Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File:                     3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier:          uCCGxra8VXJYh1bIAMHZ+5S3XE1KBSNvP57R8NSSfcY=
Subject key identifier:   E9:5F:20:A6:B0:E4:3F:57:F2:52:07:C7:94:EB:E9:61:38:CC:B7:95
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer:       /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial:       01A13CDC8BF79B6E7BCF6CCFEA57E24789A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number:          1796
Signing time:             Thu 15 Oct 2026 00:00:49 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:49 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:49 +0000
Files and hashes:         1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: PcRluUkePEtYrAwu2aIy8S+kDmi9M+BgI1iAYqARbkw=)
                          2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:8b:f7:9b:6e:7b:cf:6c:cf:ea:57:e2:47:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
        Validity
            Not Before: Oct 15 00:00:49 2026 GMT
            Not After : Oct 16 00:00:49 2026 GMT
        Subject: CN=e95f20a6b0e43f57f25207c794ebe96138ccb795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:a1:57:b4:3a:c4:3b:ee:4c:d7:f9:33:f5:
                    88:e9:f5:93:96:2a:5e:3c:99:da:76:89:08:33:6d:
                    5f:68:52:1b:f2:81:4c:19:98:e6:f1:96:ba:ad:22:
                    56:49:d2:95:49:bc:8a:d4:64:f5:8e:a0:77:1c:5a:
                    b0:83:1b:69:b0:d5:c1:d2:97:14:ab:1e:9e:21:e5:
                    c6:45:e3:46:68:e7:c6:e9:db:34:81:a9:56:b2:a0:
                    a2:e4:31:67:b9:91:65:ed:65:1d:21:71:57:d1:93:
                    e5:de:7b:79:07:2b:da:93:5b:a8:df:1a:3a:f3:82:
                    01:a8:d8:53:b8:79:d4:10:b6:17:ef:bc:47:57:97:
                    94:ee:9e:10:aa:64:b5:4a:37:c1:93:c5:12:21:dc:
                    37:97:89:ae:be:19:8f:39:19:1d:3b:66:1a:3c:5d:
                    a6:c6:64:fe:91:4c:d0:f0:1a:0e:82:1d:09:c7:d7:
                    1d:26:21:48:41:ab:00:5c:08:0e:d7:ba:07:5e:a1:
                    fd:8b:d0:3d:bb:f0:a9:84:91:11:61:7b:43:12:05:
                    0f:04:d0:c9:54:60:b0:55:b1:ff:25:52:e5:fc:dd:
                    35:3d:f7:d9:9a:f9:7d:a5:6c:fe:d5:d9:ce:f0:38:
                    30:f8:05:83:8e:90:2a:9b:a1:a1:80:b7:cf:77:eb:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:20:A6:B0:E4:3F:57:F2:52:07:C7:94:EB:E9:61:38:CC:B7:95
            X509v3 Authority Key Identifier:
                keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:c4:2d:86:5b:24:59:03:df:2f:f5:35:99:f8:b2:d6:62:
         1a:bc:ea:69:45:2e:4f:e6:47:13:ff:11:f3:17:21:f9:0b:af:
         0d:4b:ab:38:2e:f6:30:de:0d:ec:1d:42:ed:eb:78:d0:0b:a9:
         e3:88:09:2a:03:e9:9c:29:45:4f:59:b4:37:a2:9b:74:8b:2a:
         9c:0a:fa:6b:b3:d6:e3:fc:4f:4c:9c:61:84:5d:d1:a3:2d:fb:
         6d:1b:83:2b:d8:ed:74:bf:78:be:b8:3d:1c:51:dc:f7:74:f8:
         56:e9:83:8f:d9:35:7a:9d:f2:65:9f:05:b3:bc:d2:29:42:b4:
         fd:0e:0f:d0:ee:5d:78:6a:c8:99:8f:0b:9d:2f:02:52:1d:cb:
         a5:b6:84:72:b9:68:cf:38:23:58:4b:60:e1:44:c1:f6:39:3f:
         4b:06:03:28:bf:73:69:37:25:13:0a:36:3b:aa:3b:7f:ad:8a:
         f3:5d:37:b4:12:41:ab:c6:43:ce:9e:30:9f:0f:e9:3c:62:74:
         2f:b3:77:cf:eb:c6:ad:e8:02:17:d3:85:21:8e:4b:13:73:a0:
         44:c2:d8:30:de:cc:9a:1d:10:cb:49:7c:2c:3f:a9:25:8f:99:
         c0:d0:aa:ea:87:cb:01:5e:4b:9a:b6:bf:ce:7e:39:d1:58:bb:
         ba:b4:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:47:32 2026 by rpki-client