Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          1X+28aF+0nosufw2RQJF6lhVkRazmdt872DSW5ITBdk=
Subject key identifier:   06:24:05:00:DD:FE:14:18:9F:FC:17:EC:B6:DB:33:16:0F:14:5F:2C
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       01A15778EAF4231FEAB22B25B261DEFE4EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          1193
Signing time:             Tue 20 Oct 2026 04:01:44 +0000
Manifest this update:     Tue 20 Oct 2026 04:01:44 +0000
Manifest next update:     Wed 21 Oct 2026 04:01:44 +0000
Files and hashes:         1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: w491vCKYyc/jnkZg7DQND7dslA83bKKAzbAIGPAryOI=)
                          2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:78:ea:f4:23:1f:ea:b2:2b:25:b2:61:de:fe:4e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Oct 20 04:01:44 2026 GMT
            Not After : Oct 21 04:01:44 2026 GMT
        Subject: CN=06240500ddfe14189ffc17ecb6db33160f145f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:5d:13:7f:7b:ea:33:b4:df:2d:d5:ed:b3:
                    10:26:66:9b:41:6d:fd:a2:4a:eb:24:8a:7d:97:b5:
                    86:68:21:d8:81:44:0e:3e:e1:27:06:d8:75:af:42:
                    85:20:05:87:e4:e2:df:6d:c3:ee:52:ec:61:95:68:
                    36:2c:1a:ce:f8:dd:48:47:49:3e:d9:2f:a7:2c:3d:
                    a2:6b:c7:9f:5e:e2:ad:15:b2:0a:2d:bb:e9:e4:a5:
                    3b:82:56:f2:d1:6e:60:bd:73:30:76:91:7a:50:d1:
                    3a:1c:05:b9:f3:2c:1f:77:11:03:d4:f7:7f:63:6d:
                    52:be:33:8c:98:65:7c:00:e5:50:3b:81:77:09:46:
                    e4:f8:f0:66:13:34:06:16:17:b3:d7:30:ea:ba:5a:
                    a4:c6:c9:ea:9c:df:b2:97:41:98:c4:2f:d6:b9:f4:
                    90:87:82:3c:80:66:c7:f0:c5:96:91:7d:fb:71:97:
                    c4:ac:38:8a:0a:a1:96:fd:35:59:c1:c4:a0:57:b6:
                    e3:b7:9c:05:cd:5d:76:47:31:87:e0:3e:70:e9:4d:
                    c2:9f:66:a7:8c:01:e8:31:41:40:db:f2:fd:48:a2:
                    9a:3a:fa:0e:a3:f4:04:e4:21:3f:3c:72:d1:44:9b:
                    bd:fc:55:29:fe:85:1a:c8:de:eb:d9:57:21:4d:5f:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:05:00:DD:FE:14:18:9F:FC:17:EC:B6:DB:33:16:0F:14:5F:2C
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9f:b5:9e:4b:bd:61:a1:07:c1:8c:6b:f9:6d:67:c0:14:51:
         d9:6d:98:1c:e3:f6:a9:c3:0f:95:d4:ee:2c:e8:ad:38:1e:69:
         ed:ba:a8:9a:6f:9d:85:71:19:04:1f:6c:5b:cc:3b:20:6e:1b:
         2a:6b:a7:1e:2f:62:57:e6:2e:33:12:81:06:a1:15:d9:81:dd:
         05:b3:e8:d9:30:8e:46:86:1c:d0:4e:44:ff:0f:2d:98:a0:0a:
         ff:24:ad:50:fe:ed:df:da:d3:86:98:36:fe:39:64:bc:b4:fe:
         7c:14:a7:48:45:df:0d:06:57:7b:7a:cb:06:c7:db:32:76:f3:
         f4:61:dd:c8:fe:a3:25:e5:85:b9:20:59:e4:82:e0:b4:97:f6:
         d0:1c:dc:0e:81:da:eb:b3:2b:7d:5c:dd:a5:ba:05:1b:1e:73:
         4c:ce:17:23:eb:12:4b:52:cb:e3:67:b8:e5:ce:f3:bb:55:c3:
         6e:f1:ad:e0:ff:20:6f:27:b9:80:df:58:ca:17:ad:63:be:90:
         32:ca:04:bc:d5:eb:74:d2:66:52:ce:d4:6d:f9:63:3d:39:d8:
         9d:27:89:af:b4:b3:ed:f5:c8:31:8f:18:6a:1d:50:9a:5b:7f:
         71:0a:32:45:e2:f1:67:ce:4e:8a:f4:69:7a:87:04:15:d9:15:
         16:a1:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 11:55:32 2026 by rpki-client