Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          9YaCPgrw/MTEzvT8RNQb0PnvoLiaMN+FNkDeBQFiZmE=
Subject key identifier:   11:25:F4:84:4D:36:E0:05:AC:19:22:6D:D9:C6:C5:80:D6:24:9A:F6
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       01A0D5704EB6571BA9596C1F3DED53CE2695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          19D8
Signing time:             Thu 24 Sep 2026 22:01:42 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:42 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:42 +0000
Files and hashes:         1: ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa (hash: pYmIQYvBOAoLzP63yxZwD5AKPB0JekK4kO0OzrdUlpE=)
                          2: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: butDbO66Ddj5FRCKmLHbGk4l5EeUEpihzkZx7U3AyKA=)
                          3: lX8ec-kHtYQc2eYxJReNoElbToQ.roa (hash: 6QTzsEZgHNywYoD3IZ6Z740+HwWFg/g5EfVeUxTu8gQ=)
                          4: nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa (hash: eebZVUFclHYl/xNS3jIW8oNgi3gVg03bFj8wnZMugsg=)
                          5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:4e:b6:57:1b:a9:59:6c:1f:3d:ed:53:ce:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Sep 24 22:01:42 2026 GMT
            Not After : Sep 25 22:01:42 2026 GMT
        Subject: CN=1125f4844d36e005ac19226dd9c6c580d6249af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:65:88:a2:f6:d9:2a:55:5a:78:90:47:8a:
                    a4:ad:48:58:52:b8:e2:af:64:e0:0d:e2:e3:86:72:
                    eb:77:22:25:0a:66:67:6c:25:ce:2a:21:31:da:00:
                    4a:a5:8c:50:7c:50:b2:f7:cc:ce:51:e7:6d:4b:c7:
                    ca:65:62:9e:e3:82:ad:bc:5f:70:ac:ec:c7:64:d4:
                    27:cb:f8:57:fb:1c:17:37:f7:ee:6c:77:3d:ee:b7:
                    55:b7:ef:a2:e5:9a:88:61:b0:f3:9a:f3:3b:92:80:
                    9e:1b:6f:31:56:29:cb:9d:ad:4e:0e:a5:12:c1:bd:
                    73:83:bc:ef:d7:6e:11:ed:4a:b2:48:3d:73:45:4c:
                    07:93:78:da:7e:db:05:f8:ca:b4:cf:e3:18:1d:98:
                    ca:33:e0:e0:48:8b:97:87:14:f7:e9:39:0c:7f:7b:
                    0a:2a:71:cd:b9:be:4a:17:f9:b9:b6:b4:cf:13:2d:
                    1b:e0:0e:a3:3b:cf:dc:4f:93:a6:b5:65:34:0d:23:
                    ef:20:44:44:0b:e2:8f:64:0d:be:f5:24:7d:1d:24:
                    fc:17:ea:f4:fe:23:ef:e3:f9:a5:6f:86:5c:0d:02:
                    8a:c0:d1:f7:91:d8:94:a2:6f:be:5b:13:11:78:d6:
                    95:45:d6:5a:63:87:f1:e6:66:bc:cc:a6:d1:d1:f3:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:25:F4:84:4D:36:E0:05:AC:19:22:6D:D9:C6:C5:80:D6:24:9A:F6
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:77:38:4b:f3:dc:7a:0e:54:28:60:72:36:5d:0d:e8:50:a8:
         4e:16:cb:ee:cf:66:97:cc:ac:bc:2f:b8:47:05:6e:20:75:bd:
         e4:5a:0b:5f:05:ba:38:8f:43:24:c0:a9:22:db:ee:b1:0a:9c:
         f4:26:f6:73:bd:59:01:1b:d6:e1:8d:3a:9e:14:5c:62:43:80:
         de:d7:d1:e0:4e:f4:5e:d8:dc:35:e6:a9:ed:2e:3e:be:41:8b:
         3c:32:69:7a:d8:47:73:cd:e1:c5:44:19:e2:52:54:df:5a:a4:
         d8:f5:87:ac:86:b5:f5:52:ae:e6:8a:64:58:9f:3e:62:8c:51:
         e4:14:ba:6d:4f:1f:be:81:bf:61:f4:f7:5b:71:7d:28:c5:47:
         70:13:f9:4b:5f:30:a3:ac:43:d2:97:43:10:14:40:ee:2a:0f:
         de:5a:02:c5:0a:8e:6b:86:1f:d1:cc:fc:c4:c5:5b:1b:4f:8a:
         99:b0:c1:46:e5:1b:d6:24:18:42:04:25:56:c4:74:cd:20:80:
         f5:38:4e:6d:a7:57:d5:09:41:7c:23:e3:d7:c7:d3:32:bc:00:
         3e:01:70:fa:81:3b:99:18:78:6b:3f:a1:0c:d9:a5:96:1d:33:
         f8:e6:9f:e9:2d:27:c4:68:80:f1:e5:75:88:3a:30:cb:ac:ce:
         f7:8d:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:35:43 2026 by rpki-client