Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          4pD2b9pTiYern6IMUFyU5vtFdqlpkoT0Jb3ixMgWhnM=
Subject key identifier:   0C:83:01:14:40:E0:87:89:81:16:2D:99:10:B7:EB:8A:5B:A3:C9:66
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       019CE5C8DE9682B0B66DE57B6F5ECFA8A91E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          07FF
Signing time:             Fri 13 Mar 2026 06:01:12 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:12 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:12 +0000
Files and hashes:         1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
                          2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: bBZKw5Kusvyy4dWoa9M17l+MD/3Vo5rZBZGQE+MyR+w=)
                          3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:de:96:82:b0:b6:6d:e5:7b:6f:5e:cf:a8:a9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Mar 13 06:01:12 2026 GMT
            Not After : Mar 14 06:01:12 2026 GMT
        Subject: CN=0c83011440e0878981162d9910b7eb8a5ba3c966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:41:19:c7:8f:d6:b3:2c:79:b8:cc:f5:73:
                    e7:99:b8:4c:39:23:80:6a:e2:7d:9f:13:1a:f5:42:
                    57:9a:cd:c3:f2:b0:d4:fc:3a:5e:ca:5b:40:0e:07:
                    0d:cb:e5:e8:aa:25:ec:1c:bd:40:96:77:38:d8:f0:
                    05:bf:df:c3:d8:27:0a:fd:e8:4c:f7:ec:b8:df:8f:
                    3f:fc:ee:3f:18:da:4c:14:a4:60:b5:4f:6d:34:30:
                    d5:f0:9a:ff:af:2a:50:a6:2f:bf:9b:ea:15:bd:62:
                    cf:a9:9e:6e:53:26:f2:79:b1:5f:fa:15:45:ef:88:
                    0a:fd:44:df:04:fc:c9:9b:7b:df:a2:61:60:10:8f:
                    bc:cf:db:a4:3f:c8:7f:d4:18:0d:b6:12:f4:e2:81:
                    9a:28:b8:5e:40:83:66:4a:0b:2f:8e:8e:f9:c8:64:
                    24:34:70:aa:23:95:ef:1c:28:1e:cc:60:04:1a:05:
                    7d:96:5c:79:45:39:41:63:dd:c0:37:87:2e:90:fb:
                    f6:ec:b8:6c:ef:94:c4:8e:b3:40:9f:d6:a5:f4:1d:
                    3a:cb:45:03:d8:36:45:86:a2:a4:d3:00:27:57:c4:
                    89:78:ef:b2:0c:69:cf:76:c8:bc:8f:e3:42:5a:15:
                    1b:fb:25:db:05:38:15:7e:f0:df:6b:94:53:bd:ff:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:83:01:14:40:E0:87:89:81:16:2D:99:10:B7:EB:8A:5B:A3:C9:66
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:86:70:7e:f1:de:36:2d:b7:3a:de:2c:46:2b:aa:42:83:83:
         bd:22:74:27:44:5f:fd:be:0e:e4:44:b0:81:d3:98:32:ed:5f:
         63:41:77:f3:9b:94:a2:54:f8:cd:3d:80:41:fe:59:86:f5:2f:
         8e:94:15:a0:f5:c2:11:71:3c:d1:32:a4:f5:bc:47:e0:5a:95:
         b1:92:68:a5:96:ff:0f:dd:0a:a3:af:3d:f8:09:44:f9:52:41:
         6f:32:b8:af:b7:06:f4:57:e0:fc:d1:90:72:35:a3:84:37:ec:
         5c:40:ab:78:da:45:8c:78:08:e1:9c:79:dd:24:41:23:49:ea:
         bb:84:4f:9a:ee:b4:80:de:64:b0:48:ee:a0:c7:16:24:2a:75:
         6d:56:bd:3e:f2:2f:35:ff:b8:14:b0:a0:9c:3a:29:bd:aa:4d:
         84:71:1e:d1:a0:65:b2:3c:d6:94:de:cb:d8:1a:27:bb:c0:98:
         65:1e:7c:53:c5:8b:d2:5b:e9:a7:72:ae:b4:ae:10:a8:74:72:
         35:58:3f:5e:19:d1:ce:b1:bc:be:de:9b:1a:3d:8a:ce:d1:68:
         ba:e3:d7:b4:e6:fa:93:05:84:a7:d1:e6:30:9a:3c:41:a8:44:
         b4:92:4a:7d:ff:37:d0:10:6e:d2:d0:fa:2c:af:57:cb:83:74:
         9e:1f:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:59 2026 by rpki-client