Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File:                     3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier:          5Wqx9/AqOPXXpwvlj4SmoEFUqmwSAY/HjIw+2QIz+Qw=
Subject key identifier:   71:F2:14:2F:90:C4:04:24:B3:99:10:1C:C1:DA:AB:54:BF:05:1C:A8
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer:       /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial:       01A151766A8615CECD5B00FAE8AEFA75D6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number:          1662
Signing time:             Mon 19 Oct 2026 00:01:17 +0000
Manifest this update:     Mon 19 Oct 2026 00:01:17 +0000
Manifest next update:     Tue 20 Oct 2026 00:01:17 +0000
Files and hashes:         1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: j3QgOXOo4J79oi4feEeDbH+Sr+lYVYFVU58RCbLLNY8=)
                          2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:76:6a:86:15:ce:cd:5b:00:fa:e8:ae:fa:75:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
        Validity
            Not Before: Oct 19 00:01:17 2026 GMT
            Not After : Oct 20 00:01:17 2026 GMT
        Subject: CN=71f2142f90c40424b399101cc1daab54bf051ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:1f:78:cb:dd:32:cf:a0:8d:40:d2:f2:34:
                    12:6e:c8:06:27:31:64:9b:60:09:d1:5b:5a:c2:b3:
                    10:4e:e7:4b:4f:e0:39:d7:4e:64:80:ee:da:26:95:
                    f2:5d:5f:7f:24:0b:41:0d:68:00:39:17:5b:b2:a3:
                    30:f0:dd:ab:af:6e:56:10:72:82:ab:96:b4:21:6f:
                    2b:43:37:ff:c8:d8:d7:35:81:15:9a:72:d3:c8:a7:
                    40:22:ec:12:30:6b:d6:d0:b1:5c:3c:0a:40:f9:1e:
                    08:df:4b:63:8e:69:4e:02:9e:d4:95:5f:fd:ec:a5:
                    fe:a1:5c:32:a3:e2:54:df:1e:34:aa:70:60:af:3d:
                    9a:13:54:ca:8b:92:d3:fc:24:65:19:85:bb:f4:c8:
                    e8:a6:65:b5:2c:24:3d:56:ee:74:bb:f5:a0:b7:7c:
                    6c:93:b2:8f:aa:ba:40:1c:d6:d6:55:93:ab:a3:70:
                    27:d7:53:39:1d:f6:ab:0e:af:7f:64:33:5a:dd:6c:
                    87:23:71:51:78:74:cd:5c:d0:a1:6b:a1:ec:76:39:
                    02:20:72:1b:a4:f9:3c:1a:b2:72:c9:72:e2:7c:ee:
                    b8:74:e2:68:47:62:1a:2c:9f:d4:64:0f:a4:ba:d5:
                    cc:de:bb:f1:7a:63:e0:ca:87:e0:41:c2:d9:63:ba:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F2:14:2F:90:C4:04:24:B3:99:10:1C:C1:DA:AB:54:BF:05:1C:A8
            X509v3 Authority Key Identifier:
                keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:e9:e3:ad:41:44:4f:9e:7b:a4:8b:4d:8f:b7:80:2a:ad:
         32:62:0e:42:6e:13:39:f7:f5:3f:52:82:6c:be:fc:1d:c5:62:
         91:e0:22:ae:93:e9:df:3f:02:6b:3f:28:bc:2f:8e:4f:23:d4:
         aa:01:85:1d:3d:c7:11:06:3d:36:df:e5:9c:e5:bf:18:e1:78:
         1e:14:23:37:0a:a8:65:b4:cb:f8:43:95:c6:69:99:3b:2e:fa:
         25:6f:a8:9f:91:b3:99:27:3a:af:36:3c:c0:19:a8:90:c9:98:
         a1:67:57:34:45:6b:e3:15:27:07:90:3e:94:3c:2a:24:29:cb:
         09:36:dc:6b:44:66:8c:a2:cb:3c:90:e2:b6:b2:57:86:88:b4:
         3f:b9:75:f2:93:e8:80:d0:f8:00:1e:a5:56:fd:fc:e3:40:48:
         b8:25:e4:8d:20:20:54:05:bf:81:ce:b6:00:a6:5e:57:f8:02:
         64:76:39:80:a3:d0:f8:4c:4d:05:66:2b:75:79:df:c2:8f:ff:
         51:ec:da:cb:9a:80:31:b7:2d:9b:b4:9f:4f:5d:3a:6f:67:f1:
         b0:d4:46:84:da:e9:c8:ca:8e:d4:9c:47:b4:c2:77:7d:d0:20:
         77:3b:12:07:cb:cc:40:4b:0f:6c:6c:e9:73:14:db:08:85:5a:
         56:d7:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:59:43 2026 by rpki-client