Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          kUUdnlODPCA6bPOtI79lu5UVdeVgWf2qRsHOUrVPp2o=
Subject key identifier:   34:24:E7:66:DD:4F:54:C9:82:FB:9C:A4:CD:3C:DF:E6:21:06:97:E0
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       01A13F39C1513FBB1304074AD9646FF91012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0B1D
Signing time:             Thu 15 Oct 2026 11:01:51 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:51 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:51 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: VyM53i1NvJy7sEHxJlOtckgM0+sy7kVe6A5+3mo/+gk=)
                          2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:c1:51:3f:bb:13:04:07:4a:d9:64:6f:f9:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Oct 15 11:01:51 2026 GMT
            Not After : Oct 16 11:01:51 2026 GMT
        Subject: CN=3424e766dd4f54c982fb9ca4cd3cdfe6210697e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:e2:37:a7:90:6a:a3:bd:3b:b5:d3:1a:77:
                    1d:88:d6:15:7b:2c:2a:42:da:82:50:a3:67:84:69:
                    93:ca:54:92:49:a2:e2:53:64:f2:b5:f3:c3:27:85:
                    39:74:ce:f4:aa:d1:37:bd:d5:ac:1c:94:c2:67:74:
                    28:cf:1e:b1:8f:de:3b:4e:5e:24:ca:4a:f6:3c:ae:
                    27:4e:7e:cb:0a:b0:a8:ea:49:98:b5:b6:e4:41:db:
                    0a:8b:81:8e:62:20:17:5a:f3:0f:fa:18:97:e4:66:
                    30:58:0f:1a:65:19:08:ae:83:19:ea:1c:94:ab:86:
                    6b:31:a6:6a:c9:29:5d:7c:ed:f3:26:fa:4d:aa:b3:
                    42:14:a8:ed:13:76:e7:f2:b9:fe:3a:52:b7:7f:9e:
                    b3:89:99:64:29:8c:b4:81:fe:2e:67:b5:a3:23:a9:
                    b3:1d:2a:79:13:a6:39:d1:cf:dd:70:d8:3c:d2:6e:
                    01:38:92:6a:15:c0:9a:06:06:b6:eb:98:ee:d6:4e:
                    1d:f7:2b:75:ac:6e:5a:4b:42:41:c5:d7:1a:8b:f3:
                    a0:93:b3:ca:3a:31:1b:8e:d8:23:41:22:a9:fa:6b:
                    9d:0a:22:8f:ab:cb:c2:34:a1:1d:db:ad:88:8a:88:
                    a8:3e:c7:dd:ac:bb:a4:0c:72:ea:61:ab:48:61:7d:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:E7:66:DD:4F:54:C9:82:FB:9C:A4:CD:3C:DF:E6:21:06:97:E0
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:de:25:81:15:40:62:f5:22:0a:51:29:e4:5e:41:a6:0e:
         b8:31:c1:c2:54:51:81:ac:89:7b:72:db:ad:19:df:33:0a:86:
         bd:30:73:ac:56:8f:57:ec:62:ba:cd:95:55:8b:d6:b7:9a:b5:
         bc:bf:84:e0:33:94:e4:35:e3:c2:80:82:54:e8:c1:ec:05:86:
         b0:88:f6:8a:7e:26:f0:2d:42:8a:36:cf:8a:84:8f:5e:40:8f:
         cb:b8:18:36:6c:82:40:a7:2a:f5:e7:6c:9b:e4:79:f2:2e:8b:
         0a:54:94:e4:72:b0:23:f2:0c:d6:56:ca:9d:5e:16:6f:4e:c6:
         d2:67:cd:a5:3d:0e:06:9f:56:1d:69:f9:59:dd:da:bb:5e:61:
         6f:56:81:df:32:52:b8:5b:02:98:2a:c8:da:5c:61:88:62:d5:
         fc:df:6a:ec:bf:39:18:a1:07:87:c4:d7:1e:1e:9c:12:1f:1d:
         16:7a:f5:3b:a5:dc:4b:96:cc:bf:a4:ec:83:f8:cd:7c:0b:b1:
         9a:b2:10:27:9c:2e:00:63:85:fe:11:57:d8:14:20:7d:47:4c:
         62:ca:3e:fa:41:f9:ee:78:a4:d8:01:c0:bb:25:72:bd:67:f7:
         a3:be:b4:53:d0:21:04:77:c5:26:22:92:43:cc:35:bb:b1:c2:
         96:97:f3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OcFRP7sTBAdK2WRv+RASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDNlYTJjZDA3OTk3ZWNkZmUxNzE4ODg3MjcwODY1MmUx
NzJkZjIwHhcNMjYxMDE1MTEwMTUxWhcNMjYxMDE2MTEwMTUxWjAzMTEwLwYDVQQD
EygzNDI0ZTc2NmRkNGY1NGM5ODJmYjljYTRjZDNjZGZlNjIxMDY5N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5LiN6eQaqO9O7XTGncdiNYVeywq
QtqCUKNnhGmTylSSSaLiU2TytfPDJ4U5dM70qtE3vdWsHJTCZ3Qozx6xj947Tl4k
ykr2PK4nTn7LCrCo6kmYtbbkQdsKi4GOYiAXWvMP+hiX5GYwWA8aZRkIroMZ6hyU
q4ZrMaZqySldfO3zJvpNqrNCFKjtE3bn8rn+OlK3f56ziZlkKYy0gf4uZ7WjI6mz
HSp5E6Y50c/dcNg80m4BOJJqFcCaBga265ju1k4d9yt1rG5aS0JBxdcai/Ogk7PK
OjEbjtgjQSKp+mudCiKPq8vCNKEd262IioioPsfdrLukDHLqYatIYX03TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQk52bdT1TJgvucpM083+YhBpfgMB8GA1UdIwQY
MBaAFNxD6izQeZfs3+FxiIcnCGUuFy3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2Yt
NDQ2NDRkZDVlZDQ0LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZmU3NmEtYWI4MS00MmE0LWFlY2YtNDQ2NDRkZDVlZDQ0
LzEvM0VQcUxOQjVsLXpmNFhHSWh5Y0laUzRYTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrzeJYEV
QGL1IgpRKeReQaYOuDHBwlRRgayJe3LbrRnfMwqGvTBzrFaPV+xius2VVYvWt5q1
vL+E4DOU5DXjwoCCVOjB7AWGsIj2in4m8C1CijbPioSPXkCPy7gYNmyCQKcq9eds
m+R58i6LClSU5HKwI/IM1lbKnV4Wb07G0mfNpT0OBp9WHWn5Wd3au15hb1aB3zJS
uFsCmCrI2lxhiGLV/N9q7L85GKEHh8TXHh6cEh8dFnr1O6XcS5bMv6Tsg/jNfAux
mrIQJ5wuAGOF/hFX2BQgfUdMYso++kH57nik2AHAuyVyvWf3o760U9AhBHfFJiKS
Q8w1u7HClpfz0A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:52 2026 by rpki-client