Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          B/KIJ3MbhwS4vP6FW1eL5aEQrDnlzhe5LOlyF/DoWFc=
Subject key identifier:   6E:86:C0:60:A2:BE:26:0F:98:E0:7A:DF:33:85:AB:FB:8C:DF:7B:E4
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01A001DCA419600B8D2A2C53BADCA57AE76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          0982
Signing time:             Fri 14 Aug 2026 20:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:32 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: yFbjPUsysRgbUXgfwLk7k+VA1WfI0x1xWdnO4WiGOFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:a4:19:60:0b:8d:2a:2c:53:ba:dc:a5:7a:e7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Aug 14 20:00:32 2026 GMT
            Not After : Aug 15 20:00:32 2026 GMT
        Subject: CN=6e86c060a2be260f98e07adf3385abfb8cdf7be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:0e:8b:12:bd:4f:f5:e5:7f:89:34:ca:59:
                    3a:db:52:39:24:2d:9b:26:38:f2:62:ae:42:c0:3c:
                    19:f4:21:20:7c:24:0e:69:dd:65:1b:69:86:2f:b1:
                    f8:b4:f7:a9:f7:18:fc:a6:82:e4:b3:83:ee:8c:65:
                    ec:a6:d2:88:30:50:7b:6e:3c:83:8d:8d:28:68:52:
                    0c:4f:6c:41:10:e1:63:b9:75:ec:96:4a:d6:b8:72:
                    a0:ff:cc:4b:c5:63:cb:cc:9b:7f:bc:f1:4c:41:44:
                    3f:90:4d:91:85:08:c0:91:33:4a:04:9c:d5:c6:18:
                    f3:6e:61:7c:d4:ec:d6:25:21:67:12:2e:4d:cf:06:
                    00:54:28:4a:67:1d:5a:8d:2c:f1:f8:28:30:64:ea:
                    82:47:16:9e:9e:a1:cc:fb:46:b6:ea:84:ae:4b:76:
                    b2:56:fe:5b:45:72:bb:d7:00:00:31:2a:87:eb:d9:
                    58:a0:db:67:de:a2:c6:1a:1d:e8:51:eb:d7:74:b5:
                    c6:b9:74:14:7a:f0:52:85:34:e9:a9:56:96:76:7c:
                    dc:5a:91:57:c1:3b:59:34:a4:9a:f2:03:5c:9d:48:
                    92:ef:4c:e3:60:bd:de:da:fb:b9:7b:f0:36:9f:70:
                    26:00:57:23:f5:5e:50:89:cd:2a:ff:af:9a:c6:c9:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:C0:60:A2:BE:26:0F:98:E0:7A:DF:33:85:AB:FB:8C:DF:7B:E4
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:50:3d:cb:ba:b7:38:b1:97:e7:ec:49:76:01:c1:1b:f5:e2:
         e5:81:2b:31:f4:5c:1b:b1:03:ee:e9:96:90:57:7e:a8:ee:32:
         77:bd:28:ba:92:d2:fa:12:a2:ca:a3:30:a0:0e:f2:74:61:72:
         ff:2b:10:2e:69:a0:ca:2f:34:24:4d:65:40:dd:da:7c:14:af:
         3a:2d:a0:c0:c6:a4:39:f7:da:22:63:49:1b:ee:b9:06:05:a6:
         2d:86:45:bd:8e:ef:ed:e6:ba:a2:a0:67:35:ed:e3:7c:d3:6d:
         59:9d:98:08:f1:0e:02:d3:bd:e1:ab:12:40:c3:ba:7a:8f:10:
         8b:37:40:28:5d:c1:5d:c6:dd:58:3d:2e:2a:64:ee:5b:e0:ad:
         b7:52:6c:2e:46:3f:b7:cc:8c:e2:bc:c0:f3:22:92:24:6a:b9:
         69:2f:61:21:28:dc:a2:d8:b0:35:c5:c3:d6:24:3f:69:fd:95:
         6d:6f:8e:7b:c6:2f:27:02:26:24:b2:dd:4e:0f:e2:20:1a:57:
         f2:dc:85:f5:7f:94:0d:cb:ab:2d:26:4e:5b:59:c0:bd:b8:1a:
         1d:be:97:fd:4c:0d:11:19:5d:3f:59:37:0f:8e:65:12:64:06:
         24:a2:93:21:1d:c6:fe:17:4f:12:a2:41:b5:fc:57:f2:ec:2e:
         e5:d3:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:03 2026 by rpki-client