Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          sJMea2tG8xvFeNQnnHXgPKHdh0IIP/ruuTvhPnct/P4=
Subject key identifier:   A2:BB:33:B0:73:E2:95:04:65:10:94:C6:6E:91:66:DF:A8:2A:6B:83
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       01A1046E3307F00F46D3415C6B4FDAF2A2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          1A93
Signing time:             Sun 04 Oct 2026 01:01:33 +0000
Manifest this update:     Sun 04 Oct 2026 01:01:33 +0000
Manifest next update:     Mon 05 Oct 2026 01:01:33 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: mi2o7h/IaISB8CuBq19H3+j0Gh+y/2apb6WPVqcQJsY=)
                          2: C6zjpcBdZcRudxtmosvZuextZiI.roa (hash: zfnjDDGxVh2c7H/SnJCHldm/s9nx6Q4NSeuXoVoEuIA=)
                          3: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (hash: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk=)
                          4: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (hash: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8=)
                          5: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (hash: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8=)
                          6: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (hash: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:6e:33:07:f0:0f:46:d3:41:5c:6b:4f:da:f2:a2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Oct  4 01:01:33 2026 GMT
            Not After : Oct  5 01:01:33 2026 GMT
        Subject: CN=a2bb33b073e29504651094c66e9166dfa82a6b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:22:66:d6:af:ca:8b:1d:3a:1d:b2:78:5b:
                    50:ee:ab:3e:96:63:d1:fb:8f:78:88:35:a8:73:08:
                    4e:86:af:49:1f:04:8c:4b:a3:8c:36:85:13:97:10:
                    bb:7b:1d:a7:1b:5c:a4:5f:53:33:e1:6b:d0:10:50:
                    c8:d2:4f:40:dd:e7:02:3f:e7:ce:2a:69:ae:6b:b0:
                    b6:72:86:86:60:88:2a:5e:9b:bc:d3:73:ed:d9:00:
                    61:c2:ce:bb:15:5f:38:7c:71:69:a2:ee:4d:8d:83:
                    82:38:70:eb:02:31:8a:f6:66:57:1e:4c:a1:7a:eb:
                    51:89:ed:60:7f:91:a9:c1:24:03:eb:8a:d4:35:dd:
                    6d:f4:b7:1d:f7:f1:39:17:0b:58:1e:71:87:7e:09:
                    ef:fc:0c:1f:fa:11:ac:74:b7:c2:ce:5c:b7:08:e6:
                    13:99:8a:60:68:d8:28:2b:ff:41:56:21:df:1b:24:
                    16:47:a7:ce:e9:b2:00:9e:d0:79:96:00:04:47:19:
                    e7:f9:79:f2:71:ea:c7:14:e2:cf:27:8e:dd:b1:8c:
                    d9:25:33:e8:d7:43:62:6a:d9:b8:aa:bc:ac:71:db:
                    ab:7b:e8:ae:fb:2e:ff:d8:a0:81:7d:ae:72:de:ca:
                    b6:15:70:27:27:2a:e1:9c:51:73:ff:19:73:f8:98:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BB:33:B0:73:E2:95:04:65:10:94:C6:6E:91:66:DF:A8:2A:6B:83
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:c2:62:ee:e8:47:0a:a6:ca:a2:a2:83:55:cf:5c:2c:d7:
         82:ae:bb:54:86:93:57:de:da:27:fb:f8:1e:56:87:7b:4c:1e:
         3e:fa:dd:14:9f:d4:66:0a:46:f9:fa:82:5d:de:64:66:fc:82:
         41:07:a5:ff:42:64:b0:5b:5a:45:ea:20:71:39:65:37:f3:71:
         e3:8b:e5:a8:77:1b:9b:a8:c7:d0:52:27:6a:98:00:e8:36:eb:
         cd:b7:24:ec:c4:7f:9d:c6:c5:ea:f3:b0:50:a9:99:24:87:46:
         ef:52:e8:e7:77:b4:7f:e9:2e:c4:4e:ed:5e:48:2a:91:c5:5c:
         11:cb:84:55:12:11:71:08:ab:47:5c:da:07:f4:80:74:62:be:
         d5:6a:e7:54:7c:1b:11:64:04:a2:3e:a1:a1:32:40:b4:8f:74:
         47:c1:8e:a6:71:f4:cd:03:90:d5:08:ee:7e:19:ba:67:96:08:
         88:8e:00:d8:d1:bc:47:ac:91:bd:25:1b:ca:41:70:ba:3e:7f:
         2b:63:1b:02:1a:7f:15:ba:25:2a:95:81:1c:e2:b3:56:d5:b6:
         f0:b6:33:9c:fb:e4:fa:c3:52:77:4c:72:a9:a9:57:7d:70:25:
         b8:ee:ed:cf:cc:a7:f4:37:25:15:f8:fb:5c:21:12:b8:18:1b:
         28:9f:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:02:32 2026 by rpki-client