Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File:                     3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier:          Ov4MO/YunZWMeaVDOhFdbzbP9Ie0tPKm+7Jj5as5848=
Subject key identifier:   40:24:51:AB:E5:92:BE:D0:F0:9F:D6:B1:3A:29:CC:A6:3A:88:17:29
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer:       /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial:       01A08AF9F848BC9F6C73AB33AA15932906D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number:          1A4F
Signing time:             Thu 10 Sep 2026 11:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:32 +0000
Files and hashes:         1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: Xf41h1jrqjXCPOXk66wTO7Id9PQwwaCVJ3DRTijxU1U=)
                          2: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (hash: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=)
                          3: 6qswnHV8JvW6cu6cSwBLoqp6-Ng.roa (hash: IUM2z/m3IjX5AfUXwWnD2PsPO+D6A7StpRGqMV8Cn/Q=)
                          4: c-q-1btZT4jua2JDzrYBPweRMfo.roa (hash: T3Vq03V1v96UVyz+QAoFvPmYD+d9eRiyCI2mm1ddpyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:f9:f8:48:bc:9f:6c:73:ab:33:aa:15:93:29:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
        Validity
            Not Before: Sep 10 11:00:32 2026 GMT
            Not After : Sep 11 11:00:32 2026 GMT
        Subject: CN=402451abe592bed0f09fd6b13a29cca63a881729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:a4:84:06:49:e6:87:9e:7b:9c:e3:3c:9a:
                    d3:f2:57:fb:ce:96:f1:6a:8b:23:07:2c:f9:00:2a:
                    e6:a9:1e:7f:dc:8a:17:08:21:a6:f1:05:f3:ba:36:
                    f2:60:b8:65:7a:ea:00:a2:22:37:a2:a5:f9:1d:1d:
                    9d:b6:00:6d:2c:7f:91:4d:1a:fc:66:37:c1:af:08:
                    84:3f:e4:f7:9e:b3:bc:da:5a:e1:6d:58:a4:07:b9:
                    df:dd:47:7f:ba:7a:cf:74:b1:39:a1:f0:c5:de:32:
                    ce:b3:26:eb:68:e7:4e:38:3b:24:74:c0:9c:07:31:
                    68:59:5d:3f:cf:3a:9a:30:86:31:87:cc:82:8a:aa:
                    c9:06:30:13:93:c1:6e:30:57:dc:c4:52:85:7b:43:
                    1c:3a:98:bf:53:ca:d1:f5:64:42:57:1b:e6:2a:fb:
                    74:1a:d4:ec:f2:f2:3c:10:6b:49:94:1f:e4:eb:b8:
                    2f:77:4e:13:09:0c:ce:64:23:56:24:aa:e1:7f:f3:
                    8f:95:c1:06:f1:a2:93:72:64:5c:ac:a9:7c:89:98:
                    f0:e1:5a:d8:d5:f1:d6:99:bf:4a:13:75:72:57:bb:
                    a2:11:26:4a:b5:c2:8a:48:b0:88:39:eb:e5:48:7a:
                    4a:02:28:e8:9e:bd:d9:53:da:ce:9d:a8:e6:23:7d:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:51:AB:E5:92:BE:D0:F0:9F:D6:B1:3A:29:CC:A6:3A:88:17:29
            X509v3 Authority Key Identifier:
                keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:0a:6e:39:1e:6f:cc:00:a2:c0:5e:a5:7b:fa:f3:2f:d1:
         12:19:48:89:ce:57:09:b5:8f:03:10:5d:d2:83:d0:9b:5d:1c:
         5f:1a:05:56:26:e3:9c:89:5e:f5:55:81:0b:72:c6:33:cb:c8:
         65:93:d1:76:d3:ca:ef:b9:14:69:10:09:76:0c:60:88:a8:84:
         85:fa:a8:1b:95:5d:a0:7b:c6:6e:d2:7e:31:74:b3:13:a8:cc:
         4e:3e:30:7a:dd:7a:6d:3e:e8:b3:ce:f9:e6:9a:c8:16:ae:f4:
         1e:c1:49:a8:b3:42:f5:6e:5a:77:bb:d1:5f:88:01:5a:9a:e3:
         4c:35:fe:a5:63:4c:dd:a5:d5:f5:8f:b4:c8:cc:77:6b:3e:d2:
         b2:4e:51:e9:ab:3c:d9:3a:d2:53:3b:65:19:13:b3:47:d4:4a:
         4e:e7:fc:5e:46:1d:22:d8:e0:99:fa:cd:87:4e:2f:bf:39:f5:
         32:af:dc:08:71:9e:43:d9:ea:5b:8b:13:1e:30:b2:df:09:11:
         69:29:96:59:53:7b:39:6c:38:66:04:d1:dd:b7:3e:49:a5:bc:
         0c:c1:5b:fd:13:91:22:cb:8a:d9:34:dc:ef:86:13:7a:1c:87:
         52:2e:c7:6d:9c:d8:72:f2:79:e3:68:5b:ce:8a:60:ac:86:0c:
         91:37:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:16 2026 by rpki-client