Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File:                     9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier:          Zclsvkdy3XmuneFbIf+VHdg4/Y8DWx8zhVlPQb9LE1g=
Subject key identifier:   FE:89:89:48:D8:EC:ED:40:2C:5F:08:04:C6:9C:44:89:47:31:42:46
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer:       /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial:       01A06CB9A230790715E555E4515E62390D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number:          B3
Signing time:             Fri 04 Sep 2026 14:01:39 +0000
Manifest this update:     Fri 04 Sep 2026 14:01:39 +0000
Manifest next update:     Sat 05 Sep 2026 14:01:39 +0000
Files and hashes:         1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
                          2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=)
                          3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: ErdIrYYQJ1MfCGMe8AV/xfBHWlehgY2YwDC+ggw1wYs=)
                          4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
                          5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
                          6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
                          7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=)
                          8: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (hash: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=)
                          9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
                          10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:b9:a2:30:79:07:15:e5:55:e4:51:5e:62:39:0d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
        Validity
            Not Before: Sep  4 14:01:39 2026 GMT
            Not After : Sep  5 14:01:39 2026 GMT
        Subject: CN=fe898948d8eced402c5f0804c69c448947314246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:32:a3:45:a1:5e:fd:7f:8d:51:2b:ff:a5:
                    1b:d6:4a:9a:b9:ce:83:e4:87:24:ae:46:02:44:37:
                    e4:c0:c6:fd:5c:bc:48:d9:e1:c9:a0:1b:0f:e7:a2:
                    a2:3f:b5:ca:9d:7a:94:2b:c7:f0:4b:80:71:a9:02:
                    ae:e2:cc:50:7f:f0:cb:f9:48:86:ac:80:6e:36:6b:
                    74:da:26:06:9e:8f:6f:60:d4:1f:1f:3d:c4:98:e7:
                    a3:ec:d9:37:1d:48:52:cb:a5:71:58:ff:d7:af:15:
                    ce:3d:b8:c9:a3:87:e2:64:bb:4f:fc:2d:7f:8e:0b:
                    fe:a4:1f:5e:61:92:eb:76:b5:0c:d3:8d:7d:07:e6:
                    c0:ad:98:38:74:ed:c8:e9:4a:7d:75:1c:17:26:1f:
                    51:f9:94:04:82:13:55:8e:b9:a7:69:6a:9b:18:9a:
                    f3:ec:f2:8f:13:f9:d6:f5:ee:d2:48:ea:3f:86:55:
                    b8:74:43:36:37:8c:40:83:72:50:b7:54:9f:41:ae:
                    d6:c0:05:84:11:60:05:31:5c:ad:09:a4:31:9a:b6:
                    9a:46:7b:00:a5:12:7f:08:34:e6:d3:08:82:68:52:
                    b2:5a:dc:a4:38:c0:7b:fc:9e:53:96:ce:ea:96:05:
                    27:6b:e4:e9:c4:1c:31:11:5f:38:50:6d:bb:8b:f1:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:89:89:48:D8:EC:ED:40:2C:5F:08:04:C6:9C:44:89:47:31:42:46
            X509v3 Authority Key Identifier:
                keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:48:59:35:11:11:26:8b:c3:ff:d3:d0:63:37:8e:1e:22:72:
         39:1a:8e:90:c5:c4:7c:77:b3:74:04:3c:6c:f3:f4:0e:43:82:
         19:45:bb:24:e3:d5:2f:90:3c:0d:e5:9a:da:ed:a4:af:b2:ce:
         29:06:e2:0c:9e:cd:44:6f:43:65:18:db:00:05:a5:f5:cd:97:
         98:31:ac:01:f1:33:09:62:77:5e:ed:94:26:c9:95:7d:01:7a:
         6d:5f:13:b6:cb:2b:3a:f8:14:6b:26:de:34:84:77:67:7a:22:
         e7:51:3e:1a:15:b1:05:18:ad:71:23:81:f9:e2:44:36:1a:43:
         07:ce:21:23:a0:f2:51:91:d3:67:04:55:07:a5:7c:2c:d5:9a:
         29:b1:0c:ca:16:f0:58:ef:3d:04:68:53:f3:61:d1:df:2b:02:
         aa:37:12:18:93:58:4a:ff:ae:68:56:bd:9a:08:c2:81:84:79:
         e0:8d:86:96:b6:a2:b5:80:a8:8e:71:a8:1b:c5:c2:db:d7:0a:
         72:ee:ea:ab:89:20:26:e5:66:3a:6a:5d:01:bf:a4:a6:fc:60:
         08:9f:98:6a:71:de:39:83:92:8b:40:5b:ec:70:1c:97:f0:e3:
         27:b4:93:e6:79:46:ec:25:68:c1:d3:6c:59:c7:80:cc:c2:98:
         06:f2:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:23:09 2026 by rpki-client