Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File:                     3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier:          hgLTlSpSG5wtqmuFLPWImA8WvY3iFydyrt33Zjm9TXU=
Subject key identifier:   F3:EA:A1:7C:30:2E:94:0A:3A:A4:9C:2F:B2:80:5D:EC:FB:56:E4:91
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer:       /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial:       01A0028187F7BACA04527478630CDB5EC98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number:          0E6B
Signing time:             Fri 14 Aug 2026 23:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:38 +0000
Files and hashes:         1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: jgpyMY2NP+aDA5tb6c+eIIKJnIB36MOll1wy0I96sBk=)
                          2: N905L8-7YxH2DGuKT4TqyLtH9hg.roa (hash: 8pMSMPosiUUfB8gsw6Yi/Z3lOaNd4MGcuLKeWx/SoOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:87:f7:ba:ca:04:52:74:78:63:0c:db:5e:c9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
        Validity
            Not Before: Aug 14 23:00:38 2026 GMT
            Not After : Aug 15 23:00:38 2026 GMT
        Subject: CN=f3eaa17c302e940a3aa49c2fb2805decfb56e491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:87:06:d4:0b:44:65:2b:81:d2:35:52:89:
                    31:48:cf:89:b3:56:4b:77:7f:22:22:eb:ad:26:eb:
                    4f:8a:b6:ac:93:e4:07:2b:a3:c8:3c:75:62:6f:fd:
                    78:59:b9:23:b5:24:ed:13:8f:ca:40:07:08:d9:19:
                    27:27:84:0d:51:d2:2a:42:f4:dd:e2:e1:66:93:ac:
                    9b:61:fb:97:dd:f0:57:85:da:64:3d:71:7c:26:5f:
                    2c:d0:18:08:b7:f5:06:66:16:b1:ae:3f:b5:92:da:
                    cc:47:30:7f:13:b8:21:7e:01:b8:ee:b1:be:8c:76:
                    67:fe:52:9d:0c:cc:c1:a1:fc:f6:c6:4c:16:14:0a:
                    fb:08:86:18:9c:89:75:d3:f8:f6:39:c5:1b:a8:a8:
                    17:5b:f2:46:7a:d2:55:bc:d5:71:18:5d:3d:e0:e5:
                    e1:72:fd:73:d8:78:74:f3:3a:ab:2f:6e:bd:71:42:
                    a0:92:4f:b3:17:6b:ce:cb:09:d0:6b:f5:99:8f:fb:
                    da:0a:41:fc:d4:b0:ed:45:01:81:19:66:68:ea:4c:
                    4e:84:37:88:76:24:c2:be:2e:80:72:85:43:b1:cf:
                    3d:84:56:fa:17:a2:78:39:ba:34:ff:be:ac:6d:f2:
                    56:72:7a:5a:52:92:1c:bb:21:a2:f9:bf:a5:fb:b2:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:A1:7C:30:2E:94:0A:3A:A4:9C:2F:B2:80:5D:EC:FB:56:E4:91
            X509v3 Authority Key Identifier:
                keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:5d:c4:5b:fa:73:c8:60:2e:1f:64:1a:dd:b7:00:eb:c0:40:
         d5:5a:40:af:45:c4:54:4d:2f:fe:fa:83:2f:e2:d0:2b:18:1b:
         e7:71:6b:5b:f2:eb:04:bb:e8:94:6f:a9:78:63:7c:90:ba:85:
         39:bc:79:c2:56:ba:88:d1:a6:6d:d2:6e:c0:65:63:e1:ae:f6:
         98:39:4b:4b:82:ad:f6:96:4f:79:38:10:73:76:e5:16:d8:bc:
         e1:cc:e3:e6:ca:98:03:dc:30:32:e3:a8:cc:1a:d5:e5:6a:d4:
         66:b1:3b:27:6d:f7:fc:4c:d6:29:ae:1f:66:ad:7b:dd:d0:30:
         35:52:36:a7:71:c5:62:d3:d1:d8:68:32:84:e6:e6:1a:8b:a2:
         f2:7a:37:dd:1a:ed:86:1e:e7:35:c9:21:e2:60:be:e4:b4:02:
         6d:29:bd:10:c4:2e:92:7c:fe:85:13:a1:0d:a3:f8:c3:0f:83:
         e5:83:7d:17:74:88:93:30:6d:ff:22:70:cf:d7:61:cb:19:d8:
         6a:62:97:61:94:32:66:23:5a:5a:06:f7:bd:85:e8:ef:25:ab:
         40:8d:c7:63:39:fe:8d:dc:79:c5:61:b2:1f:54:a2:84:65:67:
         de:b2:17:81:01:72:a8:fc:26:ca:a5:74:99:83:ab:5d:91:5a:
         51:2d:4d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgYf3usoEUnR4YwzbXsmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjYwODE0MjMwMDM4WhcNMjYwODE1MjMwMDM4WjAzMTEwLwYDVQQD
EyhmM2VhYTE3YzMwMmU5NDBhM2FhNDljMmZiMjgwNWRlY2ZiNTZlNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWOHBtQLRGUrgdI1UokxSM+Js1ZL
d38iIuutJutPirask+QHK6PIPHVib/14WbkjtSTtE4/KQAcI2RknJ4QNUdIqQvTd
4uFmk6ybYfuX3fBXhdpkPXF8Jl8s0BgIt/UGZhaxrj+1ktrMRzB/E7ghfgG47rG+
jHZn/lKdDMzBofz2xkwWFAr7CIYYnIl10/j2OcUbqKgXW/JGetJVvNVxGF094OXh
cv1z2Hh08zqrL269cUKgkk+zF2vOywnQa/WZj/vaCkH81LDtRQGBGWZo6kxOhDeI
diTCvi6AcoVDsc89hFb6F6J4Obo0/76sbfJWcnpaUpIcuyGi+b+l+7LjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPqoXwwLpQKOqScL7KAXez7VuSRMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwV3EW/pz
yGAuH2Qa3bcA68BA1VpAr0XEVE0v/vqDL+LQKxgb53FrW/LrBLvolG+peGN8kLqF
Obx5wla6iNGmbdJuwGVj4a72mDlLS4Kt9pZPeTgQc3blFti84czj5sqYA9wwMuOo
zBrV5WrUZrE7J233/EzWKa4fZq173dAwNVI2p3HFYtPR2GgyhObmGoui8no33Rrt
hh7nNckh4mC+5LQCbSm9EMQuknz+hROhDaP4ww+D5YN9F3SIkzBt/yJwz9dhyxnY
amKXYZQyZiNaWgb3vYXo7yWrQI3HYzn+jdx5xWGyH1SihGVn3rIXgQFyqPwmyqV0
mYOrXZFaUS1Ngg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:26 2026 by rpki-client