Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          rbjIgXmXFqdlyEs2JJwr/9tUxkiBpLeriPBR676mZEc=
Subject key identifier:   0B:C0:14:FA:52:70:30:CB:13:56:67:98:00:41:44:19:46:8B:0B:5B
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       01A0DC8555013FBDAD85E7C5D721BE28C919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          0746
Signing time:             Sat 26 Sep 2026 07:02:00 +0000
Manifest this update:     Sat 26 Sep 2026 07:02:00 +0000
Manifest next update:     Sun 27 Sep 2026 07:02:00 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: Qk0MT5BZuPeAUGvl09akbCaujHjbU+mnc8jg9GBd3VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:55:01:3f:bd:ad:85:e7:c5:d7:21:be:28:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Sep 26 07:02:00 2026 GMT
            Not After : Sep 27 07:02:00 2026 GMT
        Subject: CN=0bc014fa527030cb1356679800414419468b0b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:a0:09:da:66:c1:36:44:6c:46:e6:71:c1:
                    59:b0:b7:89:32:d2:d4:7c:28:a6:3b:a7:d6:75:65:
                    04:b4:68:bf:d6:03:01:e4:f2:08:13:d2:9a:98:43:
                    da:39:03:ab:9c:66:be:c2:ee:1f:75:55:0e:80:81:
                    bd:65:14:a0:de:9c:46:3b:e7:ab:8a:cd:2f:24:35:
                    81:5a:f7:29:ec:8a:cd:77:0b:ff:d4:f1:25:79:f9:
                    5c:0b:fe:da:a7:6e:2c:8f:e4:b1:35:5d:64:44:10:
                    22:32:4f:aa:c5:8c:54:86:04:85:1d:ea:20:19:a2:
                    a4:a6:d6:35:95:37:f8:8f:3c:92:4b:59:67:0a:d7:
                    e7:e3:64:a1:f0:da:26:e8:0b:33:f2:84:47:b9:6e:
                    69:9d:d4:45:c6:f8:e3:98:47:32:52:03:bf:bf:3f:
                    07:63:49:a7:80:a6:9c:e6:89:e2:47:be:8a:e9:01:
                    98:00:a2:6f:bc:5f:f1:2f:a0:bf:df:9f:a5:a3:6f:
                    6a:9a:9a:3c:31:c6:60:99:10:a8:a8:74:2f:ff:31:
                    92:7d:56:3c:fe:22:6a:4f:87:2f:9a:05:80:c5:91:
                    34:09:d8:50:f5:2f:72:a2:07:bc:09:84:e7:1c:06:
                    d2:9c:c4:53:84:82:e0:29:4a:cd:b0:63:c2:f8:8f:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:14:FA:52:70:30:CB:13:56:67:98:00:41:44:19:46:8B:0B:5B
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:83:77:2e:ca:71:dc:da:fa:72:f5:10:e8:14:a9:9b:0b:
         fa:31:50:32:a7:07:a7:7d:9b:87:5d:2f:0c:10:a0:ca:3a:ee:
         98:29:ae:45:fe:6c:7d:c2:8c:9c:cc:ff:8b:21:b2:df:c4:73:
         a3:32:89:fe:a2:5f:e8:f8:10:0b:5f:3c:93:ed:a4:db:b4:3c:
         e9:57:23:d0:dc:37:00:b4:d6:ba:ab:c7:87:7e:04:96:8b:a8:
         d5:04:99:de:78:78:51:f9:f8:59:6b:09:ef:fe:e5:c7:90:1d:
         d4:fe:58:fb:a8:c7:53:c6:39:03:0c:65:16:4d:8b:8a:59:ce:
         11:35:f9:4e:79:e1:0e:5d:8b:87:4f:ac:45:20:5d:e9:2c:15:
         bc:33:3c:41:8b:99:96:6e:50:25:6f:1d:aa:cc:4b:e4:3b:ff:
         04:f1:01:9c:8e:40:34:61:7d:24:94:3c:90:51:38:41:d4:be:
         2c:ab:11:ed:91:05:31:2e:03:ec:b9:8d:54:83:db:70:a1:84:
         b6:37:4d:06:6a:64:0d:74:1f:63:76:3f:d5:64:a8:28:45:72:
         3d:b6:d3:bc:69:a7:44:02:fa:25:3d:68:f0:83:d7:7e:90:17:
         bb:38:28:f9:54:48:95:df:95:16:ed:ef:60:a8:8a:5a:50:1f:
         8e:98:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:12:59 2026 by rpki-client