Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
File:                     3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft (raw, json)
Hash identifier:          11xbRYVrrsDXnQ6sfrDlvipQjYT27TWtdiq2n4ZT3aY=
Subject key identifier:   43:B3:A5:62:09:3F:ED:F5:71:44:EC:69:D2:BB:8B:F3:E9:A5:89:DC
Authority key identifier: DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4
Certificate issuer:       /CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
Certificate serial:       01A04017A8812CFD676818D714E1F57360AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
Manifest number:          011B
Signing time:             Wed 26 Aug 2026 22:01:27 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:27 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:27 +0000
Files and hashes:         1: 3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl (hash: n225VL4guYpzuvbO6gDOCECxtAj4YhZnP+0dRdaMkic=)
                          2: uVFPp5kgmxZiZ6LoftbDP414XHc.asa (hash: LB9vzgvEJxcEb1WaanSRFRa5GPgjhrGmFrkvoXrEy9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:a8:81:2c:fd:67:68:18:d7:14:e1:f5:73:60:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd64c9c6ce8a7b7e955084755e853d4d6aa180c4
        Validity
            Not Before: Aug 26 22:01:27 2026 GMT
            Not After : Aug 27 22:01:27 2026 GMT
        Subject: CN=43b3a562093fedf57144ec69d2bb8bf3e9a589dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:b3:d4:93:48:22:2a:5e:1e:b1:ac:b4:df:
                    e4:c7:be:35:5e:04:d4:4f:2f:31:29:b4:48:85:f1:
                    11:3a:86:1e:ba:d3:0f:70:f3:34:e6:d8:be:44:a9:
                    5d:ae:b1:b4:a4:99:08:2d:2f:f0:d0:9f:85:f1:1e:
                    f1:ae:86:90:36:d6:fb:34:85:b8:21:eb:62:f6:63:
                    33:f8:d1:2d:bc:36:a6:94:08:99:86:05:6d:bd:bb:
                    38:c3:91:4e:e3:11:dd:5b:b7:46:84:34:9c:76:d3:
                    2d:5d:f4:80:42:e4:fd:84:67:4c:63:c4:1a:ca:9d:
                    66:4f:03:ef:86:19:e4:77:0c:e7:47:a1:08:ce:8b:
                    40:53:d5:84:d0:cf:80:2e:56:1a:e9:53:a8:77:02:
                    99:c9:e2:82:17:1d:3a:2a:8d:29:04:de:80:f3:9a:
                    0f:bf:e6:69:60:21:82:67:b3:ad:c6:a6:99:da:75:
                    88:43:8c:67:fa:a9:e9:a4:52:89:41:a1:cf:89:63:
                    b6:fb:10:d8:fd:80:ab:2d:86:08:c0:2a:da:d8:af:
                    99:0c:c7:16:2c:e4:c8:a9:b2:6a:f4:c3:35:cf:6a:
                    4b:bf:29:0e:ed:46:fb:1f:49:f9:f4:56:2c:53:97:
                    9d:bc:ad:cd:4c:bf:30:f1:d9:35:07:6a:56:87:c5:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B3:A5:62:09:3F:ED:F5:71:44:EC:69:D2:BB:8B:F3:E9:A5:89:DC
            X509v3 Authority Key Identifier:
                keyid:DD:64:C9:C6:CE:8A:7B:7E:95:50:84:75:5E:85:3D:4D:6A:A1:80:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dba921-90c8-45c6-9580-1a5b3e4283e1/1/3WTJxs6Ke36VUIR1XoU9TWqhgMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:33:60:4b:31:d9:d7:2f:78:b9:6b:59:07:01:b0:cb:9c:91:
         bb:6e:ea:9c:78:ce:63:0d:10:cb:24:62:0e:15:40:db:2a:d4:
         85:98:02:29:ce:49:c7:97:b9:53:dc:e2:a4:99:b3:62:cc:37:
         01:73:56:ca:f9:95:e2:3d:48:46:f9:cf:e7:9c:a4:dd:f6:34:
         32:2d:c3:55:3a:4f:e8:b1:19:85:e5:92:e6:70:f3:24:f3:02:
         44:08:8e:d5:9a:58:05:f3:00:fb:cd:95:80:8c:10:67:ad:68:
         3e:b5:b8:81:1a:d8:fe:91:a1:5b:3d:37:c8:d9:11:8e:dd:73:
         58:80:9c:bc:84:86:5d:7f:ac:8e:72:1a:94:30:bc:be:f8:a9:
         8f:4b:e1:70:f1:ea:ba:d6:6c:6a:b5:79:ab:2a:69:f3:98:2e:
         75:83:06:88:2b:5c:ac:2b:f7:bc:33:08:69:01:68:44:7a:9b:
         c9:c2:f5:33:e4:4a:1c:2a:6b:c7:07:22:50:db:bb:8e:ea:10:
         51:14:fe:4f:66:bb:06:b0:82:87:78:b2:3e:38:8c:33:e6:88:
         e6:fb:fb:7e:3e:9d:a5:e9:8e:aa:20:1b:7a:55:1d:aa:63:d6:
         78:ae:e6:ce:11:44:86:f4:66:3e:58:c6:60:a5:56:36:5c:25:
         4c:81:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:35 2026 by rpki-client