Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          kxx3ZsnCGzGd+rbzzgu3VYZgVHEzxRwiVnQHbUIbDjg=
Subject key identifier:   7B:B4:0B:00:AB:EE:C9:9B:60:BF:A8:10:3E:12:49:40:96:ED:E6:D7
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       01A13DB7CC5BD8E1ECC51DF8145FDA835B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          1189
Signing time:             Thu 15 Oct 2026 04:00:17 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:17 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:17 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: fw4KNv9ejo4+E+KtfY7ucfVZGSgJO4Rrn+tgXMoIMEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:cc:5b:d8:e1:ec:c5:1d:f8:14:5f:da:83:5b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Oct 15 04:00:17 2026 GMT
            Not After : Oct 16 04:00:17 2026 GMT
        Subject: CN=7bb40b00abeec99b60bfa8103e12494096ede6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:c4:4f:a9:63:cd:06:67:60:56:24:c4:3d:
                    4b:5d:b2:56:72:1f:48:15:55:bc:e3:cb:3c:dd:48:
                    35:44:3b:bd:a4:df:e3:1c:5e:3e:34:d6:4a:ed:5d:
                    b6:0c:5d:63:d2:89:e8:2d:4a:d7:e9:8e:e7:14:60:
                    c7:f9:4b:2d:9b:83:ef:cc:4f:d1:c3:a7:40:5f:7f:
                    70:62:59:aa:a6:87:28:5a:fb:94:9c:4a:23:d7:91:
                    82:80:d9:68:2d:0f:12:87:8d:24:50:b7:ab:58:c7:
                    b0:1a:0e:bb:db:3e:0a:69:b5:1b:e6:0b:08:4c:49:
                    55:e0:30:84:6c:6b:15:cd:2e:b5:4b:f2:91:b2:47:
                    11:5d:ef:a5:bd:b3:ae:48:50:7a:59:0b:f1:74:07:
                    3f:c3:de:7b:2e:2c:9d:77:ef:52:72:7c:4b:a3:91:
                    14:f0:2e:36:28:c5:1e:60:a5:f2:f7:f9:7d:ce:fc:
                    d0:d9:9d:33:77:a0:8c:d0:23:94:36:67:7c:ec:ed:
                    d4:2f:fd:ae:5c:d4:40:c9:87:f8:08:21:bf:2e:27:
                    cf:ad:b0:1a:18:25:f9:47:5c:dc:4e:b7:07:da:6f:
                    df:9b:bc:f0:66:0b:39:eb:7e:80:df:c3:b0:d7:e2:
                    4a:86:47:bb:75:6c:22:06:e2:da:bd:cb:ae:e6:7d:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B4:0B:00:AB:EE:C9:9B:60:BF:A8:10:3E:12:49:40:96:ED:E6:D7
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:92:4e:44:5b:f1:48:20:5e:5f:53:9a:6e:8e:bc:68:37:9c:
         9e:4e:56:a6:1b:df:a1:62:e8:f0:6e:d1:49:dd:cf:41:7b:5b:
         60:77:e3:7c:3a:ba:01:b4:0e:28:7d:db:6c:47:81:b5:4c:25:
         86:ca:f0:13:78:74:47:fd:bf:b3:7d:7b:28:98:ee:8a:40:dd:
         7c:8a:df:c3:97:5e:56:b2:a3:77:9e:0d:4a:85:b8:48:19:59:
         57:9f:4a:4a:ff:7b:9f:7f:bb:fc:b6:cc:6d:f3:d2:09:c3:54:
         13:51:17:09:e4:85:9e:19:5e:8b:af:bc:75:d7:43:0f:3a:12:
         1e:57:56:dc:1c:9f:c3:d8:15:fa:32:2f:69:6b:73:50:40:3f:
         c1:84:a5:cb:ba:11:1a:e9:46:dc:aa:90:f1:ed:61:1f:f8:6c:
         50:28:cc:b1:1a:b7:0d:54:dd:cc:6c:19:5c:de:3a:96:43:51:
         84:c1:84:46:15:78:01:cd:26:29:e3:78:5f:04:30:48:4d:c1:
         bf:e7:b4:00:52:71:65:b5:84:a8:43:58:a7:aa:e6:a0:a3:57:
         90:d7:ce:d2:50:35:61:e5:e0:b9:33:40:68:40:c9:b9:2c:ac:
         6e:60:78:4f:e4:04:67:a8:da:01:8f:40:92:99:82:a1:93:ec:
         10:d8:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:51 2026 by rpki-client