Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File:                     KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier:          XxL9TktXIdeFBwPR3zygRDR4HCqRb4mSh2k3D2O0AUU=
Subject key identifier:   DD:7F:11:2F:A3:28:D5:CB:BA:BF:0A:BD:31:88:CC:B4:5D:70:30:4D
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer:       /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial:       01A0D1927926339142A6F55B28C2AA8E27DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number:          081B
Signing time:             Thu 24 Sep 2026 04:00:32 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:32 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:32 +0000
Files and hashes:         1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
                          2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
                          3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
                          4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: KLu14KwJaOQFWCB9y79R4zt66Ty9XUPNQwGFcyQoyuI=)
                          5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
                          6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:79:26:33:91:42:a6:f5:5b:28:c2:aa:8e:27:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
        Validity
            Not Before: Sep 24 04:00:32 2026 GMT
            Not After : Sep 25 04:00:32 2026 GMT
        Subject: CN=dd7f112fa328d5cbbabf0abd3188ccb45d70304d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:54:32:af:d1:8b:da:fd:a9:a7:69:70:77:
                    41:ef:31:90:e1:c8:bb:8b:be:dd:72:ba:6a:76:91:
                    81:9d:9e:12:22:25:9c:65:71:08:05:54:fe:83:c4:
                    58:a8:0c:19:7e:3e:ef:ae:f8:24:9a:b9:dd:aa:82:
                    e8:61:90:66:d7:f7:75:4b:a5:8c:10:5d:19:9d:63:
                    67:b1:97:05:8f:80:5f:c1:b7:72:2b:be:d0:72:2c:
                    9c:bd:c3:a0:37:78:26:43:2d:d8:d3:bf:e2:63:7f:
                    2d:c7:fb:58:2c:f3:4c:5e:d1:58:e7:74:8d:ae:56:
                    88:76:c2:c6:22:80:4b:16:14:0b:71:50:cc:37:29:
                    c7:5a:59:7f:d7:d1:0a:9d:11:19:a0:63:1c:39:95:
                    9a:61:b9:58:3c:74:59:57:5d:09:3e:1d:ea:5c:24:
                    f5:b1:49:03:1c:fa:bf:fd:51:a6:7e:15:3b:cd:76:
                    7f:a4:72:fc:25:48:3a:58:7b:79:33:23:0b:78:63:
                    42:c8:31:00:e5:e8:1b:64:02:40:cf:b0:29:27:df:
                    df:65:3f:e7:58:6c:2c:31:52:1f:37:a3:57:fe:c3:
                    f7:77:48:ea:e5:4a:1d:73:92:44:86:16:da:f5:05:
                    ab:d6:25:11:b3:1b:90:f4:86:21:06:dd:17:10:e5:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7F:11:2F:A3:28:D5:CB:BA:BF:0A:BD:31:88:CC:B4:5D:70:30:4D
            X509v3 Authority Key Identifier:
                keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:a4:5b:4b:c2:ca:73:79:ea:48:5f:37:46:f3:9b:f3:23:
         b3:e4:53:c7:54:a8:ba:3f:c7:8a:80:bb:b1:e9:e1:7a:5f:5c:
         50:1a:0f:56:a2:6b:bc:e6:25:bd:6a:df:67:db:67:98:62:ef:
         ca:6c:60:8d:7a:8e:1b:fb:5b:07:dc:f5:8a:db:4a:ca:75:a4:
         32:6c:74:64:5b:62:0e:4e:8d:8b:da:ba:90:64:ba:bc:47:bc:
         6a:46:2c:f8:bc:fb:36:23:04:57:5b:3e:df:b8:89:61:d1:9c:
         07:f3:36:fb:18:1c:48:10:2b:16:23:4a:4f:66:9d:5f:c7:e3:
         aa:f7:92:dd:7d:ea:0f:29:cf:0e:71:45:40:9b:bd:e0:35:46:
         26:2e:b7:e3:cd:d5:27:76:f2:49:a0:a0:da:9b:33:e5:2a:8c:
         8d:92:0d:fa:aa:0e:7c:fe:e3:46:f5:3a:b4:02:6f:2f:11:11:
         e5:cd:e9:f4:58:63:f7:34:1f:1a:84:d6:fd:00:3f:ca:bc:19:
         22:74:dc:3b:5d:7c:de:05:be:aa:08:4a:fc:40:2a:90:e9:f6:
         42:cf:ab:10:9b:75:a5:12:11:a4:68:a8:7c:3e:58:9d:5e:5a:
         2d:91:9d:02:ba:c8:8e:c3:2e:16:21:cc:df:e7:d4:d7:74:db:
         76:12:b5:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRknkmM5FCpvVbKMKqjifbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh
NTI2ZDgwHhcNMjYwOTI0MDQwMDMyWhcNMjYwOTI1MDQwMDMyWjAzMTEwLwYDVQQD
EyhkZDdmMTEyZmEzMjhkNWNiYmFiZjBhYmQzMTg4Y2NiNDVkNzAzMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruJUMq/Ri9r9qadpcHdB7zGQ4ci7
i77dcrpqdpGBnZ4SIiWcZXEIBVT+g8RYqAwZfj7vrvgkmrndqoLoYZBm1/d1S6WM
EF0ZnWNnsZcFj4BfwbdyK77QciycvcOgN3gmQy3Y07/iY38tx/tYLPNMXtFY53SN
rlaIdsLGIoBLFhQLcVDMNynHWll/19EKnREZoGMcOZWaYblYPHRZV10JPh3qXCT1
sUkDHPq//VGmfhU7zXZ/pHL8JUg6WHt5MyMLeGNCyDEA5egbZAJAz7ApJ9/fZT/n
WGwsMVIfN6NX/sP3d0jq5Uodc5JEhhba9QWr1iURsxuQ9IYhBt0XEOVVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1/ES+jKNXLur8KvTGIzLRdcDBNMB8GA1UdIwQY
MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt
MWU4MjlmZmExYzNhLzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh
LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFSkW0vC
ynN56khfN0bzm/Mjs+RTx1Souj/HioC7senhel9cUBoPVqJrvOYlvWrfZ9tnmGLv
ymxgjXqOG/tbB9z1ittKynWkMmx0ZFtiDk6Ni9q6kGS6vEe8akYs+Lz7NiMEV1s+
37iJYdGcB/M2+xgcSBArFiNKT2adX8fjqveS3X3qDynPDnFFQJu94DVGJi63483V
J3bySaCg2psz5SqMjZIN+qoOfP7jRvU6tAJvLxER5c3p9Fhj9zQfGoTW/QA/yrwZ
InTcO1183gW+qghK/EAqkOn2Qs+rEJt1pRIRpGiofD5YnV5aLZGdArrIjsMuFiHM
3+fU13TbdhK1PA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:54 2026 by rpki-client