Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File:                     3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier:          vb+1R8roT/p8tDATDhUKYb+10dDd191hctw26+Fz+Dg=
Subject key identifier:   CA:54:97:AC:1A:FD:0A:36:0C:2E:AC:36:30:76:8C:FD:CF:D7:66:B9
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer:       /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial:       01A1404BAA44D71C78B8CC6817367FC8D254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number:          177C
Signing time:             Thu 15 Oct 2026 16:01:02 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:02 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:02 +0000
Files and hashes:         1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: IeZtHuyUzNo6FMomWbFuK/PNpoZU08QWqMilVynnnMA=)
                          2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4b:aa:44:d7:1c:78:b8:cc:68:17:36:7f:c8:d2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
        Validity
            Not Before: Oct 15 16:01:02 2026 GMT
            Not After : Oct 16 16:01:02 2026 GMT
        Subject: CN=ca5497ac1afd0a360c2eac3630768cfdcfd766b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:05:c8:ed:79:9e:20:56:1b:50:76:6d:2b:
                    71:46:93:5a:88:3c:e4:06:ea:d0:79:73:10:ba:a6:
                    b1:53:ae:32:ee:41:40:88:7e:a5:ea:1d:ca:bd:96:
                    de:58:4d:77:22:95:33:b3:39:8a:78:7a:c1:eb:68:
                    eb:36:6b:4d:cc:51:67:e0:6e:79:a4:bf:20:10:5b:
                    86:b8:0b:a2:18:98:81:8b:5b:50:51:b1:e1:69:55:
                    b4:20:70:84:26:87:7a:99:96:da:ab:e6:6a:7f:3c:
                    db:ef:54:17:5e:21:9b:7f:c7:e6:67:57:88:30:6a:
                    d5:ad:9f:a4:67:e7:d9:1f:69:4e:d2:b5:c8:c1:b8:
                    8b:37:47:36:29:8b:af:f1:50:14:89:94:aa:c7:24:
                    f8:90:89:de:cc:16:b0:6c:fb:11:70:95:a0:5e:cf:
                    00:48:18:12:7a:23:ea:e3:57:65:fc:17:71:7a:9e:
                    1a:98:8a:3a:76:86:3f:1d:14:64:06:28:df:27:03:
                    9c:34:4e:1c:d8:80:16:f4:a9:01:60:a0:f2:bf:17:
                    62:75:da:ee:7d:65:f2:cc:76:b3:f7:f7:64:19:39:
                    35:d6:df:74:d8:b8:75:95:bf:f6:8f:2d:1a:d1:12:
                    e8:0c:00:55:c4:ee:5f:4f:ed:e0:f8:e2:e9:2b:70:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:97:AC:1A:FD:0A:36:0C:2E:AC:36:30:76:8C:FD:CF:D7:66:B9
            X509v3 Authority Key Identifier:
                keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:0f:85:1a:0a:c9:ac:d6:85:f3:a6:ba:c2:80:37:3a:2f:
         d5:41:81:10:fe:b7:59:c6:f1:61:1c:23:89:ab:74:20:ec:2e:
         64:c8:ba:68:ff:b1:68:8f:d5:22:9a:c4:f5:12:c9:95:7d:e5:
         99:b3:73:aa:35:02:1d:e4:c1:15:2c:6c:9d:91:f4:3d:b6:9f:
         f4:6b:09:2f:bc:98:58:ce:f3:14:8b:dd:c0:be:5b:9e:3a:42:
         14:86:93:9d:cb:81:78:2a:8c:32:28:4a:7c:8d:b9:09:22:f7:
         50:4a:c8:8f:54:ba:7a:55:30:ac:bd:ec:f7:15:75:3f:2e:04:
         cf:e5:d0:10:be:d8:98:28:65:af:02:3e:74:4d:53:12:c0:ff:
         c6:97:ba:ce:40:fc:ee:6c:c3:c9:80:fc:1b:40:1f:0e:67:c4:
         5b:da:3e:7c:a4:16:18:62:8e:eb:da:09:8e:3a:4a:29:7d:10:
         c7:c5:31:81:b5:9b:f8:91:bd:3f:17:48:3c:2a:43:ac:93:30:
         6d:ee:5b:e0:70:a7:28:5d:12:0d:b3:1a:c3:49:82:cd:51:b5:
         c3:6a:15:f4:31:de:f0:59:00:86:bf:52:57:58:61:ab:8d:4d:
         d4:04:19:1f:0c:f3:80:bb:77:d0:42:11:d7:cf:31:5b:a3:7b:
         83:25:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:13 2026 by rpki-client