Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
File:                     2qHEXTvEY4ygPaHSpIM1GnITIOU.mft (raw, json)
Hash identifier:          CvoCmQXF8SvOvMEo8vYOeWpC9ltmPkxJujRgPnpYRak=
Subject key identifier:   3B:D4:52:11:39:A8:8C:12:73:07:2A:50:C9:E7:BB:6E:6C:BB:60:A9
Authority key identifier: DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5
Certificate issuer:       /CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
Certificate serial:       01A0465069DE6430846A017920654A11F7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
Manifest number:          C3
Signing time:             Fri 28 Aug 2026 03:01:09 +0000
Manifest this update:     Fri 28 Aug 2026 03:01:09 +0000
Manifest next update:     Sat 29 Aug 2026 03:01:09 +0000
Files and hashes:         1: 2qHEXTvEY4ygPaHSpIM1GnITIOU.crl (hash: Y1enKVEamgor5PBH6vRnhDvIBNuwNiwQuoWItXi7bDg=)
                          2: 4c3tJTTkEroZsa1C6dh9GBKAPrQ.roa (hash: kTlgOCnXj5yewQ6mwepOm/lv0KOLYyNsXeNKGmeaC9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:46:50:69:de:64:30:84:6a:01:79:20:65:4a:11:f7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa1c45d3bc4638ca03da1d2a483351a721320e5
        Validity
            Not Before: Aug 28 03:01:09 2026 GMT
            Not After : Aug 29 03:01:09 2026 GMT
        Subject: CN=3bd4521139a88c1273072a50c9e7bb6e6cbb60a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:1a:d9:d9:c7:3d:62:fc:45:15:91:47:69:
                    53:b3:73:59:67:50:8c:a1:12:0a:ab:e6:65:a9:92:
                    fa:fd:ce:4e:8d:ec:62:de:58:7a:dd:ec:20:82:8a:
                    6c:10:fa:86:8d:9d:f2:49:5c:05:c6:a6:40:d0:f7:
                    24:cd:ba:d5:89:20:00:7f:26:5c:e1:7e:57:8c:7d:
                    d3:67:9c:96:87:69:ff:47:24:9a:a3:14:03:ed:7a:
                    17:57:80:4d:40:58:13:6c:42:9d:80:5a:19:cb:92:
                    de:16:15:f2:e6:c0:47:8e:12:93:a4:36:f2:b4:37:
                    fb:95:0c:b1:ab:05:98:12:31:c0:af:56:12:ff:c4:
                    66:2e:79:a8:10:33:ee:0f:0d:eb:fc:4d:81:17:53:
                    f5:71:50:b5:f2:ce:64:f9:46:41:da:c2:61:29:f1:
                    bc:0a:9f:29:4b:b6:cf:58:cf:5b:c8:59:2d:fc:3e:
                    32:4e:18:21:fa:22:fd:11:be:5e:bc:5b:92:a4:a8:
                    cf:f5:99:e7:ad:d1:90:4e:b9:9b:83:32:5b:1d:d8:
                    22:05:30:3f:b3:b2:5f:38:08:2c:ac:26:87:4f:40:
                    73:35:20:d4:cd:7a:c2:09:f8:00:64:77:c7:ec:4a:
                    8c:a1:f9:5f:a6:06:fe:c4:01:52:43:ab:9a:63:d4:
                    45:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:52:11:39:A8:8C:12:73:07:2A:50:C9:E7:BB:6E:6C:BB:60:A9
            X509v3 Authority Key Identifier:
                keyid:DA:A1:C4:5D:3B:C4:63:8C:A0:3D:A1:D2:A4:83:35:1A:72:13:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qHEXTvEY4ygPaHSpIM1GnITIOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c4b00e-7b96-4327-9b9f-fe73ff31bee6/1/2qHEXTvEY4ygPaHSpIM1GnITIOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:d7:63:50:2f:ad:5b:e7:98:7c:06:d6:d8:3e:49:fe:39:
         06:26:6b:bc:b2:6b:f6:44:55:5f:89:50:22:ac:5f:ba:1a:5b:
         e9:a9:b0:74:ae:f9:5b:63:05:34:74:f9:4b:6a:68:e9:1c:d7:
         f8:ab:91:38:73:0d:63:77:ad:1a:ad:e7:e5:7e:8d:96:a4:bb:
         38:74:27:47:13:5b:41:a2:69:1a:32:70:63:f2:f1:9a:9e:67:
         fb:9d:ef:ec:ad:c0:32:20:34:fe:4c:69:d2:b4:fb:f4:5e:64:
         7c:28:69:f3:af:8d:2b:0f:e2:2f:58:36:f1:dd:40:c4:7f:12:
         28:6a:da:56:0b:c8:1e:f5:22:f0:61:9d:4c:a7:fd:24:d8:18:
         72:6f:28:ba:7f:ec:2c:a1:e4:bf:0c:0f:3d:d8:ee:22:31:9c:
         a1:07:e2:88:1b:2b:14:11:b5:a6:6a:61:f5:da:d4:76:3a:bf:
         6d:54:79:ae:9e:34:15:8b:6d:48:ca:aa:a5:25:42:21:75:bc:
         1f:4e:60:b8:c8:97:48:38:82:19:9f:e4:6e:5d:da:6e:2e:74:
         91:32:b5:87:3e:60:57:0e:09:ee:9b:e4:4e:11:8e:f3:52:27:
         ca:0b:2d:06:c3:a4:6c:9c:c1:b9:9f:9a:b2:cf:f8:0c:88:b6:
         a1:df:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 06:47:13 2026 by rpki-client