Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File:                     M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier:          1lfxgRFczix5AxX4eac3z1Z5L6EJorL9VnVOlhza9u8=
Subject key identifier:   48:79:1E:8E:F9:BF:73:BB:14:4D:76:A2:6B:06:73:48:77:95:7F:A3
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer:       /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial:       01A06E7052EF3C6D690FF0475C4B790A1525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number:          1068
Signing time:             Fri 04 Sep 2026 22:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:49 +0000
Files and hashes:         1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: N8bOlG0Ur3wxYxf7JeIwM325hqWZU5fYmDsamlfs+L4=)
                          2: x3j0YXNfrQ1uoL9p2fnHwDo4Voo.roa (hash: +HeOEQXq41iJ7S0nO2qqAI09YN5UE1e6xIQ3R8exCoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:52:ef:3c:6d:69:0f:f0:47:5c:4b:79:0a:15:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
        Validity
            Not Before: Sep  4 22:00:49 2026 GMT
            Not After : Sep  5 22:00:49 2026 GMT
        Subject: CN=48791e8ef9bf73bb144d76a26b06734877957fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8f:cc:7f:80:87:53:55:48:8d:d2:05:a7:91:
                    7a:a6:c7:9a:d1:91:b7:4a:38:9b:24:c0:70:71:95:
                    0f:6b:82:0f:57:a6:e6:b4:87:e2:06:bb:2d:8d:ca:
                    54:e9:a4:af:f4:fd:9f:df:de:ea:dc:e2:59:ff:6b:
                    a0:a2:25:d9:9c:b1:dd:37:bd:de:ef:48:81:2f:67:
                    18:10:20:73:e6:e4:ae:e6:27:49:27:70:3e:79:16:
                    68:3c:53:06:97:fa:df:10:d3:d5:f2:40:80:f0:b5:
                    bc:8b:fd:b7:7a:92:09:68:c7:82:42:4c:b7:fa:86:
                    be:16:fe:a9:5a:17:cb:fc:33:5f:16:15:e1:bb:63:
                    93:8c:95:a1:76:f0:3c:f2:e4:2f:dd:6e:b3:84:1f:
                    c7:9a:b9:cd:8b:c7:ed:9f:53:40:ac:5d:be:56:f3:
                    e6:6d:0b:5a:10:35:27:06:05:f6:20:eb:b5:9f:a6:
                    88:49:74:d1:d6:cd:a4:ed:9e:3d:74:3c:d2:15:a9:
                    ff:ab:69:46:99:89:4f:a9:08:e3:8b:ea:bb:18:39:
                    d1:31:98:3d:81:6c:ac:b2:cf:f2:db:04:e0:f9:eb:
                    0d:06:93:cc:56:e3:12:92:1b:f6:98:a9:84:10:38:
                    57:38:8b:ee:2c:7a:57:e2:b3:0c:63:b8:46:15:d8:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:1E:8E:F9:BF:73:BB:14:4D:76:A2:6B:06:73:48:77:95:7F:A3
            X509v3 Authority Key Identifier:
                keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ac:89:3a:d0:d2:22:83:64:ed:b5:00:58:fa:b3:7a:ed:6f:
         2c:0e:b9:00:ac:ad:d6:78:ac:70:a0:45:21:57:e9:fa:ac:bb:
         66:8c:29:dd:de:85:e2:a3:8b:e3:9d:7c:f4:d7:57:d4:1c:5b:
         4b:55:7c:05:70:f3:5a:be:89:d2:65:07:31:ac:2d:02:9f:37:
         28:c1:a4:5c:9a:51:fa:87:81:3c:0d:92:24:78:ce:ef:88:8a:
         b6:5e:09:9b:bf:f6:d7:5d:99:0b:09:80:0f:66:83:c9:29:47:
         05:a1:f5:7b:24:5f:51:99:d8:84:93:a6:c1:31:ab:34:9c:0a:
         a1:68:c6:24:e1:9c:c3:ab:c9:10:ac:88:0e:8b:8d:c4:8a:b5:
         55:ed:20:74:76:9d:43:91:2a:6b:f9:06:4d:e0:3d:ae:2f:18:
         9c:d9:be:32:11:c9:b6:b3:52:26:47:67:41:79:1e:df:ff:52:
         30:87:da:68:14:51:1e:86:f6:28:9a:14:3d:7f:74:6c:88:9b:
         9e:f8:e7:f3:6d:1f:8a:51:58:25:0b:8b:89:3a:6a:15:1c:a7:
         dc:8b:cf:6a:c9:4f:3a:88:fc:45:1c:ae:35:a3:ff:f0:cd:ff:
         75:0a:4f:0e:50:73:c4:0f:b7:ab:a1:55:4b:f9:71:be:65:77:
         e0:53:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:34 2026 by rpki-client