Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File:                     kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier:          odbR8sMDGDeXzPo0R7iue+5XbuFVNL7ZQb5kFwgQUHc=
Subject key identifier:   EC:19:50:94:93:DA:A5:83:A6:BB:32:E8:24:FA:5F:69:E0:A7:1C:00
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer:       /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial:       01A0F6B27DA1487F88DB0EBE478E19005D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number:          074D
Signing time:             Thu 01 Oct 2026 09:01:27 +0000
Manifest this update:     Thu 01 Oct 2026 09:01:27 +0000
Manifest next update:     Fri 02 Oct 2026 09:01:27 +0000
Files and hashes:         1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: XfO9+VwzaaBlZ/rK8AMm7S0sG2z1z+K+UrN6m0n6uUI=)
                          2: rOZu6wYLzhNpmg8j69cWttIEmiQ.roa (hash: yuT/NXTQJjp1YdXNP2jjlInGWMr7pc0nxgMJpIJbpWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:b2:7d:a1:48:7f:88:db:0e:be:47:8e:19:00:5d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
        Validity
            Not Before: Oct  1 09:01:27 2026 GMT
            Not After : Oct  2 09:01:27 2026 GMT
        Subject: CN=ec19509493daa583a6bb32e824fa5f69e0a71c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:fc:74:c2:5e:4f:f3:8d:ad:6a:76:9b:c5:
                    49:69:4e:44:38:dd:28:3f:c9:39:d7:be:ce:c7:dc:
                    1f:14:e6:0f:52:d7:43:b2:dc:00:c4:b7:f6:7b:16:
                    37:f5:b3:c4:f2:1d:ac:d4:6e:e4:43:c3:45:2a:df:
                    f9:2e:32:60:da:2e:1b:15:e5:1e:08:9a:ba:0e:1b:
                    a1:66:0a:34:b5:4e:b2:7d:6c:62:03:4d:b7:9f:cc:
                    8c:07:30:04:83:55:56:09:ac:68:5a:78:0a:eb:53:
                    62:29:3a:2a:e6:4d:cd:1d:96:25:32:3b:c7:cb:2d:
                    4f:b9:08:84:18:f9:e7:55:59:dd:d5:32:f0:bb:cb:
                    db:c1:d2:91:4a:c4:31:8d:16:28:09:a7:70:2e:bb:
                    5c:b8:50:f3:d3:aa:1e:0e:2b:71:4a:d7:3d:1b:f6:
                    85:61:b2:ba:41:36:11:6e:d4:00:64:fc:ed:f3:22:
                    3b:94:d3:2f:43:23:8b:41:0a:02:1c:ca:70:25:a3:
                    e6:05:25:4c:60:6a:ac:eb:f3:93:d4:ba:29:52:26:
                    34:3c:88:95:8e:07:e0:56:f5:d7:37:29:60:e8:6c:
                    ce:bf:4f:c2:76:5e:f2:62:94:8f:19:a9:1e:50:57:
                    c1:cc:1c:31:60:73:05:a3:e5:ad:c4:d1:08:80:ec:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:50:94:93:DA:A5:83:A6:BB:32:E8:24:FA:5F:69:E0:A7:1C:00
            X509v3 Authority Key Identifier:
                keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0a:dd:a1:0b:90:73:09:42:b3:2f:41:01:f7:c0:30:76:ef:
         47:83:e4:35:7f:b0:95:66:a4:75:9b:ae:56:c4:15:25:ca:a9:
         97:9f:69:58:25:00:e3:01:66:75:af:c4:17:d2:60:cd:9f:0d:
         a6:c0:33:89:dd:d7:d7:77:93:91:61:8b:8d:71:7b:76:4e:a6:
         e3:10:1a:bd:4d:2c:d5:d1:75:ee:44:5b:c2:25:65:00:0c:1f:
         1d:37:ff:c4:7d:84:fc:82:59:75:83:39:c3:d9:e3:c5:d9:19:
         4c:7c:d0:34:7e:ea:aa:ea:c3:08:8c:96:63:89:80:a4:86:24:
         77:92:c9:40:ba:26:ea:ab:d8:85:9a:6a:04:ce:d1:b0:72:09:
         63:7a:f5:58:28:62:23:42:b8:35:da:41:f0:f4:bf:8b:9a:f5:
         60:cf:36:25:e1:a4:59:6b:28:f1:71:80:b0:f8:fc:9d:1d:dd:
         80:4a:e1:48:ac:36:b0:d4:7a:eb:ae:f7:53:39:ad:77:7a:86:
         3a:a3:5f:b7:bc:2b:83:83:3d:64:c0:46:a7:d1:fe:d1:4b:0b:
         b6:39:86:59:65:06:e6:82:c7:fd:21:2d:5b:aa:3a:d0:e2:a9:
         16:eb:54:29:c8:f0:89:6c:a7:4c:76:a2:2b:b2:07:a0:12:1d:
         8f:28:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:57:44 2026 by rpki-client