Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File:                     1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier:          0ahVnVF/IAlwJU7YsQKkdV/Z+qivRwoxJLujhdavpz4=
Subject key identifier:   7F:CC:66:CA:D0:D3:C9:22:A9:85:6D:65:20:23:09:EC:32:71:2A:5A
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer:       /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial:       01A06F83742C931D851BB458756D297AC6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 03:01:20 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:20 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:20 +0000
Files and hashes:         1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: D2g76aNvF4o8+iOrlSnMBIyr12ixffLLHbFctgNtqN8=)
                          2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:83:74:2c:93:1d:85:1b:b4:58:75:6d:29:7a:c6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
        Validity
            Not Before: Sep  5 03:01:20 2026 GMT
            Not After : Sep  6 03:01:20 2026 GMT
        Subject: CN=7fcc66cad0d3c922a9856d65202309ec32712a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:0f:9f:e0:81:b5:71:da:8e:e2:00:4e:d4:
                    14:1f:8c:0b:60:f1:5b:4f:22:9c:cd:cd:a4:c3:15:
                    52:91:9a:ae:b6:f1:f7:65:21:28:7d:7d:b8:f2:63:
                    53:53:44:51:3d:22:5f:43:ae:a7:99:72:0b:84:e8:
                    af:00:06:69:58:6d:a4:b5:f6:07:71:74:57:cc:c6:
                    09:59:2e:89:d5:cd:d6:ce:46:5e:c9:4f:c1:7f:a8:
                    b7:6a:dc:19:27:63:cb:13:78:00:a4:13:69:a9:12:
                    ae:97:d9:0a:06:1e:49:14:8e:b1:17:99:a1:b2:f1:
                    48:41:76:bd:f4:d9:f5:21:33:75:b1:14:90:49:8f:
                    68:c9:83:6f:59:0a:09:c5:66:5e:b0:da:34:dc:c4:
                    52:cc:80:9e:5f:71:67:86:57:a4:91:0a:96:77:72:
                    02:41:cf:4d:1a:91:e9:82:be:1a:35:f2:bc:69:17:
                    c3:87:1f:a0:31:9d:79:fa:5e:9b:a1:a7:0f:02:4e:
                    bb:eb:30:90:30:1c:59:1e:c3:27:51:e4:cc:04:68:
                    43:ed:f0:92:88:dd:ef:24:ca:99:53:79:71:12:34:
                    dd:06:75:7c:fd:ec:da:4e:5e:7f:75:2d:7d:f9:e0:
                    a5:ae:4e:1d:69:5f:72:5a:e2:b8:69:22:8b:8c:37:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CC:66:CA:D0:D3:C9:22:A9:85:6D:65:20:23:09:EC:32:71:2A:5A
            X509v3 Authority Key Identifier:
                keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:cc:c5:82:35:db:6e:13:7f:2f:ad:6d:19:4a:78:94:f6:
         cd:00:63:99:56:e7:e1:88:fc:16:03:97:cc:3f:ee:18:02:da:
         d1:16:f6:a7:6a:62:2c:27:98:c7:b7:ee:14:b5:60:9e:9e:57:
         5d:e2:bc:30:c7:31:6e:23:45:2b:52:2e:00:04:54:35:20:4a:
         a2:6a:5f:f2:38:ba:98:35:7d:c7:37:b9:ee:91:0c:54:33:54:
         0d:2c:08:f6:a1:e8:d0:43:b5:3d:8d:fa:c3:26:8c:c7:6f:c8:
         e0:ae:f9:81:cb:8b:d9:5e:c2:ca:47:97:96:55:0c:44:22:00:
         85:ec:99:45:b4:61:74:28:1f:c1:68:01:35:33:57:d9:c8:78:
         01:4a:ac:2e:cb:0b:b8:24:dc:af:f5:d3:09:6a:26:a6:43:a2:
         e1:9b:f9:2f:2c:11:82:bd:b7:d2:7f:f4:9f:a9:a3:64:f0:9c:
         15:c6:0a:e7:76:94:5b:99:72:2b:74:94:c4:ce:17:59:ac:41:
         9f:de:9d:fa:54:ab:29:3b:78:33:5d:19:12:dd:86:a3:21:ab:
         93:8a:4b:e3:1f:ac:77:26:64:76:dc:41:ed:47:03:ed:9e:ae:
         78:c4:9b:0f:fa:02:e8:3d:36:fa:21:3a:0e:d4:80:04:6d:6e:
         0e:57:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:36 2026 by rpki-client