Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File:                     3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier:          mfQ8m6LT4nqPYDdrRO+PAMIjSMSuPsy10e5t7V/xa6A=
Subject key identifier:   09:F5:5A:7B:CC:C8:62:5E:D3:BA:5A:1A:EC:33:47:71:73:1B:80:E7
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer:       /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial:       01A1404C6E76F4956CBFA32AD4AF3FD11945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number:          0DC4
Signing time:             Thu 15 Oct 2026 16:01:53 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:53 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:53 +0000
Files and hashes:         1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
                          2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: GLPeeXzaHMXr4flqgCHcZyYIXZZ95w3/eJPocdtE43s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4c:6e:76:f4:95:6c:bf:a3:2a:d4:af:3f:d1:19:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
        Validity
            Not Before: Oct 15 16:01:53 2026 GMT
            Not After : Oct 16 16:01:53 2026 GMT
        Subject: CN=09f55a7bccc8625ed3ba5a1aec334771731b80e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:a3:fc:2f:83:9e:0b:d0:14:b8:6e:2c:0e:
                    ca:10:90:d9:89:23:29:ee:fb:a8:70:eb:59:31:e9:
                    70:49:90:8c:d0:67:53:4b:7b:c3:89:d6:84:96:6c:
                    cd:21:5b:57:75:94:6f:0f:8c:66:c4:92:2c:0b:f0:
                    2f:eb:65:18:68:b2:db:17:0b:6e:10:07:2f:3a:fc:
                    57:81:b0:f8:a4:bf:87:ff:e9:6e:81:c3:ab:df:0e:
                    01:e0:d8:ff:20:b6:d9:57:1d:6c:59:81:88:8c:52:
                    a5:5b:d0:88:d0:d9:f2:d7:4a:0b:5c:0e:b4:a4:0f:
                    75:22:ea:4e:4c:01:97:36:37:33:30:92:cf:b6:05:
                    5b:12:02:ae:4a:8a:92:77:10:29:64:e4:c4:67:cc:
                    c5:f0:2b:b0:8a:e4:e4:f1:0f:4d:2e:bf:f5:e4:e5:
                    f9:68:fc:88:5b:2d:d4:ca:b8:13:27:ff:8b:b3:06:
                    06:6d:4f:e5:39:1e:65:82:6e:4e:c1:19:aa:ab:51:
                    6f:e6:ba:dd:6c:ac:55:7b:7c:8d:30:43:75:2e:af:
                    9c:19:2e:bf:5b:9f:f5:43:55:ed:70:12:38:f6:5a:
                    92:f4:7e:3d:4a:6d:ce:65:a1:d4:a5:ad:25:6a:7d:
                    19:7b:8c:f0:39:c7:61:d2:9d:79:fc:d5:13:4a:73:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F5:5A:7B:CC:C8:62:5E:D3:BA:5A:1A:EC:33:47:71:73:1B:80:E7
            X509v3 Authority Key Identifier:
                keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1b:63:03:b4:9a:14:61:96:fd:78:95:0a:d6:39:35:a9:80:
         ac:25:f0:1f:a4:79:78:10:a7:28:4a:d1:32:2b:a6:e6:7d:0f:
         43:88:f3:a3:8b:02:55:97:b5:94:9e:40:a9:79:01:11:48:22:
         02:99:56:85:3a:5c:dd:ce:92:db:91:bd:f1:ed:a0:78:9e:2d:
         ab:0b:4c:d6:f4:86:e5:b3:7c:e0:ae:06:f3:97:17:48:8f:d6:
         b1:79:2d:13:51:8a:c0:d0:f4:ed:86:80:48:04:20:1d:32:4d:
         5f:4b:54:3d:a2:ff:c5:84:48:07:fe:03:be:d7:8a:f6:1e:c4:
         a8:32:3d:79:7d:cd:6b:ed:dc:3b:8a:bf:02:d3:dc:7f:f7:17:
         e3:52:f8:57:fe:f1:e2:31:4a:81:91:85:53:65:34:15:29:d0:
         8a:14:2a:07:1a:c5:9e:bf:0c:76:ea:75:20:80:69:9a:b5:02:
         95:cf:ac:85:e6:e4:b5:a0:75:e9:af:57:0f:c2:7a:e0:4b:ca:
         e2:01:6e:15:01:b9:48:14:0d:08:74:6a:d6:50:cf:d3:0e:d6:
         9a:9f:c1:b4:d8:28:af:2d:44:a1:66:44:b2:74:48:31:9c:bd:
         1d:5b:45:9e:bb:d6:03:21:8e:25:7d:a6:05:6f:8b:b1:22:b5:
         f6:cb:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:09 2026 by rpki-client