Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
File:                     3oP6K0srlD39oVEaUvz5hQb85DE.mft (raw, json)
Hash identifier:          ql8OcdSQeKiNaiim9J61EimCCSIitdhOexPDOPvV+Es=
Subject key identifier:   E3:98:F1:8C:2B:F0:DF:BD:8B:FF:47:CF:FE:07:30:B2:0B:D5:5C:75
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Certificate issuer:       /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial:       01A045079E81EFEF18A5102C355650047BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
Manifest number:          9D
Signing time:             Thu 27 Aug 2026 21:02:02 +0000
Manifest this update:     Thu 27 Aug 2026 21:02:02 +0000
Manifest next update:     Fri 28 Aug 2026 21:02:02 +0000
Files and hashes:         1: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (hash: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=)
                          2: 3oP6K0srlD39oVEaUvz5hQb85DE.crl (hash: eNz/D1Bc3SotRsn+o5au9LH4eh9qcsi0Phuxcad+0tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:45:07:9e:81:ef:ef:18:a5:10:2c:35:56:50:04:7b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
        Validity
            Not Before: Aug 27 21:02:02 2026 GMT
            Not After : Aug 28 21:02:02 2026 GMT
        Subject: CN=e398f18c2bf0dfbd8bff47cffe0730b20bd55c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a5:60:cf:91:7c:c3:34:a2:80:d1:29:59:fd:
                    58:c7:f1:5d:6d:8b:56:c6:ae:b8:6c:54:6d:13:15:
                    55:f2:08:4c:82:88:d7:b9:43:dc:74:ff:3b:f7:d2:
                    88:6c:d7:f6:b6:10:e9:ca:95:52:58:26:11:dc:ec:
                    cf:4a:26:68:00:14:bf:45:1f:c9:b1:7d:b8:01:91:
                    fb:98:c1:4c:17:a8:bd:3b:47:48:d6:9b:6a:63:77:
                    5c:3d:05:fa:cc:7d:24:bd:73:d5:4e:2c:71:cd:d3:
                    54:c2:43:fd:a1:f8:87:9c:7f:2f:d3:0f:8d:85:ef:
                    7f:ae:de:3b:01:b4:06:23:67:bd:32:19:66:7c:8b:
                    1f:8c:c8:8a:eb:d5:ff:cc:4f:85:f2:76:be:74:fd:
                    db:63:78:a1:c7:a5:c4:b7:79:a1:c5:98:3d:49:30:
                    f1:ee:f1:28:54:74:44:0d:8e:78:3a:d5:5f:a7:6c:
                    9b:6d:8e:ab:d1:dc:b6:d8:3e:ce:25:67:5f:d2:21:
                    58:32:51:d5:c7:68:c3:61:ca:48:cd:84:62:a8:8f:
                    ef:68:16:07:e9:78:97:59:50:20:55:8b:35:3b:14:
                    3e:5c:5e:63:cb:d7:7d:92:53:da:07:17:c7:51:f6:
                    17:dc:23:4d:23:00:29:4e:52:b8:75:1a:ce:99:b6:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:98:F1:8C:2B:F0:DF:BD:8B:FF:47:CF:FE:07:30:B2:0B:D5:5C:75
            X509v3 Authority Key Identifier:
                keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:73:a0:7b:37:70:6a:28:8d:36:45:25:e0:81:0d:5b:c0:70:
         fd:69:3c:08:01:06:22:98:18:a6:a3:9c:82:f3:9d:79:7a:93:
         43:37:03:4a:52:cd:d3:a1:52:83:43:86:a3:e1:4e:8d:d3:bb:
         7c:9c:20:26:8d:1b:73:85:ae:ca:77:53:38:fc:34:ee:ef:a7:
         2b:4d:06:c5:27:36:be:8c:14:d6:03:cd:14:19:39:50:d9:a9:
         d2:63:1a:2a:b1:3b:29:54:5e:29:b0:a1:22:be:60:87:e1:43:
         83:d7:3e:ec:d1:e0:3d:9a:28:e2:67:e0:9b:7f:d5:2e:c6:72:
         2f:bb:b7:f9:6c:1b:fe:f4:2a:8e:c7:a9:7e:e1:ed:fa:9e:f9:
         88:f0:28:a4:38:e1:87:b0:e8:0d:ee:39:83:f8:6f:5d:11:8b:
         e8:f1:c2:6d:37:dc:4f:e9:ce:01:6c:1c:ab:92:f3:8f:06:ed:
         4d:5e:a7:ce:a0:0b:e0:b4:97:57:91:d2:75:5a:a1:55:90:8d:
         37:d3:95:26:84:33:10:55:2a:6f:60:62:44:02:8c:ef:2f:ab:
         eb:93:78:bd:80:ae:6d:5c:89:9f:e8:b5:88:b2:29:26:5e:1e:
         46:8a:23:7c:63:58:59:b1:d9:6c:55:46:60:c1:20:e3:39:b1:
         2b:45:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 06:46:18 2026 by rpki-client