Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File:                     3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier:          MgZOafHjJViFXNk+29ta4rYpfzcoTe8HEM3xSTjePsc=
Subject key identifier:   12:90:61:DB:A5:0A:C8:19:9A:B6:32:15:46:39:08:97:ED:A8:36:88
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer:       /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial:       01A02A341BC51E073F5C96C61DA8A16D529E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number:          1A1B
Signing time:             Sat 22 Aug 2026 16:00:53 +0000
Manifest this update:     Sat 22 Aug 2026 16:00:53 +0000
Manifest next update:     Sun 23 Aug 2026 16:00:53 +0000
Files and hashes:         1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: eFGWTy3oAR0hyUaXAmtNZdHrYga3cnp3Wsp8YM2uLrU=)
                          2: M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa (hash: IaTjBLUpeVPvAQsCn4UJQ4zSezVEpOlxAezx7/pK0RA=)
                          3: Sq-ujidV3DDsRqOSLpPxqfz8Glg.roa (hash: 6PSBv//QP4qZRXvWnrG7tint+pXX8yUVg9OL2IFvirQ=)
                          4: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (hash: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:34:1b:c5:1e:07:3f:5c:96:c6:1d:a8:a1:6d:52:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
        Validity
            Not Before: Aug 22 16:00:53 2026 GMT
            Not After : Aug 23 16:00:53 2026 GMT
        Subject: CN=129061dba50ac8199ab6321546390897eda83688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:02:b0:83:03:c8:d4:b7:dc:7d:a0:1b:22:
                    16:ef:64:25:f2:2e:20:67:65:89:13:68:10:21:3f:
                    9d:4c:b5:6a:8c:63:60:6b:63:5b:17:d0:ba:17:58:
                    bb:19:59:66:c1:21:d9:52:99:a5:5a:ac:60:52:ba:
                    f4:c4:24:66:ec:e0:33:ae:ea:2d:4b:df:85:3b:1b:
                    41:15:1c:4d:c9:0a:69:a4:a0:01:7e:2e:d6:de:93:
                    0b:a3:68:cd:56:1e:8b:ef:79:1b:1f:98:87:84:34:
                    46:93:b8:41:2e:f0:38:e8:a1:e9:46:8d:9d:96:0f:
                    d6:47:7a:08:06:a2:5f:4a:40:6f:94:1d:27:6d:e8:
                    8f:ed:4b:4a:e4:d5:d4:9c:4d:da:31:ed:c9:07:6f:
                    b6:ef:eb:22:4e:00:a4:e8:d6:b6:c8:9c:9c:07:2d:
                    2e:2f:48:92:98:f5:1d:ef:b5:5a:3e:e9:26:c9:3c:
                    b3:c5:65:55:87:81:6a:e9:cf:6e:4f:98:18:2e:89:
                    bd:76:bb:30:0b:eb:00:b1:9e:40:d2:58:fd:d4:80:
                    ca:32:dd:c7:cd:7b:b4:8b:47:b3:5e:91:15:33:3d:
                    1b:3a:73:40:77:49:e1:4a:df:0f:21:5b:7b:03:3c:
                    5a:9d:ff:97:a0:c3:2e:09:da:28:04:fe:31:6a:f6:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:61:DB:A5:0A:C8:19:9A:B6:32:15:46:39:08:97:ED:A8:36:88
            X509v3 Authority Key Identifier:
                keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:da:10:77:f5:95:90:fe:8a:d5:79:d1:2a:75:80:9f:1a:
         3b:ad:70:5d:4c:66:c1:2c:82:66:92:7d:e4:3f:b5:78:74:24:
         7a:ec:fa:af:6f:85:13:67:2c:46:79:68:1f:3a:c7:40:af:6f:
         b6:02:68:3a:bc:6b:60:de:02:3a:40:df:5f:94:75:ee:30:9c:
         ae:d5:f2:09:ba:f8:76:84:0c:17:50:d6:b6:5d:e2:1e:78:53:
         28:c8:62:c5:65:bf:9c:58:0c:9f:33:38:70:7f:27:72:f1:3f:
         b0:26:3e:8b:b7:b7:54:0d:8f:c7:97:81:62:d4:02:a4:24:d7:
         d3:e4:e1:6a:aa:dd:fe:a6:e7:47:20:c3:6e:f6:a0:49:57:8a:
         81:c4:89:13:cc:02:8b:87:6c:c0:c0:ad:16:a8:9a:8d:c6:e4:
         2d:c4:c5:1b:68:ae:e9:2a:c1:69:7d:a8:44:d0:e9:0f:70:5c:
         18:d9:25:94:41:db:e2:40:5b:8c:f9:36:18:f9:b1:b5:a1:f2:
         08:d2:1a:e5:23:8b:2a:ac:87:31:36:fa:af:02:01:f7:af:8a:
         10:c2:7c:44:31:80:df:e5:7a:d4:c0:f7:82:44:db:87:d1:be:
         53:1e:e0:77:21:3e:bb:39:69:2e:49:73:e9:97:65:7d:90:5a:
         04:90:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:31:09 2026 by rpki-client