Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File:                     ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier:          CYT6wRTSu14quKbKe1TrYEA5xR92S1RnPgQMfx1AgCI=
Subject key identifier:   60:5E:0F:D7:F3:23:02:ED:B3:3C:90:20:D8:56:3F:C5:DB:90:30:B1
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       01A0D426ACB612358F23F05F8BCD3CB7C49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number:          19FF
Signing time:             Thu 24 Sep 2026 16:01:39 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:39 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:39 +0000
Files and hashes:         1: fmRq58mpG0rKIM2ubHEkVCGj3lg.roa (hash: gms/i5htVsFqQUspRwp2t/v4bZzOX6eOsTh27/wJ/To=)
                          2: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: eK2WT3HiMy5bqwzHK7Z4nzn81FWXpE8khonnZBNjslo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:ac:b6:12:35:8f:23:f0:5f:8b:cd:3c:b7:c4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: Sep 24 16:01:39 2026 GMT
            Not After : Sep 25 16:01:39 2026 GMT
        Subject: CN=605e0fd7f32302edb33c9020d8563fc5db9030b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:c6:2f:f6:db:0e:1d:e9:75:8c:13:d7:04:
                    92:c1:2a:6f:46:5d:7f:24:73:9b:e1:e7:96:00:66:
                    ea:aa:7a:3b:ad:44:12:59:04:4b:a9:f3:8b:f0:d5:
                    f4:b6:eb:51:42:f7:22:5c:ef:4c:45:75:12:7a:da:
                    b7:0d:b0:b9:ca:59:84:3f:ad:94:65:3c:8b:7e:71:
                    98:1b:93:56:2b:15:d8:a6:af:78:b1:19:93:8f:36:
                    d9:26:22:11:fc:80:1b:9e:81:dc:40:f4:2c:c9:2f:
                    76:6e:ff:1f:3d:95:43:b7:80:b3:cc:d0:97:19:99:
                    67:f4:5d:fa:70:e5:62:47:1d:e6:e9:7b:ad:58:0d:
                    cc:23:b8:63:73:1e:0a:f1:d0:02:eb:69:1c:4c:5c:
                    90:06:6f:fa:d6:38:8a:bd:1a:96:56:75:0f:d8:0d:
                    eb:9f:5d:5d:01:bc:f2:75:2c:3c:cf:5f:77:89:42:
                    ab:ae:7f:87:84:63:7f:c0:21:b7:c1:e0:27:71:7d:
                    7f:b7:9c:ff:5f:ca:d3:6b:d6:3f:df:87:ac:ae:1b:
                    40:4b:bb:2a:f1:43:22:8e:45:81:08:d8:be:88:22:
                    0a:9c:3e:29:52:fc:5d:79:9c:65:0f:2b:79:0f:7a:
                    9d:63:8e:80:fb:9f:03:ad:8e:9c:e0:32:dc:0e:d5:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:0F:D7:F3:23:02:ED:B3:3C:90:20:D8:56:3F:C5:DB:90:30:B1
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:be:68:3c:87:76:74:4a:de:cb:e1:36:ea:ae:48:6a:fc:0e:
         f0:5d:ac:38:97:dc:7e:e8:8b:36:e7:01:ee:f2:a3:60:8b:ae:
         bd:46:06:c4:22:68:12:47:9b:25:13:3b:db:25:f2:a7:7b:60:
         0a:4e:c2:81:c0:78:0b:67:15:6e:e5:30:8f:b4:a0:83:37:24:
         11:ec:41:92:e7:c1:d5:5f:cd:39:4e:70:d6:79:9d:b6:94:f1:
         62:ec:e4:63:69:3f:b2:90:8e:ce:95:1e:81:58:da:4e:17:65:
         1c:08:b4:68:10:fd:b6:b7:11:a8:89:0b:54:8a:2b:12:98:3e:
         84:bd:83:e1:be:f8:46:37:70:58:f1:9d:17:38:68:8b:bf:60:
         1e:7b:bb:0b:4a:2a:d2:6c:a5:85:8a:b4:37:c6:a3:8b:88:07:
         77:a7:10:0e:ed:c3:31:24:bf:e0:f8:f1:2b:6e:8b:e1:d6:a1:
         dc:00:97:83:e6:73:a9:06:f6:8c:cd:d3:69:92:67:4f:ba:9f:
         b7:a7:82:1a:89:b1:6a:7d:b8:75:e6:1f:4f:e2:70:c1:37:4e:
         96:b1:1e:0b:c0:95:d0:26:fd:d0:67:9b:df:ff:cf:ee:49:d7:
         2f:7d:f9:8d:f5:79:48:92:1f:15:83:6c:1c:d8:e8:30:90:31:
         57:6a:6e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:35 2026 by rpki-client