Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File:                     Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier:          DGhAgfa2rEBvoQebrGPp/KmvojTTGZHX2sSgtBdWhos=
Subject key identifier:   1F:46:BA:19:03:A7:D6:14:AC:27:26:55:1F:57:BC:EC:84:62:83:48
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer:       /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial:       01A0CAEB3446B4ACAAC363F3DC2A2B54D77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 21:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:07 +0000
Files and hashes:         1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: pn9qXLTrAZeYLYmwL07SvZHYRkquhK1FP0h8zn7tgew=)
                          2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:34:46:b4:ac:aa:c3:63:f3:dc:2a:2b:54:d7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
        Validity
            Not Before: Sep 22 21:00:07 2026 GMT
            Not After : Sep 23 21:00:07 2026 GMT
        Subject: CN=1f46ba1903a7d614ac2726551f57bcec84628348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:bd:a6:3e:f7:d2:6a:0b:87:08:24:1b:6f:
                    ba:de:39:0e:94:db:07:c6:a3:86:73:42:c0:9b:d9:
                    83:ce:74:35:4e:f0:7f:7d:57:ec:62:77:40:a7:b3:
                    35:39:bf:52:02:46:bc:60:08:e0:8f:31:25:93:6d:
                    ca:70:fd:77:71:12:03:89:1d:12:10:3d:95:59:f2:
                    01:54:1e:67:9c:ba:ab:53:6a:d4:6d:4a:09:d3:df:
                    4b:41:41:74:90:7a:85:55:95:3f:9f:e1:b9:9c:14:
                    d4:9f:e3:e5:66:ea:07:37:82:57:b3:21:c2:93:a8:
                    57:0a:cc:e1:3a:86:7c:8c:71:43:c6:2a:06:23:9d:
                    f4:4d:50:6e:6d:24:a6:05:ee:f8:c3:21:71:d4:a0:
                    6d:bb:ca:a3:7d:9f:f2:21:e0:49:c3:bf:47:31:03:
                    bf:ca:36:12:56:43:8c:15:37:19:c9:d3:d6:99:5a:
                    d8:64:59:2e:0a:f9:6d:bb:49:f3:88:ce:2f:a4:bb:
                    71:f7:a9:02:28:2e:8d:6f:84:ef:8c:64:2b:1b:91:
                    b6:0b:c6:dd:a4:ce:aa:41:f5:49:3f:7a:a2:d7:a4:
                    7e:e5:50:d9:57:7b:6b:f2:21:dd:be:5e:e4:e1:c5:
                    0b:6e:cd:b7:aa:91:f4:8b:3d:92:5b:c7:eb:c4:9b:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:BA:19:03:A7:D6:14:AC:27:26:55:1F:57:BC:EC:84:62:83:48
            X509v3 Authority Key Identifier:
                keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:7a:9e:9f:8f:84:12:01:b5:ee:b5:93:0b:d3:e1:67:88:
         ce:1b:91:ba:a2:e7:99:13:a5:99:db:98:42:32:3b:4d:3d:fa:
         56:76:0a:9e:61:b4:e6:16:e1:82:c8:2e:a2:be:2b:e8:b5:9d:
         a3:78:32:ad:77:4b:e8:12:6a:fc:ab:ef:90:6c:43:06:98:ab:
         a6:bb:04:19:e0:b1:01:ae:30:62:9e:1c:b3:91:bc:0c:62:11:
         6d:43:fc:d7:31:06:05:00:3e:2e:f8:38:ec:5d:1d:44:cd:1d:
         ba:e2:0f:a1:17:75:86:8d:2d:01:e2:3f:7f:a8:88:ba:2a:d3:
         89:43:09:aa:f3:a0:c6:94:3b:63:63:c3:6b:7b:b3:06:6c:90:
         5a:ac:1a:39:eb:d3:a6:64:31:75:30:d3:9e:31:4d:50:3a:4a:
         c0:76:e0:49:78:c7:c3:ba:e2:5c:e2:ac:3f:cf:6f:c5:bd:c9:
         a0:46:2a:96:53:7e:aa:19:8c:8d:eb:bf:91:4b:af:ac:1e:bc:
         3a:7c:23:6b:23:4a:26:e7:38:68:c2:83:b8:53:ff:07:7c:e2:
         87:ad:7e:83:d8:70:b6:1c:6b:58:b6:cb:3d:68:02:81:2b:35:
         e6:12:5e:c2:d4:67:83:35:15:8f:58:d1:28:a2:95:cc:a2:1e:
         3a:53:26:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK6zRGtKyqw2Pz3CorVNd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGU2YTdiZGIxMWM0ZmZkNzc3MTgwODE1MTBjOTE0MzEx
NzhjZGIwHhcNMjYwOTIyMjEwMDA3WhcNMjYwOTIzMjEwMDA3WjAzMTEwLwYDVQQD
EygxZjQ2YmExOTAzYTdkNjE0YWMyNzI2NTUxZjU3YmNlYzg0NjI4MzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotm9pj730moLhwgkG2+63jkOlNsH
xqOGc0LAm9mDznQ1TvB/fVfsYndAp7M1Ob9SAka8YAjgjzElk23KcP13cRIDiR0S
ED2VWfIBVB5nnLqrU2rUbUoJ099LQUF0kHqFVZU/n+G5nBTUn+PlZuoHN4JXsyHC
k6hXCszhOoZ8jHFDxioGI530TVBubSSmBe74wyFx1KBtu8qjfZ/yIeBJw79HMQO/
yjYSVkOMFTcZydPWmVrYZFkuCvltu0nziM4vpLtx96kCKC6Nb4TvjGQrG5G2C8bd
pM6qQfVJP3qi16R+5VDZV3tr8iHdvl7k4cULbs23qpH0iz2SW8frxJu8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9GuhkDp9YUrCcmVR9XvOyEYoNIMB8GA1UdIwQY
MBaAFCsOanvbEcT/13cYCBUQyRQxF4zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2Mt
YzRmZWJjM2Q2ZTUyLzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZDIzOGUtYjMxYy00ZWEwLTk4Y2MtYzRmZWJjM2Q2ZTUy
LzEvS3c1cWU5c1J4UF9YZHhnSUZSREpGREVYak5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg16np+P
hBIBte61kwvT4WeIzhuRuqLnmROlmduYQjI7TT36VnYKnmG05hbhgsguor4r6LWd
o3gyrXdL6BJq/KvvkGxDBpirprsEGeCxAa4wYp4cs5G8DGIRbUP81zEGBQA+Lvg4
7F0dRM0duuIPoRd1ho0tAeI/f6iIuirTiUMJqvOgxpQ7Y2PDa3uzBmyQWqwaOevT
pmQxdTDTnjFNUDpKwHbgSXjHw7riXOKsP89vxb3JoEYqllN+qhmMjeu/kUuvrB68
OnwjayNKJuc4aMKDuFP/B3zih61+g9hwthxrWLbLPWgCgSs15hJewtRngzUVj1jR
KKKVzKIeOlMmIw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:38:30 2026 by rpki-client