Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          sgpNpPFvdx+mW15ZDYkn1yu1rw/Zu9yj1qYWNB4woj0=
Subject key identifier:   AD:0B:1D:D3:4D:36:F9:DB:AC:0B:25:52:7D:25:AC:B4:C6:82:67:3D
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       01A089E77EC843CF27B05ECDFA089ACD7FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          1A4E
Signing time:             Thu 10 Sep 2026 06:00:44 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:44 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:44 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: bx/DAwv54HmdM0nQDmB+fsYiICZVQSnbWCqIBh0EPPs=)
                          2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
                          3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
                          4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
                          5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:7e:c8:43:cf:27:b0:5e:cd:fa:08:9a:cd:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Sep 10 06:00:44 2026 GMT
            Not After : Sep 11 06:00:44 2026 GMT
        Subject: CN=ad0b1dd34d36f9dbac0b25527d25acb4c682673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:bd:8f:cd:ab:9e:db:5a:e8:9a:e8:b3:96:
                    1b:36:1c:fa:08:56:6b:e1:32:0c:e1:40:90:27:05:
                    b5:11:e3:84:27:ce:e8:07:f7:2b:ee:2d:42:cf:67:
                    ef:88:d1:3f:5f:d9:af:7e:5d:16:10:ed:75:12:18:
                    b9:2c:5b:c1:66:9a:38:f2:40:15:e5:c9:b0:80:5a:
                    ae:a5:c1:12:44:fa:68:a0:09:09:ac:08:91:9a:e0:
                    13:7c:ff:73:e2:38:0b:d0:34:f8:97:5c:63:43:21:
                    f9:e4:0b:4a:ea:d1:96:65:65:c0:ca:f9:77:96:ec:
                    30:79:3a:e5:f4:f7:53:39:77:35:33:d8:8f:b0:50:
                    3c:3c:19:d9:e0:50:d6:04:51:6b:c5:31:f8:66:eb:
                    21:12:8f:d7:f7:c7:30:c2:42:18:5f:48:59:65:3b:
                    94:59:f3:c5:88:96:5a:80:f9:cb:77:78:27:b2:7f:
                    8d:81:08:8e:30:4d:db:8c:79:ad:e9:90:69:e3:05:
                    1e:a1:56:47:67:69:8a:e2:9d:ff:31:db:97:f1:5e:
                    da:83:49:ef:e1:0f:10:14:ce:73:9f:e8:8a:89:f8:
                    41:6a:8b:14:56:5f:72:d1:42:97:f1:39:e7:ab:ee:
                    e6:b3:4c:0d:c9:f6:8d:ec:62:4f:8c:5e:8e:99:01:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0B:1D:D3:4D:36:F9:DB:AC:0B:25:52:7D:25:AC:B4:C6:82:67:3D
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:17:f0:ce:b1:4f:6e:92:85:a9:e2:eb:e4:99:9b:c4:b2:
         ec:7e:95:bd:06:ea:93:f5:c5:1e:c6:1a:cc:ee:4a:a2:7e:41:
         cf:cf:36:ed:b0:83:a7:eb:9f:9a:3c:f5:e5:b2:8a:bd:45:50:
         9f:cc:d0:19:4e:5a:17:7b:a2:6f:56:f1:1b:e9:be:08:ee:98:
         bc:51:eb:fc:01:c9:40:53:19:cd:92:f5:b6:14:c5:39:1c:61:
         ca:66:75:1a:2f:21:f4:d8:2e:f0:ea:49:6c:c1:a3:db:91:44:
         3b:72:ab:21:29:9c:05:a8:c4:c8:7b:ee:74:dc:b4:06:c9:6d:
         21:58:cd:71:14:8f:fd:7b:35:3b:28:62:64:2b:ec:d4:76:ef:
         4d:6f:95:8c:f2:09:10:fd:92:6e:a7:27:8a:69:99:60:c9:7c:
         95:cc:d0:5d:6e:cc:c8:e4:f9:4e:7c:55:8b:37:5b:2b:b7:00:
         ae:43:7c:8b:1c:6c:9c:4d:cb:72:39:66:b8:ed:1a:07:89:13:
         17:5b:68:85:b2:24:be:f1:57:e0:1c:e5:73:43:60:83:bf:bb:
         a3:a8:8c:92:59:72:9a:4d:0b:24:65:4e:a3:02:2d:22:24:d7:
         b8:8e:4b:08:a3:cf:13:4d:be:71:c5:81:60:71:fa:12:21:0c:
         cf:55:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:11:15 2026 by rpki-client