Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File:                     3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier:          iFrIvY8iQ3NfAnEFTDeZmvOST5DW27P83QasqtU1I2E=
Subject key identifier:   46:2D:3B:A8:C1:C4:4A:1A:99:42:43:D9:96:38:C0:FD:E8:DA:C5:76
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer:       /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial:       01A0AFAB5D0B1732E5B0AB278577C2BD1EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number:          1A6F
Signing time:             Thu 17 Sep 2026 14:00:38 +0000
Manifest this update:     Thu 17 Sep 2026 14:00:38 +0000
Manifest next update:     Fri 18 Sep 2026 14:00:38 +0000
Files and hashes:         1: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (hash: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI=)
                          2: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: P4aTU0uUPBpwR7EtZv6fF36V6BAn3XYvQpN3kmwYTv4=)
                          3: K3l-f-R4fzp0JNI40Ow_kAwQElE.roa (hash: lzT7cfBjG064YjxJ7JvC+eelDCQdNhykEA7ZwxG3cvA=)
                          4: PKWl5L-Kf_6-uLjkK3IrLmDHIJ8.roa (hash: a8KnYbin0YfzPy81a2Ft5OJRitrpc3uTgAStWm8odkA=)
                          5: WVGS-uOqCUSz2p_N5CL2Cz4z-K0.roa (hash: IB5UKLk0ZZT7DbiIeOg9ZlXwRRXDT147MF0fykJ8TKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:ab:5d:0b:17:32:e5:b0:ab:27:85:77:c2:bd:1e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
        Validity
            Not Before: Sep 17 14:00:38 2026 GMT
            Not After : Sep 18 14:00:38 2026 GMT
        Subject: CN=462d3ba8c1c44a1a994243d99638c0fde8dac576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:ab:e8:50:b5:62:aa:ac:84:3b:ba:fb:21:
                    ce:48:e9:30:d6:2b:7d:29:40:73:00:65:f0:dd:42:
                    bf:93:15:58:cc:09:e7:45:16:60:8e:62:02:50:ae:
                    14:0b:ec:0a:53:9d:18:6f:4d:8a:15:98:45:9b:43:
                    1c:2e:28:0b:0d:85:d8:5f:cd:06:ab:05:f8:73:57:
                    36:a5:26:16:f0:27:f9:c3:fa:5a:66:22:12:5f:6f:
                    96:56:48:94:2e:92:d1:da:d9:ab:be:9c:1b:14:cf:
                    04:34:5e:f2:e9:26:56:bf:e0:84:63:0f:64:65:44:
                    13:e2:ad:59:6f:5a:1e:f0:a9:e3:e6:f9:b0:1d:c0:
                    d2:2c:52:14:bd:3e:89:00:20:38:d0:91:7e:d4:43:
                    03:30:89:5d:c6:fe:b7:d3:91:05:84:4a:87:f0:21:
                    72:58:cf:77:5d:b3:b4:ae:a1:71:9b:93:5d:7f:65:
                    2a:9e:2a:6b:44:2a:88:59:38:ca:b5:d8:50:a5:43:
                    55:8b:8b:4a:eb:aa:6a:e8:d0:8a:a8:17:2f:ee:26:
                    78:e5:2e:69:d0:7b:0e:2b:a0:3a:79:f2:11:98:f4:
                    e3:d2:3b:7f:4b:49:52:7f:01:f9:59:05:c6:38:65:
                    96:01:a8:93:16:50:9e:6e:0e:50:16:6b:04:34:ba:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:3B:A8:C1:C4:4A:1A:99:42:43:D9:96:38:C0:FD:E8:DA:C5:76
            X509v3 Authority Key Identifier:
                keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:94:64:3e:52:99:aa:40:f5:c6:fe:5d:b2:1b:90:9a:f7:90:
         df:13:4a:c9:e6:70:21:ac:98:b1:7e:72:51:6e:09:14:aa:9b:
         94:be:e9:ee:67:5a:30:0f:63:d5:6e:b0:b0:87:95:6a:b3:c8:
         e5:14:65:87:04:96:5b:51:04:2f:fb:73:58:25:ed:83:d7:31:
         8e:1f:a3:d8:2f:58:0c:a2:b8:29:f5:f9:a1:25:ec:cd:11:e6:
         5e:10:e6:c9:cf:df:12:76:51:ee:72:4d:7b:10:6d:10:11:a4:
         60:3c:64:23:fc:c1:42:37:cb:e6:3c:3d:86:e1:b8:2a:ec:e5:
         4a:5f:60:6f:18:7a:24:41:7c:74:7c:f1:8a:84:e5:d4:e8:eb:
         86:8d:b0:a0:44:bd:18:a4:8e:10:00:8c:33:e8:a0:86:94:dd:
         b9:6f:9b:70:0e:9b:80:04:a5:4e:9e:0f:c7:6b:5b:a5:d4:57:
         8e:f1:88:3e:75:5c:7d:7c:aa:d0:57:e9:0a:e9:6f:83:b2:96:
         f0:31:3a:72:26:b1:89:96:a4:e0:62:8d:02:f2:4f:83:79:8c:
         d5:9a:d0:fe:41:34:d0:d2:5e:1b:fa:e4:f9:ee:30:ba:45:5c:
         90:60:fa:b3:4a:47:ba:c0:da:10:10:08:43:38:0d:2f:65:14:
         24:c5:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:01:19 2026 by rpki-client