Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File:                     3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier:          gYUX/Io5Q56cjWBKd298ZWBwhVz+J/ETrg+TaZ17srI=
Subject key identifier:   47:F0:71:F0:9B:FB:01:6C:4B:16:FB:D8:60:E8:81:D2:0F:F7:11:CB
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer:       /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial:       01A0016FDBD1C7D95212EF38348A9D9DAE04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number:          0E76
Signing time:             Fri 14 Aug 2026 18:01:42 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:42 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:42 +0000
Files and hashes:         1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: CCM1Gs0A1ugD2uUburRsoNakrXRvSeQJTxNN+Gm4pYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:db:d1:c7:d9:52:12:ef:38:34:8a:9d:9d:ae:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
        Validity
            Not Before: Aug 14 18:01:42 2026 GMT
            Not After : Aug 15 18:01:42 2026 GMT
        Subject: CN=47f071f09bfb016c4b16fbd860e881d20ff711cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:4b:e1:95:09:b7:a9:01:21:81:24:b6:82:
                    8d:af:63:d7:fc:55:97:c5:05:f9:6b:0a:dd:1a:d2:
                    98:97:b3:06:15:f8:af:e3:8d:51:60:1b:4a:d0:f3:
                    66:6d:83:9d:8c:9b:bc:25:5c:bf:5b:36:a3:0a:2d:
                    f2:7e:6f:41:cc:81:24:53:a7:c1:04:75:bd:a1:ca:
                    c1:f1:0a:e2:d6:1a:33:d7:70:81:8e:b9:fd:84:5b:
                    02:2c:5b:0e:56:e8:48:3b:91:0e:42:81:4d:68:6f:
                    66:29:c1:a0:f9:39:5d:4b:9e:eb:bf:b7:60:86:4c:
                    eb:50:c3:9d:e5:dd:89:41:ae:59:a1:af:50:5b:58:
                    1f:59:9e:6e:68:69:c3:55:68:4a:fc:e7:14:76:c1:
                    2d:03:57:25:f6:b0:bc:50:b1:53:e1:95:16:a0:84:
                    4d:74:5f:18:5d:c7:23:84:f5:f0:68:bd:22:9e:28:
                    28:ce:3d:7a:e7:e6:44:19:85:49:2b:34:23:34:7c:
                    88:81:c2:9b:72:9d:8a:ff:f9:de:57:5c:14:4c:3a:
                    eb:87:3b:4a:fc:b0:01:51:f1:f9:20:ec:97:8e:16:
                    58:5f:17:98:19:a9:0b:78:4f:e3:d9:87:6c:cb:22:
                    49:e0:bd:34:d9:93:20:5c:9a:8c:27:ba:fd:6a:8d:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:71:F0:9B:FB:01:6C:4B:16:FB:D8:60:E8:81:D2:0F:F7:11:CB
            X509v3 Authority Key Identifier:
                keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:1a:4c:0a:e7:06:94:a8:e3:fd:24:fb:98:f0:ce:88:be:
         75:12:6a:91:a0:f4:71:6e:d9:9c:b6:4f:87:5e:c7:cd:39:b2:
         79:ce:fa:f1:b9:71:58:b2:f2:d9:26:d2:52:9f:96:ed:9b:ea:
         01:59:bc:0b:a1:92:63:b1:8c:8d:5b:9d:81:cb:58:25:92:35:
         c1:fb:6f:bc:5e:6e:7f:4b:fb:21:79:ab:47:58:f6:4c:fb:c2:
         8e:77:19:64:77:5d:03:d7:74:86:05:26:7c:b1:ac:e1:d2:fb:
         86:e5:68:da:26:4b:42:ac:e2:c1:ca:8f:24:e9:92:91:21:d9:
         c1:59:64:32:99:e5:14:d9:16:3a:45:5b:60:0d:fe:04:48:b7:
         61:77:6e:4d:a2:d3:0c:88:a1:d3:3e:5c:1e:d5:90:6c:1a:f4:
         bf:a1:ea:1c:bf:f2:8c:2a:02:5c:4f:0f:71:2c:00:a7:d7:3d:
         85:d2:ae:84:e6:10:d1:4e:02:dc:93:f4:6e:be:51:98:61:d9:
         97:2e:5a:12:82:23:ca:c4:38:13:19:9f:5a:e4:e1:59:ce:06:
         97:91:50:05:3f:05:44:c1:ee:16:76:aa:36:9e:1b:4a:82:c4:
         5c:52:64:7d:e3:f0:5c:e1:ec:a9:0e:ea:fa:a9:6d:6f:2c:ae:
         e4:0b:e1:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb9vRx9lSEu84NIqdna4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjYwODE0MTgwMTQyWhcNMjYwODE1MTgwMTQyWjAzMTEwLwYDVQQD
Eyg0N2YwNzFmMDliZmIwMTZjNGIxNmZiZDg2MGU4ODFkMjBmZjcxMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+xL4ZUJt6kBIYEktoKNr2PX/FWX
xQX5awrdGtKYl7MGFfiv441RYBtK0PNmbYOdjJu8JVy/WzajCi3yfm9BzIEkU6fB
BHW9ocrB8Qri1hoz13CBjrn9hFsCLFsOVuhIO5EOQoFNaG9mKcGg+TldS57rv7dg
hkzrUMOd5d2JQa5Zoa9QW1gfWZ5uaGnDVWhK/OcUdsEtA1cl9rC8ULFT4ZUWoIRN
dF8YXccjhPXwaL0inigozj165+ZEGYVJKzQjNHyIgcKbcp2K//neV1wUTDrrhztK
/LABUfH5IOyXjhZYXxeYGakLeE/j2YdsyyJJ4L002ZMgXJqMJ7r9ao3wLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfwcfCb+wFsSxb72GDogdIP9xHLMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3AaTArn
BpSo4/0k+5jwzoi+dRJqkaD0cW7ZnLZPh17HzTmyec768blxWLLy2SbSUp+W7Zvq
AVm8C6GSY7GMjVudgctYJZI1wftvvF5uf0v7IXmrR1j2TPvCjncZZHddA9d0hgUm
fLGs4dL7huVo2iZLQqziwcqPJOmSkSHZwVlkMpnlFNkWOkVbYA3+BEi3YXduTaLT
DIih0z5cHtWQbBr0v6HqHL/yjCoCXE8PcSwAp9c9hdKuhOYQ0U4C3JP0br5RmGHZ
ly5aEoIjysQ4ExmfWuThWc4Gl5FQBT8FRMHuFnaqNp4bSoLEXFJkfePwXOHsqQ7q
+qltbyyu5AvhuQ==
-----END CERTIFICATE-----