Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File:                     3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier:          nlVBMu2WLwpwNHC3r2QOjuspUXVMU4z0QGLdjj6RZ3w=
Subject key identifier:   EB:63:56:B7:BD:70:1F:29:30:62:1D:70:81:B9:E3:9C:E5:92:1B:A6
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer:       /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial:       01A1415E519635A16473A02E9E21CDDE6DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number:          1A3B
Signing time:             Thu 15 Oct 2026 21:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 21:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 21:01:02 +0000
Files and hashes:         1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: 78wVEl+skkkSxYWptnLZpwExiZLmkY0mata5HCeblIE=)
                          2: Ul8b11My9gvvpOwu_4T6lfCZjCI.roa (hash: ihknx/rKkWDFephobjW9oz0pq89+mPfWzCnTBwHVamY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:5e:51:96:35:a1:64:73:a0:2e:9e:21:cd:de:6d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
        Validity
            Not Before: Oct 15 21:01:02 2026 GMT
            Not After : Oct 16 21:01:02 2026 GMT
        Subject: CN=eb6356b7bd701f2930621d7081b9e39ce5921ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:ce:bc:b2:f0:ad:0a:d7:13:4b:a9:4e:da:
                    cf:a5:eb:b6:8e:40:14:59:f6:a0:3e:92:12:25:49:
                    a9:e5:02:9d:0d:bb:63:5a:d4:93:1f:5a:c5:05:8a:
                    81:91:f9:c8:b7:21:82:77:52:8a:e7:f8:1b:a0:0f:
                    37:1d:60:e5:dd:d3:23:d6:2d:b2:0a:51:9d:ea:12:
                    05:59:5a:00:91:72:0f:c0:7a:95:c1:0b:5d:1f:1e:
                    d4:f6:58:cc:2a:43:d7:d7:03:6a:0b:57:5d:0f:56:
                    50:dc:e6:95:5a:46:cc:62:4a:4e:d4:a2:ea:86:9a:
                    5a:8b:db:2c:f2:14:62:17:a3:cd:9d:84:91:2e:8d:
                    7f:ac:18:3b:ca:91:96:46:7f:e4:d8:73:35:31:52:
                    19:f5:7a:73:67:70:bf:ca:4a:52:21:e2:7c:f2:d5:
                    da:a3:1c:9e:5c:95:09:b7:e7:63:6a:65:7b:b7:49:
                    25:d1:dc:e0:9f:cf:c8:65:29:94:c4:35:98:fd:1e:
                    2c:0c:d4:f0:39:10:1f:74:b8:d7:ae:2e:1b:9c:6f:
                    94:b7:cf:83:2e:79:a0:ae:80:26:5b:f1:ce:5d:9e:
                    ed:38:a9:26:3f:a4:16:ca:6c:41:b4:59:a3:82:75:
                    ad:9d:76:0d:06:6f:88:9b:9a:81:ae:87:05:f7:d1:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:56:B7:BD:70:1F:29:30:62:1D:70:81:B9:E3:9C:E5:92:1B:A6
            X509v3 Authority Key Identifier:
                keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:06:f0:ca:31:15:b5:d8:7d:3f:d4:8a:2f:1b:ce:2e:3b:73:
         49:fc:d9:a4:c3:2f:7c:99:b2:ab:22:c9:4d:c7:5a:4a:be:6b:
         d8:65:4d:f8:b3:2e:65:ab:13:6b:54:2b:60:5e:84:5e:da:2e:
         55:b9:dc:42:ec:74:c7:eb:b7:3a:98:b5:9b:09:67:b8:aa:dd:
         1e:cc:7e:22:83:db:5b:9e:62:4c:86:39:7b:53:43:8c:6c:26:
         b5:25:30:a3:38:26:fe:33:b2:22:15:45:0c:7f:e6:cb:4f:1e:
         e8:f3:2c:c5:da:2f:29:4a:3f:d8:7e:a3:cb:f2:e4:c7:c5:70:
         3c:58:f3:7a:de:8f:b5:2f:3b:90:c3:3c:4e:e8:2a:98:e4:b7:
         93:93:59:ca:33:2d:a6:b1:ba:d8:bd:2a:11:81:55:dc:3f:54:
         8f:44:35:b9:34:01:80:01:cc:22:25:33:23:5d:ba:9a:7c:1c:
         0a:91:65:df:a3:6b:46:95:29:8d:23:18:f8:ae:78:58:11:87:
         d8:a9:e5:2b:45:a7:22:aa:12:21:8d:7c:a2:49:ab:ee:47:68:
         e8:62:83:37:b8:79:e6:33:54:70:96:6e:78:d5:dc:77:c2:a1:
         cc:c8:99:cb:4e:9c:8c:ad:fb:c3:b1:14:42:78:7d:73:a6:e5:
         02:89:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:02:49 2026 by rpki-client