Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File:                     3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier:          WSxdgguL1sWL6iFwc2LFshQ3uOpzYwMODH8CORGI2ug=
Subject key identifier:   24:A9:17:41:2B:3B:11:5A:BB:7B:C4:DA:9E:3D:12:04:9D:0B:23:BB
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer:       /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial:       01A0EE1D40EE276CF6CB7FCB206C88AAF091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number:          1A7C
Signing time:             Tue 29 Sep 2026 17:01:29 +0000
Manifest this update:     Tue 29 Sep 2026 17:01:29 +0000
Manifest next update:     Wed 30 Sep 2026 17:01:29 +0000
Files and hashes:         1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: PxVpO1XJnqfMWHuW9I59WUp637FS/jyvZfWv2yN90fM=)
                          2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
                          3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
                          4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:1d:40:ee:27:6c:f6:cb:7f:cb:20:6c:88:aa:f0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
        Validity
            Not Before: Sep 29 17:01:29 2026 GMT
            Not After : Sep 30 17:01:29 2026 GMT
        Subject: CN=24a917412b3b115abb7bc4da9e3d12049d0b23bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:b0:d3:47:5f:3f:a9:e0:dc:07:96:22:93:
                    a1:98:c3:25:e1:c7:c8:57:cc:ec:f8:ff:73:e9:56:
                    91:f6:41:99:69:75:a8:b8:98:31:21:07:15:6c:b4:
                    25:54:33:87:a4:1f:da:e6:90:d4:c4:f2:e7:eb:92:
                    bb:6f:9a:32:af:6a:d8:94:86:38:1a:eb:39:74:1b:
                    cb:7b:8d:5c:60:08:a8:6f:d0:7c:8c:42:55:01:9b:
                    91:44:d9:ef:4c:f2:aa:bc:18:32:dc:14:09:38:d1:
                    8a:26:25:d0:78:8a:4a:48:de:fc:ce:4a:32:a6:eb:
                    bb:30:f8:1a:2a:19:0d:7a:25:16:9c:7a:bc:6b:3a:
                    22:72:9f:72:16:6f:28:4e:02:e6:8d:6b:f6:00:45:
                    4b:32:66:ac:fa:dd:17:69:11:aa:4e:82:1a:46:73:
                    35:8e:4b:bb:1d:97:c1:d9:c6:29:b1:08:d3:49:eb:
                    cf:13:46:0c:b4:b6:fd:4b:c3:f6:0e:e3:1e:42:15:
                    36:48:22:e6:fe:f3:0d:b6:06:4d:7e:3a:d0:66:a0:
                    17:ee:8c:21:7c:21:8a:ea:e2:3e:59:b1:28:52:28:
                    d6:db:82:69:d4:51:15:32:9a:58:17:bc:48:07:a7:
                    ef:c7:e9:5e:40:f6:f3:e7:30:f7:fc:09:a7:ea:59:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:17:41:2B:3B:11:5A:BB:7B:C4:DA:9E:3D:12:04:9D:0B:23:BB
            X509v3 Authority Key Identifier:
                keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3e:a5:82:71:78:87:25:2c:61:7a:a7:18:53:5d:6f:e4:fc:
         f4:41:ad:fb:9f:d7:de:d0:cc:9b:49:e7:cd:81:4d:39:14:25:
         ad:40:b1:0c:35:bc:d7:74:c5:5c:f1:67:a9:da:b3:e0:47:ba:
         d5:bc:66:81:04:4c:bd:ad:6d:ac:b3:21:cc:75:f7:a3:a0:e3:
         26:7f:06:fa:ba:c9:f2:ef:7f:0f:5a:d9:e5:3c:6c:1d:c6:bf:
         53:42:04:a9:6f:1e:fd:66:2e:72:1d:56:cf:ca:2b:1b:10:97:
         bb:6a:3b:68:16:c1:2b:8c:64:2c:b0:4e:76:71:37:49:c0:3d:
         91:c6:da:51:ec:c5:78:3c:f9:b1:59:82:c3:d3:20:e6:7a:1b:
         c3:63:07:cc:5f:d3:b6:a7:b5:e2:32:76:d3:85:68:79:c8:f8:
         a3:04:24:81:76:2a:75:27:f8:26:82:09:73:f1:29:d0:f9:96:
         c0:00:15:86:5d:84:d2:a6:27:98:24:2d:b2:95:4c:b1:4f:75:
         76:70:40:76:75:d6:a3:16:05:d4:82:07:72:b1:fd:7b:23:03:
         ea:8b:ae:5e:a5:a4:40:2c:e6:d1:6c:7b:ed:f3:1f:da:8d:9f:
         6a:a4:1b:69:d3:f1:6f:8d:5d:a5:30:42:36:46:41:bb:12:85:
         0a:88:d4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuHUDuJ2z2y3/LIGyIqvCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDcyMzlkYjgxZDYxZjk4ZDU4NjM4M2NjYzEyNWQ2NjEw
NmNiMzAwHhcNMjYwOTI5MTcwMTI5WhcNMjYwOTMwMTcwMTI5WjAzMTEwLwYDVQQD
EygyNGE5MTc0MTJiM2IxMTVhYmI3YmM0ZGE5ZTNkMTIwNDlkMGIyM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWOw00dfP6ng3AeWIpOhmMMl4cfI
V8zs+P9z6VaR9kGZaXWouJgxIQcVbLQlVDOHpB/a5pDUxPLn65K7b5oyr2rYlIY4
Gus5dBvLe41cYAiob9B8jEJVAZuRRNnvTPKqvBgy3BQJONGKJiXQeIpKSN78zkoy
puu7MPgaKhkNeiUWnHq8azoicp9yFm8oTgLmjWv2AEVLMmas+t0XaRGqToIaRnM1
jku7HZfB2cYpsQjTSevPE0YMtLb9S8P2DuMeQhU2SCLm/vMNtgZNfjrQZqAX7owh
fCGK6uI+WbEoUijW24Jp1FEVMppYF7xIB6fvx+leQPbz5zD3/Amn6llHJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSpF0ErOxFau3vE2p49EgSdCyO7MB8GA1UdIwQY
MBaAFN7XI524HWH5jVhjg8zBJdZhBsswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYt
ODU2YjY1Yzc1YzI2LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iNmM0MjYtNzZkNS00YTgyLTliNWYtODU2YjY1Yzc1YzI2
LzEvM3Rjam5iZ2RZZm1OV0dPRHpNRWwxbUVHeXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT6lgnF4
hyUsYXqnGFNdb+T89EGt+5/X3tDMm0nnzYFNORQlrUCxDDW813TFXPFnqdqz4Ee6
1bxmgQRMva1trLMhzHX3o6DjJn8G+rrJ8u9/D1rZ5TxsHca/U0IEqW8e/WYuch1W
z8orGxCXu2o7aBbBK4xkLLBOdnE3ScA9kcbaUezFeDz5sVmCw9Mg5nobw2MHzF/T
tqe14jJ204Voecj4owQkgXYqdSf4JoIJc/Ep0PmWwAAVhl2E0qYnmCQtspVMsU91
dnBAdnXWoxYF1IIHcrH9eyMD6ouuXqWkQCzm0Wx77fMf2o2faqQbadPxb41dpTBC
NkZBuxKFCojUAg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 01:02:49 2026 by rpki-client