Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          +MkC9BODWGxaJLx50kAlJv5rm+1Mr97QFl0nbLm6a5U=
Subject key identifier:   B3:63:6C:1B:2C:00:52:78:D6:C6:F4:93:0A:B2:E6:75:63:1F:3F:5B
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       01A001A5DDDFE4AD7FAB0730CA0DDBCB46CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 19:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:42 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: nLdD8+BozFQvhLHS0X8yMtAZrsr3wMJNjvV+dxQf+o8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:dd:df:e4:ad:7f:ab:07:30:ca:0d:db:cb:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Aug 14 19:00:42 2026 GMT
            Not After : Aug 15 19:00:42 2026 GMT
        Subject: CN=b3636c1b2c005278d6c6f4930ab2e675631f3f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:cb:2e:c9:10:14:1b:33:17:c2:9d:e1:b2:
                    37:a8:67:aa:cf:d7:fd:2c:d5:59:7e:41:a9:e2:f5:
                    7c:a3:20:65:cc:23:d8:24:14:49:cd:a6:30:1e:73:
                    27:f1:5b:ec:f3:3f:71:b5:1e:f9:9a:2f:91:d1:a1:
                    80:5d:90:e4:c1:f0:f3:f3:62:b7:e2:e1:34:1b:d7:
                    fd:d1:aa:85:27:9f:8b:85:2e:21:e2:d6:77:8d:3f:
                    15:5e:c0:5e:1c:52:b7:df:25:b8:50:de:0c:aa:0f:
                    37:c4:67:df:f1:f0:48:5d:1a:35:27:16:68:0f:fe:
                    df:d1:40:fd:74:7a:47:b9:0e:e8:50:83:2d:2e:d2:
                    5c:5c:d6:40:80:7f:2d:10:ee:53:3d:e0:db:80:0a:
                    68:c0:b1:55:6f:95:e5:23:d1:13:fc:5e:b3:2e:0a:
                    9c:37:f4:19:52:db:76:a8:d9:6c:cf:e0:54:53:6b:
                    0e:b7:18:47:ca:89:3e:1d:49:c7:60:50:99:77:ec:
                    81:e7:a8:45:74:8c:1e:d5:91:2b:36:e9:e0:d8:b3:
                    15:40:0d:ff:21:a9:a8:9f:e7:03:83:84:89:a9:4d:
                    35:df:ca:db:0e:9b:98:be:45:9e:3b:a4:01:27:f7:
                    21:3e:83:b0:d1:69:9f:a9:21:0b:a2:f8:58:c5:09:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:6C:1B:2C:00:52:78:D6:C6:F4:93:0A:B2:E6:75:63:1F:3F:5B
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:ee:6d:01:1a:71:d5:44:5f:31:f8:a3:93:91:13:60:23:
         40:e0:ab:47:e0:b0:54:f5:8b:bc:50:d8:f6:e7:cb:ff:0d:df:
         0b:cd:c8:be:1e:25:49:bd:28:22:13:1e:4d:2c:93:7c:2a:c6:
         f7:45:e4:5c:4c:5e:14:d6:9f:8b:a0:bf:d5:8d:0c:5e:40:de:
         c1:f8:71:76:73:33:0a:a6:f6:cb:1a:a7:e5:87:2e:38:a1:99:
         8d:3f:c6:9e:80:9c:71:0c:bf:b0:26:f7:c3:b4:a6:ab:f4:51:
         ca:6b:2c:9d:3e:33:94:f3:c9:dc:10:8f:7a:11:9a:f2:f1:57:
         87:73:59:b8:c9:41:0c:a2:a9:94:8a:4f:b8:70:28:c5:fe:2c:
         29:dc:11:22:30:79:88:3f:c4:b6:c3:bb:6c:1a:e4:b2:0b:05:
         e5:4b:d5:a4:9e:38:ae:83:17:29:c1:2d:13:e8:c3:37:ae:6f:
         3d:b1:23:f3:1f:82:8d:de:2b:35:15:19:bb:49:c5:c4:65:03:
         74:60:9a:c2:96:d3:9a:1d:4f:48:dc:eb:67:3d:f6:d0:78:ca:
         ef:32:5f:e2:b3:a6:b2:8a:c5:2f:0b:1f:1b:ec:52:13:8b:ee:
         95:86:60:ac:65:3e:2e:d7:fb:2b:22:94:d0:53:0c:e3:ed:56:
         6c:b5:76:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:20 2026 by rpki-client