Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File:                     3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier:          v9b5GDElJuKW7UMRxT8UQsmk0qx4hP/O5pBHYNyOk2U=
Subject key identifier:   0A:E5:3B:CC:25:6C:EE:C3:EC:6E:D7:F5:8D:FE:BF:D6:02:CC:D4:57
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer:       /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial:       01A18B64EFF7453C6E480F92D522FE882401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number:          19AE
Signing time:             Fri 30 Oct 2026 06:00:10 +0000
Manifest this update:     Fri 30 Oct 2026 06:00:10 +0000
Manifest next update:     Sat 31 Oct 2026 06:00:10 +0000
Files and hashes:         1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 1PyZz2Cs/Pg6TAhpEnMOW+kH6VtrIBmoHK8amxm4xrQ=)
                          2: bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa (hash: MyD2KvEBFXRQiu4BFiBKjZI4Q2af6YWWceKAjMolm2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:64:ef:f7:45:3c:6e:48:0f:92:d5:22:fe:88:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
        Validity
            Not Before: Oct 30 06:00:10 2026 GMT
            Not After : Oct 31 06:00:10 2026 GMT
        Subject: CN=0ae53bcc256ceec3ec6ed7f58dfebfd602ccd457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:13:da:ba:6a:4c:fc:4d:62:b7:9d:cc:07:
                    47:1e:c8:18:2d:ad:fd:28:b9:f9:45:9f:4e:16:40:
                    63:17:14:50:98:35:ae:53:53:27:56:e3:cf:0d:31:
                    c9:8c:77:fa:d8:ff:ca:b4:84:99:31:e5:77:f8:23:
                    d2:71:34:8f:0c:38:42:3f:f2:d7:93:32:b1:9f:ec:
                    0c:3d:8b:13:97:29:43:b3:78:b1:57:cd:91:6d:b7:
                    7a:c1:25:34:6a:7d:dd:8d:db:9c:46:9b:8b:df:21:
                    8b:4c:9a:0a:72:c1:d7:8c:25:5f:11:a9:ee:c8:e0:
                    c0:f6:06:c3:82:fb:85:be:e0:31:c8:d6:ac:b7:dd:
                    bd:11:2e:0b:cd:f5:6b:69:10:5f:46:b6:09:ef:9d:
                    14:b6:64:a9:98:27:0c:08:1c:13:cd:36:5a:39:e5:
                    53:50:28:9f:40:f8:db:3b:c9:9b:04:68:67:6e:f1:
                    4f:f2:68:f8:cb:a1:08:b7:a0:e8:67:66:78:3b:89:
                    0e:fa:0b:15:9d:03:14:82:d9:0a:72:b2:43:87:08:
                    3c:51:c2:7f:6c:e7:da:37:1c:12:c6:a2:a9:e3:53:
                    2e:0e:37:1c:86:f7:1c:7b:5b:2b:0a:32:92:b4:9d:
                    6f:a4:2f:7c:06:40:0a:bb:36:ec:21:62:43:e3:d5:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E5:3B:CC:25:6C:EE:C3:EC:6E:D7:F5:8D:FE:BF:D6:02:CC:D4:57
            X509v3 Authority Key Identifier:
                keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:c8:d1:09:6b:14:7c:d1:82:ef:d6:94:ae:07:0a:ef:3b:
         c7:b6:9e:8f:17:74:39:c2:37:7c:df:31:26:82:5d:87:ec:c2:
         1a:3e:4a:42:3a:76:18:81:0b:04:a9:16:d6:8f:81:14:be:1d:
         46:39:3d:57:9e:0a:9f:57:60:1b:8c:db:7c:ef:18:c7:51:e8:
         f0:4b:4e:05:7a:23:6f:a6:b2:e0:8b:53:b5:7a:ab:8b:e4:ae:
         d5:04:78:52:c7:c4:85:0e:c4:c3:eb:74:2b:7d:cf:1d:54:8b:
         e6:0f:cc:c3:41:70:76:97:ca:46:8f:5a:0f:73:1e:82:33:fd:
         85:4e:1e:7f:bb:72:a2:c3:1b:c3:0b:b1:d7:4a:b7:9b:70:49:
         37:20:eb:7e:aa:12:58:bd:36:79:c3:bd:2f:8c:62:3d:21:5a:
         77:65:a7:14:25:c7:6f:01:2d:3a:ff:46:a8:4f:a6:13:af:36:
         8a:b1:b7:86:3e:e8:54:9e:cb:3a:10:77:40:a2:68:b7:e1:72:
         cb:88:34:ca:bd:b1:6d:e7:f7:d7:e9:d0:4c:1c:f1:38:a0:b4:
         63:cb:dd:59:b1:4e:a8:cd:05:84:ab:f9:64:00:d3:d1:c9:47:
         08:8d:6b:28:5b:7e:72:2c:d0:35:5e:a7:18:fc:21:f1:90:ff:
         52:f2:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:31:05 2026 by rpki-client