Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          Lpzpzl4vo8zIXfq8GzHIe+0P9VBasYpS+TNMnRnNbB0=
Subject key identifier:   EE:EE:34:EA:79:34:68:DD:00:5F:DD:3B:23:DA:B3:40:FC:A7:90:A2
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       01A001A5B447387F4199CAF767733AFAC17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 19:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:31 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: h4gAWOBMHiprHxixdV5/TZN6ZJwq0P3Pnkb334qPFGA=)
                          2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:b4:47:38:7f:41:99:ca:f7:67:73:3a:fa:c1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Aug 14 19:00:31 2026 GMT
            Not After : Aug 15 19:00:31 2026 GMT
        Subject: CN=eeee34ea793468dd005fdd3b23dab340fca790a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:d9:68:65:ac:1e:d4:f3:e7:fc:77:51:43:
                    63:7c:10:76:64:5d:6e:db:b5:a7:73:d1:6c:aa:a8:
                    93:d4:5c:a7:7e:aa:4f:31:88:fb:18:21:9c:07:f9:
                    65:1b:27:5f:c4:cc:e0:08:68:2d:91:f2:4f:6b:47:
                    be:f7:c0:5c:1a:97:98:e1:bc:c0:98:2b:ee:30:69:
                    2b:3c:58:88:49:89:52:47:a2:e0:2c:33:d6:2c:79:
                    98:54:9d:8b:45:09:09:e2:90:cb:92:2f:3b:de:ba:
                    5a:89:91:98:22:85:a7:21:45:4a:d2:40:30:8a:11:
                    85:e2:8f:fc:fe:bc:35:bc:a0:81:d0:8b:ce:e1:db:
                    ac:0a:5e:3b:66:47:df:ad:58:aa:fe:d2:15:66:28:
                    07:75:86:62:79:b0:82:37:c2:1a:4a:f0:bd:a7:86:
                    18:a7:ac:0d:d2:f1:ec:07:40:ca:d0:04:b6:5c:8c:
                    42:f2:eb:96:eb:67:0c:bb:ef:6a:f5:0b:42:c8:58:
                    86:02:19:0a:58:25:f8:87:06:e9:73:a3:fb:a3:5f:
                    ec:ee:2b:1e:8f:42:be:b8:cf:e9:83:86:69:94:93:
                    65:e7:c9:cc:ce:ed:81:5f:25:c4:8a:72:d4:f0:7a:
                    4a:a3:8a:55:80:cf:70:25:b0:29:ae:80:a7:a3:2c:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EE:34:EA:79:34:68:DD:00:5F:DD:3B:23:DA:B3:40:FC:A7:90:A2
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:41:1f:1d:12:8b:b5:cb:26:da:a2:5b:b7:b6:f1:90:c0:
         f9:9b:db:72:a9:dc:49:e4:a0:f6:98:12:b1:3a:4c:98:c1:af:
         dc:46:3e:d2:86:84:fc:44:c7:44:ab:f9:1d:bc:9d:ef:f6:2e:
         f4:d9:0b:ee:ff:fe:fd:1e:9f:d1:2d:65:77:a3:82:dc:a4:94:
         16:a0:5a:21:61:4f:f3:36:f6:af:da:e3:21:0d:11:9f:2d:85:
         8b:c4:ad:f8:ce:62:e3:d8:54:f4:4b:0f:2b:58:15:2a:71:48:
         7e:c5:ed:99:72:66:18:4d:41:30:f3:e2:77:51:d5:60:f5:33:
         31:25:7d:e3:71:d8:9f:7d:64:e7:5e:ca:54:6c:e5:4c:b8:d3:
         6b:56:97:34:e3:4f:f0:40:92:98:16:0b:e7:00:ff:b6:a2:39:
         32:5b:da:97:a5:0e:cc:cf:9d:9e:53:42:ff:60:19:45:ef:ad:
         58:a9:9d:a5:d2:3e:78:14:55:1e:b4:57:6d:11:ce:23:7e:0a:
         78:cc:90:65:5a:d7:16:ae:cd:e0:05:6e:c7:1e:55:4b:a2:14:
         70:e5:bd:79:b6:48:c1:94:3d:a2:ad:a0:51:a4:65:3a:33:52:
         98:7f:2a:3c:96:45:e1:bf:78:89:36:bf:ab:88:e0:1f:1d:71:
         bd:b8:ef:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpbRHOH9Bmcr3Z3M6+sF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMzc4MTJiZDQ1MjczZWEzYjJhNTNkOWU5NmY2ZGJhMjE1
ODI2ZjMwHhcNMjYwODE0MTkwMDMxWhcNMjYwODE1MTkwMDMxWjAzMTEwLwYDVQQD
EyhlZWVlMzRlYTc5MzQ2OGRkMDA1ZmRkM2IyM2RhYjM0MGZjYTc5MGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbZaGWsHtTz5/x3UUNjfBB2ZF1u
27Wnc9FsqqiT1FynfqpPMYj7GCGcB/llGydfxMzgCGgtkfJPa0e+98BcGpeY4bzA
mCvuMGkrPFiISYlSR6LgLDPWLHmYVJ2LRQkJ4pDLki873rpaiZGYIoWnIUVK0kAw
ihGF4o/8/rw1vKCB0IvO4dusCl47ZkffrViq/tIVZigHdYZiebCCN8IaSvC9p4YY
p6wN0vHsB0DK0AS2XIxC8uuW62cMu+9q9QtCyFiGAhkKWCX4hwbpc6P7o1/s7ise
j0K+uM/pg4ZplJNl58nMzu2BXyXEinLU8HpKo4pVgM9wJbAproCnoyzjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7uNOp5NGjdAF/dOyPas0D8p5CiMB8GA1UdIwQY
MBaAFN43gSvUUnPqOypT2elvbbohWCbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQt
YWY2NDZjOGY0YWY2LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQtYWY2NDZjOGY0YWY2
LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPBBHx0S
i7XLJtqiW7e28ZDA+ZvbcqncSeSg9pgSsTpMmMGv3EY+0oaE/ETHRKv5Hbyd7/Yu
9NkL7v/+/R6f0S1ld6OC3KSUFqBaIWFP8zb2r9rjIQ0Rny2Fi8St+M5i49hU9EsP
K1gVKnFIfsXtmXJmGE1BMPPid1HVYPUzMSV943HYn31k517KVGzlTLjTa1aXNONP
8ECSmBYL5wD/tqI5Mlval6UOzM+dnlNC/2AZRe+tWKmdpdI+eBRVHrRXbRHOI34K
eMyQZVrXFq7N4AVuxx5VS6IUcOW9ebZIwZQ9oq2gUaRlOjNSmH8qPJZF4b94iTa/
q4jgHx1xvbjvgg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:22 2026 by rpki-client