Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File:                     3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier:          jEVoueVj7zuqdZZ+5cKvEyl0idsJo5mzaJE+Y5clVYY=
Subject key identifier:   20:83:E9:5B:B3:23:83:FB:16:25:D6:91:6A:3D:43:C7:DF:68:55:63
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer:       /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial:       01A001DCCE82A1A0D904A6C0ECFDAF85109F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number:          1643
Signing time:             Fri 14 Aug 2026 20:00:43 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:43 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:43 +0000
Files and hashes:         1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: CaLtneztPBQ8n9HuSbjIH7mMKBQ+9TOMdN3s3gy/ihY=)
                          2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:ce:82:a1:a0:d9:04:a6:c0:ec:fd:af:85:10:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
        Validity
            Not Before: Aug 14 20:00:43 2026 GMT
            Not After : Aug 15 20:00:43 2026 GMT
        Subject: CN=2083e95bb32383fb1625d6916a3d43c7df685563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:34:33:3b:5a:38:cd:24:82:d9:7b:76:e4:
                    74:cf:1e:34:70:72:20:13:e5:f9:e4:0e:d0:07:6f:
                    10:0f:36:fc:33:12:d2:e1:2f:73:78:79:92:59:b9:
                    75:db:d0:fa:69:2c:48:a6:b1:7f:ba:9c:1c:f1:6f:
                    ae:37:6b:29:fd:96:f8:28:de:f9:53:72:fa:5a:3d:
                    c3:d5:1f:bd:78:88:31:6b:f3:7e:fb:6c:b8:25:77:
                    4f:91:ce:45:97:64:7a:37:dd:a0:ab:38:75:78:78:
                    91:fe:95:4c:e4:85:cb:84:f0:ce:e9:49:33:b0:da:
                    16:87:0e:c7:0c:61:4a:c7:e1:86:90:f2:7b:66:36:
                    29:b0:ab:c5:7a:44:fc:0f:dd:eb:d7:7a:9f:b2:ba:
                    b0:f6:8d:e9:a4:4c:5f:37:a4:fd:2b:c6:7d:ec:73:
                    f3:e8:a7:90:2a:d1:2a:67:f4:3e:ae:6c:45:8a:3a:
                    95:05:89:0a:25:c0:1a:ad:a7:8b:33:33:1d:86:f3:
                    45:d4:a6:bc:35:a0:8d:76:16:43:0f:8f:ed:56:fb:
                    72:12:69:a8:04:21:64:1f:b5:ae:9a:09:50:53:0c:
                    f8:db:07:25:31:1b:52:19:7f:73:4f:95:3b:71:07:
                    e1:f6:75:97:c4:0b:d7:cd:55:eb:30:ff:f3:82:dd:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:E9:5B:B3:23:83:FB:16:25:D6:91:6A:3D:43:C7:DF:68:55:63
            X509v3 Authority Key Identifier:
                keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:41:2d:99:86:63:94:e8:ba:b6:15:35:51:54:32:93:f0:b4:
         96:3f:6c:5c:a8:ac:7c:68:2f:ed:15:0d:57:8f:ae:34:f2:b1:
         59:f0:6f:19:27:65:62:21:7c:ee:ef:74:78:21:2c:09:34:20:
         96:80:22:37:6e:55:21:32:64:72:30:0f:0e:a3:2e:61:27:b9:
         84:a7:6e:1b:53:80:ae:56:ff:ee:88:39:f7:42:6d:57:f9:53:
         d3:ec:b3:b7:34:fc:2d:19:bc:4c:80:d7:29:45:f3:f4:bf:b7:
         48:16:ee:33:b9:ad:3f:f0:3c:81:49:66:4a:b6:05:01:03:8b:
         2c:e3:23:f6:18:4b:6a:4e:8a:34:98:f1:03:dc:4c:f5:d0:13:
         b9:3b:56:97:c7:4a:75:63:39:0b:03:95:3c:2f:05:20:66:b9:
         c7:f5:74:b8:40:cf:b8:b8:f7:50:04:b4:b6:b1:fe:8b:e8:75:
         85:a3:15:7c:17:e7:4f:92:b5:4b:b5:fd:f2:26:8d:ec:5a:85:
         1f:6c:c2:80:0d:9b:1c:d6:58:6e:9f:ed:8d:aa:d3:a4:62:77:
         e4:05:39:2b:08:be:a4:68:96:1d:ee:81:ea:bc:87:43:6b:64:
         9e:ad:d9:41:b1:2c:da:55:bd:81:18:c0:03:18:28:06:03:11:
         27:7c:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:03 2026 by rpki-client