Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File:                     3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier:          oFwyDtq2GLU9nINCe27LU/dBWrerDWbmpEoQORhFCTE=
Subject key identifier:   F2:90:87:E3:C6:09:44:09:E3:07:EC:1E:13:84:03:29:93:04:AC:BD
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer:       /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial:       01A00138405D02E259F9B4E49D2FD4CBEEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number:          1137
Signing time:             Fri 14 Aug 2026 17:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:58 +0000
Files and hashes:         1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: PcJPxjKzJpZcq0j1iSszuZJ56vwlyTgKJz/kpkzIfy0=)
                          2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
                          3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
                          4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:40:5d:02:e2:59:f9:b4:e4:9d:2f:d4:cb:ee:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
        Validity
            Not Before: Aug 14 17:00:58 2026 GMT
            Not After : Aug 15 17:00:58 2026 GMT
        Subject: CN=f29087e3c6094409e307ec1e138403299304acbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:9c:3f:aa:3b:63:01:67:eb:31:91:42:d8:
                    1c:9a:1d:ec:42:e1:88:0a:e2:dc:00:27:bc:4f:66:
                    4b:85:22:05:c3:54:74:28:ed:79:11:ea:ef:71:b1:
                    1e:2e:4e:93:f3:ce:ca:03:d3:09:50:85:bf:9f:3d:
                    36:99:24:bd:f6:2f:0b:49:7b:02:50:28:b6:b1:db:
                    59:3e:42:19:93:e1:69:16:3b:ea:9d:bb:f1:c8:89:
                    0e:79:ad:a6:6d:0b:c6:37:d7:f4:e3:9d:d4:95:e8:
                    bf:94:be:ea:28:1b:dc:50:61:b8:25:16:c9:79:3c:
                    5f:20:1f:6d:45:ff:c8:68:36:fc:f8:a0:de:6e:08:
                    f0:ec:06:bf:b8:81:66:f9:bb:40:10:8e:c2:90:5e:
                    e8:72:a8:09:56:d4:7f:34:8f:68:af:65:6b:dd:8f:
                    ca:82:ba:34:d2:89:bb:33:b5:b4:2d:ae:c9:1e:68:
                    d8:c4:43:6b:01:26:fb:59:64:a5:f8:8b:68:22:5f:
                    77:c3:67:84:95:94:95:a2:db:d2:d0:c5:bd:d8:a1:
                    39:b5:37:2a:45:48:63:86:c5:be:68:6d:7e:8d:67:
                    8a:7d:b5:54:a0:22:8b:92:96:43:17:ef:fa:53:fa:
                    bf:5e:b3:fa:ca:df:99:88:12:28:ab:46:1e:25:58:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:90:87:E3:C6:09:44:09:E3:07:EC:1E:13:84:03:29:93:04:AC:BD
            X509v3 Authority Key Identifier:
                keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:aa:81:09:11:80:e3:72:4d:bc:a6:8c:b3:cd:39:cb:b3:
         e4:27:ac:a2:c4:a2:4a:1c:e8:ae:58:84:98:5a:5c:d6:41:3b:
         86:ce:43:74:b2:f5:54:99:15:a5:bd:56:87:c8:41:8d:ae:72:
         9e:45:9e:b1:06:5a:1d:d6:1a:14:ca:af:56:02:04:0e:f5:ad:
         d7:e8:4a:6e:0d:c7:63:6e:ae:e9:08:87:ae:01:1c:74:81:51:
         c8:65:1d:e8:69:e3:0a:c0:ad:5b:4c:7a:37:44:9c:06:1f:ef:
         8e:46:b2:28:8f:3e:90:50:af:ed:e8:bb:f4:ba:05:5e:1b:33:
         28:03:70:e0:ad:5b:48:16:13:92:23:90:79:87:24:d9:15:ee:
         47:c8:10:62:51:b3:43:29:8c:1e:05:1c:e6:f6:c5:da:2e:c9:
         5c:b1:af:a5:d5:96:fb:d9:75:83:38:32:13:2d:cc:48:25:d1:
         83:c1:cc:bb:24:99:e9:e3:0c:d4:9c:a2:a8:20:68:e2:a3:14:
         14:24:a9:fa:84:47:d7:d0:84:e3:57:ee:5b:3c:b8:12:02:6d:
         6b:e0:43:4d:df:f3:78:67:57:d0:fe:6b:6f:84:3e:df:c3:65:
         e7:8a:90:92:82:fc:10:29:27:e1:b7:73:bc:0d:27:b7:db:71:
         fc:6d:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:57 2026 by rpki-client