Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File:                     kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier:          0ATS6XAwJ9tHXqFZMkAiYdtjHOZOqn2LMXWyClAeJdc=
Subject key identifier:   FD:DA:26:DF:B5:98:80:3B:0C:96:19:6C:7B:41:B7:24:86:06:60:AA
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer:       /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial:       01A1254255C73474658D9C1B96B36FCBFFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number:          058A
Signing time:             Sat 10 Oct 2026 10:01:06 +0000
Manifest this update:     Sat 10 Oct 2026 10:01:06 +0000
Manifest next update:     Sun 11 Oct 2026 10:01:06 +0000
Files and hashes:         1: AWhN6VQ2_halEL7L2KMQe9rdgso.roa (hash: tVoPHVeJ+IKy961bJMJgWhi1Hj5IBVKGGMEWtGFabWw=)
                          2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: IiNEfnkQPw2VuldOhpSRThObI1TM/xgHZBM5Bs7/6wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:42:55:c7:34:74:65:8d:9c:1b:96:b3:6f:cb:ff:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
        Validity
            Not Before: Oct 10 10:01:06 2026 GMT
            Not After : Oct 11 10:01:06 2026 GMT
        Subject: CN=fdda26dfb598803b0c96196c7b41b724860660aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:d1:64:a9:0f:ee:e4:9f:5f:bc:e1:d1:71:
                    ac:75:92:c2:a6:9f:f8:63:59:c7:bf:7a:21:49:ea:
                    e8:82:50:5f:4c:ac:b9:d2:7c:ff:50:f8:a4:c7:2f:
                    df:96:70:13:ab:3f:cf:33:52:45:2a:4f:97:ce:80:
                    98:5f:3e:d0:17:6b:c7:ec:4e:76:4e:5c:9d:42:da:
                    66:e5:d8:34:82:8e:7f:ed:0f:2a:06:47:c2:64:fd:
                    64:01:ea:94:5a:6d:73:41:06:51:22:3e:d6:68:4d:
                    06:f5:00:5a:ff:04:7a:0a:4c:14:b5:c1:18:e6:28:
                    f5:c0:20:95:8d:d1:5f:22:4e:6d:65:5a:72:7e:60:
                    c8:66:d9:72:91:2c:c7:87:38:3c:f8:0f:44:f2:ba:
                    49:7b:2d:12:15:c2:c4:c7:f3:9d:d2:c1:8e:02:63:
                    a3:cb:44:2c:50:6d:2c:08:32:44:f5:9e:30:d5:5a:
                    d9:33:30:59:68:6c:10:d5:67:ff:a9:47:01:04:02:
                    03:14:ff:93:0f:73:84:7b:4e:8c:48:cb:b2:2a:3e:
                    ba:bd:9d:f0:09:c2:97:da:24:28:b8:1e:36:23:df:
                    9f:24:cc:66:95:63:8c:ac:6a:a6:a3:4e:c8:40:bf:
                    29:e8:54:5a:aa:0b:2e:ff:4a:1d:f6:fe:a7:a9:46:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:26:DF:B5:98:80:3B:0C:96:19:6C:7B:41:B7:24:86:06:60:AA
            X509v3 Authority Key Identifier:
                keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:16:6a:79:8f:d1:78:9f:ee:cc:03:49:05:5e:cc:b8:1b:
         fc:78:e2:e5:b3:25:43:ff:aa:b2:cf:66:1e:33:48:2d:05:8c:
         6e:f4:df:f3:85:b0:11:90:e2:03:5a:ee:a7:29:35:36:a3:3c:
         3c:38:56:fe:2c:fd:a9:6b:24:f4:2c:b6:8e:e0:b3:dc:68:11:
         3e:70:ff:31:da:52:44:02:15:d6:26:dd:8f:95:e2:07:24:c4:
         b4:0a:c5:6d:23:80:82:c8:6b:21:92:cb:a4:a8:8b:35:7a:ff:
         2c:a1:5c:85:83:e2:91:11:40:12:30:32:4f:b5:a6:4b:85:e6:
         25:52:30:bb:f6:92:55:db:72:4d:3c:49:79:d6:06:78:e6:6e:
         eb:51:3e:43:f9:da:04:d7:8f:d4:ca:6c:c6:d5:20:c5:79:6a:
         99:92:33:dd:7a:67:9c:27:0c:22:34:17:74:18:31:95:6e:0c:
         4c:ee:ac:f5:58:0c:a5:13:e7:b2:dd:a7:41:fd:af:8b:38:a7:
         a7:ca:0f:68:34:a1:52:f9:1a:05:b2:b2:89:85:aa:24:64:44:
         43:93:a9:cd:54:29:5c:43:9f:3d:09:fd:35:ca:bf:23:a2:0c:
         2a:b4:a5:8d:39:28:44:e1:11:23:74:fa:0f:35:d0:ec:cf:f9:
         80:5d:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:42:56 2026 by rpki-client