Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File:                     3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier:          7MvW2eW4XLTJ137nJ/u0uV3P2I5MNGF2aXdk+fUaeiw=
Subject key identifier:   EA:C3:51:EC:90:7B:FE:97:3B:9C:1C:91:3B:05:A2:55:D6:81:0F:0F
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer:       /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial:       01A13E94BC2935F9E27D4578F5A2A8B0E5B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 08:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:37 +0000
Files and hashes:         1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: zdcHykvEgsjCZHuZYGJcNEE4rID09LCrzO1entDZmxg=)
                          2: UQBamIu_tf9wPCOvESltx6uxaSM.roa (hash: 0H4wa03fUeDSOPCaqZfvn2P/bbZkgwu98158FsqzTX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:bc:29:35:f9:e2:7d:45:78:f5:a2:a8:b0:e5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
        Validity
            Not Before: Oct 15 08:01:37 2026 GMT
            Not After : Oct 16 08:01:37 2026 GMT
        Subject: CN=eac351ec907bfe973b9c1c913b05a255d6810f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:6f:11:1d:95:cb:12:4d:a9:3e:b0:ce:32:
                    42:2b:14:26:03:40:67:e3:d8:c2:84:ce:6e:b6:bf:
                    75:64:c6:16:12:13:9d:f8:5b:24:37:eb:5b:11:01:
                    72:cb:db:82:eb:9e:35:5b:43:09:0b:49:60:74:fb:
                    87:b1:0a:c7:3d:fc:e4:b4:bf:7d:95:2a:37:ac:e3:
                    8e:85:cf:7c:df:f6:c5:9f:06:92:de:8c:2c:40:de:
                    eb:cb:5b:ab:12:f6:72:fe:26:74:ac:da:ff:f2:11:
                    e4:e8:fd:d4:49:4b:00:51:c4:d8:4d:86:17:50:f0:
                    3e:75:ef:cd:3a:9a:4b:53:ac:17:d6:bf:bf:0e:e6:
                    ac:28:af:e9:db:be:ce:ec:c8:98:bc:0e:da:f1:de:
                    ad:8c:85:93:cb:84:35:e1:fd:98:f3:ee:05:0b:ca:
                    64:00:4e:66:20:f3:4d:93:17:84:23:ea:06:2a:16:
                    8d:31:03:9f:3b:1c:a8:9c:c9:9b:8a:c7:1d:98:ae:
                    a7:8d:ac:06:dd:8d:32:19:fb:9f:b5:dd:76:e3:91:
                    71:e5:47:be:db:6a:e3:8d:53:42:e5:c3:d9:41:09:
                    3b:79:fb:24:cb:f1:4d:c4:b2:2d:f8:74:87:90:63:
                    de:80:8e:b0:0a:13:17:25:68:37:54:1d:1b:e2:44:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:51:EC:90:7B:FE:97:3B:9C:1C:91:3B:05:A2:55:D6:81:0F:0F
            X509v3 Authority Key Identifier:
                keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:7f:8b:68:b1:c8:2d:36:c6:dd:57:68:e2:a3:19:37:0f:
         bd:f7:9e:74:45:41:64:ba:82:17:16:0a:24:6c:3f:cc:6f:16:
         64:fb:09:64:08:1c:9e:e3:fa:ac:d0:08:33:af:74:e2:19:67:
         3b:e7:48:2b:74:fb:36:cf:47:85:3d:24:b1:8e:06:dc:3e:02:
         db:1e:b5:e2:32:30:16:af:5b:61:44:94:69:a3:c6:62:86:f3:
         6a:f4:7f:7a:0e:09:6c:6b:62:a8:87:63:ad:7b:4b:20:ab:66:
         e7:e5:b1:2c:41:0f:1a:ba:fa:40:b9:9b:da:45:ee:05:a4:6e:
         64:77:8d:d8:94:4e:aa:f7:46:30:f3:da:90:e5:a6:d8:c3:74:
         a4:31:b8:da:78:ef:ad:f0:18:ac:1e:0b:a6:8b:bc:73:c5:d1:
         6a:6f:d4:ec:15:e4:87:04:b9:26:1d:fc:9f:c8:f5:0c:c2:4c:
         fa:f2:11:a5:21:8c:9b:40:a8:b5:52:a6:70:ef:d0:5b:4c:db:
         38:f8:c8:12:d8:a6:64:d7:ce:ce:45:92:4f:df:9b:a1:77:01:
         16:d1:73:e7:ef:fd:e7:6e:b9:84:27:ef:08:13:7a:f8:6f:f8:
         9e:95:23:f3:a3:89:1a:33:ff:74:46:0e:cc:ca:ec:ab:62:79:
         6a:b1:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:55:45 2026 by rpki-client