Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File:                     kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier:          4HrEViB7eTXhoKj8EJ4xeiM8NBhIvyiOvlhfSTeDvEo=
Subject key identifier:   2B:30:4A:DB:05:6A:51:4C:05:61:B1:52:D5:37:20:04:F8:8B:D5:6C
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer:       /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial:       01A0E4AC6C70CD4D2F508484AFAC764353AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number:          0C4C
Signing time:             Sun 27 Sep 2026 21:01:40 +0000
Manifest this update:     Sun 27 Sep 2026 21:01:40 +0000
Manifest next update:     Mon 28 Sep 2026 21:01:40 +0000
Files and hashes:         1: HmYrDKd2yjYmZLmWzYz7se6Li1c.roa (hash: 2E+4PcgEvP7v29a2K/Pql8IKPHh2ZcXb/x/xhB+Fnbs=)
                          2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: Ll959+DgnLZsHXEqvp6TVnfjfL052R0hMRQqg3QtwPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:ac:6c:70:cd:4d:2f:50:84:84:af:ac:76:43:53:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
        Validity
            Not Before: Sep 27 21:01:40 2026 GMT
            Not After : Sep 28 21:01:40 2026 GMT
        Subject: CN=2b304adb056a514c0561b152d5372004f88bd56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:77:6a:85:02:8a:34:82:02:41:96:6a:65:
                    46:5b:30:99:d8:47:57:ee:80:d3:2f:1e:cf:cb:58:
                    6c:31:40:5b:91:87:dd:a6:54:be:c9:51:b4:c2:11:
                    3c:cb:bc:38:98:7f:f7:10:e0:41:d5:43:ad:71:5f:
                    dd:6e:88:6b:3f:d4:97:b3:d4:23:f8:e1:76:23:71:
                    1f:1b:be:b0:41:96:e1:30:4f:a8:b0:7c:7b:56:9b:
                    cb:15:75:48:bf:b3:44:f8:3e:fd:cc:60:89:3c:c6:
                    4a:8c:34:66:65:53:9d:ac:89:a6:e4:95:7a:62:88:
                    ee:f3:34:27:14:5e:87:ae:68:80:d2:d5:45:42:36:
                    ec:55:c6:d0:dd:6a:7b:99:21:50:22:0f:e6:b3:a5:
                    62:a8:02:90:96:5d:5e:fd:cf:aa:7a:fc:57:fa:50:
                    b3:40:d5:74:5f:71:e1:5f:4d:87:48:6e:4b:eb:49:
                    1f:83:48:4b:93:32:2b:c8:b1:24:7a:fd:0a:23:e2:
                    21:1c:11:76:91:00:aa:8d:cf:25:ba:b5:5c:ef:54:
                    70:79:52:7f:49:d0:ef:e4:56:a8:da:58:27:eb:3e:
                    41:db:7e:a8:46:db:76:94:a6:89:72:c0:89:fc:5b:
                    5b:07:f7:4e:63:a7:5b:5c:53:4b:10:a3:18:7b:d5:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:4A:DB:05:6A:51:4C:05:61:B1:52:D5:37:20:04:F8:8B:D5:6C
            X509v3 Authority Key Identifier:
                keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:97:dd:d1:75:d7:e0:78:68:2c:09:0d:dc:b0:d7:0e:0f:65:
         a0:3a:b3:45:46:62:2d:13:72:d6:ca:bb:6f:73:96:b0:ac:86:
         80:a0:0f:2e:e8:08:10:9e:1f:14:70:98:5b:12:af:60:78:0e:
         02:45:95:56:df:91:19:e8:59:01:dd:cd:e3:6a:64:dd:5c:f9:
         03:b3:a6:d1:69:a2:65:87:1c:92:c6:21:8f:8d:cb:3c:dc:38:
         9a:c2:d2:61:4a:61:14:b6:c2:ae:2c:18:7b:3b:69:02:5e:e3:
         3d:cd:96:78:63:f6:6e:73:ef:3f:81:98:5c:72:fc:95:21:61:
         08:fe:0a:93:b6:e5:63:1a:c8:21:b1:4a:04:6b:0f:a1:e5:ca:
         18:64:6b:05:2f:86:c0:49:ff:cd:fc:b4:b5:c1:6e:13:a9:31:
         89:eb:d2:ad:a6:26:71:4f:22:ed:3c:d9:c4:d8:38:3f:24:fe:
         b2:9f:87:d6:4c:14:c3:c2:46:be:e7:72:90:1b:8e:a1:79:80:
         12:aa:c5:b7:08:8d:c3:45:40:99:03:e5:a2:eb:f9:2b:ab:0f:
         44:95:ec:e1:49:55:92:4b:43:8e:43:f7:a0:bf:e9:d9:ae:83:
         ed:ec:f0:eb:ac:59:fd:01:6c:eb:4f:d2:f4:cd:82:e3:a4:b9:
         be:eb:61:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:20 2026 by rpki-client