZyQuKiKet0TPp5J2mCRJjgKJ6WUi7PlIg8DDIJs9l
lB+w7pgLiFZ4LQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:52:07 2026 by rpki-client