Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File:                     kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier:          ee9EN/xdzfLB8xUmSrAr7QbeLyCkci7/H3iF4jhO50w=
Subject key identifier:   C7:B2:45:56:06:4C:D0:A9:73:AE:F4:D4:EE:65:CB:45:3F:F4:31:9F
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer:       /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial:       01A0D34B33931A499AA8318709B7A8EBC790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 12:01:55 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:55 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:55 +0000
Files and hashes:         1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
                          2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
                          3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
                          4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: QNeA8xDypF5jN17qepkKXwymMR/gVXivUwbLqYHMXVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4b:33:93:1a:49:9a:a8:31:87:09:b7:a8:eb:c7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
        Validity
            Not Before: Sep 24 12:01:55 2026 GMT
            Not After : Sep 25 12:01:55 2026 GMT
        Subject: CN=c7b24556064cd0a973aef4d4ee65cb453ff4319f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:20:1b:46:00:3e:b1:21:5d:f2:84:1e:f5:
                    a1:0e:b9:ef:0c:36:86:0b:6f:24:e4:61:92:18:a6:
                    f4:de:76:c9:e8:2f:8c:b0:47:cb:9b:f7:0d:7a:28:
                    98:ed:34:63:72:82:a1:25:92:a2:e5:53:c0:ff:d0:
                    27:aa:d4:88:91:b8:ab:33:4c:cf:ed:07:d4:6e:56:
                    5c:68:d7:0c:c6:bf:6f:1d:61:96:98:24:aa:01:7c:
                    5f:b8:71:f5:88:d5:01:6b:ae:93:6b:75:5c:62:10:
                    c5:48:c9:88:0b:b3:fc:28:e8:9e:b2:8f:a3:70:d3:
                    b1:8e:ba:4a:29:e7:f3:6d:02:6c:1c:f1:e0:dc:67:
                    65:0a:17:00:ee:97:1c:00:47:d8:74:8d:cb:27:19:
                    2a:97:a9:a9:35:db:ee:f8:ae:43:6a:4e:54:c1:5c:
                    75:1c:89:35:a1:14:9b:c1:b2:16:dd:ba:f4:e2:45:
                    de:09:73:65:54:92:60:01:37:31:98:85:4e:39:53:
                    a8:9b:29:f7:8f:9c:00:b1:20:63:b0:18:08:5c:1b:
                    8f:ba:e5:b0:62:f5:70:20:df:e5:b1:6b:13:1f:ba:
                    30:f5:1a:33:03:bd:58:f5:cf:48:91:59:04:3d:5b:
                    94:f1:e4:0e:9b:18:6f:6d:c2:c4:3b:ff:b4:83:c7:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:45:56:06:4C:D0:A9:73:AE:F4:D4:EE:65:CB:45:3F:F4:31:9F
            X509v3 Authority Key Identifier:
                keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:11:ef:20:73:14:6a:fb:8f:68:2b:17:42:cd:91:e2:ea:
         20:04:c4:94:cb:f0:b4:ad:b6:38:74:5a:d3:88:db:f9:e8:a2:
         19:96:7b:6a:51:01:d6:fe:d1:d8:d9:c5:4a:69:39:4b:d8:69:
         36:f7:bc:b8:32:7a:7e:02:25:2b:ad:b0:90:e7:aa:ce:5f:24:
         a3:85:b4:ca:11:8b:95:9f:c2:2b:3d:5c:83:a7:2a:02:fe:3e:
         29:b3:2e:e2:0f:a7:d8:15:68:d9:a8:70:72:0a:24:43:e5:e9:
         74:9c:cf:24:b9:e7:7c:bd:99:58:2f:45:95:63:69:cd:aa:cd:
         e9:dd:99:9a:45:d5:5e:49:dd:d1:f5:83:06:43:08:4d:57:b3:
         f4:c7:8b:50:06:92:30:a0:f7:c9:51:fc:82:38:04:dc:4a:39:
         f5:6f:0a:60:15:16:75:24:c8:92:41:79:4e:ee:93:0e:49:33:
         df:5e:b5:ca:58:1a:a7:21:65:a1:e0:43:79:3c:4c:bf:2c:b0:
         b0:f0:4b:8e:ea:43:79:28:7f:5b:9a:71:c8:56:2e:61:93:fa:
         e7:62:a2:b4:f6:83:78:39:1e:af:84:6e:c7:4e:29:9a:57:aa:
         c7:d4:79:9a:87:9a:04:5b:97:9e:8a:bd:b1:b1:fd:02:29:09:
         67:62:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:26:11 2026 by rpki-client