Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File:                     kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier:          2WjGr41OEBTD2Wdws1nExU98ZVeQkfMp0yBc7T2dZiA=
Subject key identifier:   D2:FE:46:7E:22:43:36:EC:35:43:E3:3A:9D:C7:86:B5:01:A7:58:55
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer:       /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial:       01A0CEC82398AC61A1746078E9E14FE98784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number:          1A96
Signing time:             Wed 23 Sep 2026 15:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:17 +0000
Files and hashes:         1: 8-hboCP-U8Wk9qtGn0IWpFqelRc.roa (hash: j5xldAU1MujpYVAZwSnjN9dxcpWX63Cij0SbzlZlEHU=)
                          2: GadZnqwNNL6vcO0uNGOaOFXO-5w.roa (hash: WPx0ZxFduASzoEDiUK1PVK0AV5w4NdVYDhxmnMrQPaw=)
                          3: Kt7Bb9a8NYPt2hdNoCtrivgec60.roa (hash: hZLmp4pyqAJx5mRvIALIF4vmWmI8U/uE03XVLg5S0aE=)
                          4: QGMHAWeIiva_ANIU0MC7CU9-6f8.roa (hash: 4G0dmujJfspfIapxR+knOukRFXWULsWgi/aWj5BdVi4=)
                          5: XiIbEnKjYE8MkI8g3bZKNddtCfQ.roa (hash: 969ogNKjx9JV6jK/y8xnBqcJ9Cd0T2enS1wUqhtbhGY=)
                          6: dGOsV8rB3n2kiiSorQ7C_OLvWso.roa (hash: CfnCuNHVj64xX3Nr1KaQqkMmG3m7OTprs4PyzRWTuhc=)
                          7: gsGfrYs1utK7SrtoyVPXL783bwM.roa (hash: 1zqi9F+7GRzsZKDlqyActNmPOf78TLbsfJ6f9t5J09A=)
                          8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: /ZTKxeFbqHhAZyNXV7gK/MyaV7sHfEBCrugm29myuec=)
                          9: l-WUCYIzfrmbOY4lSlHo4EHYa-0.roa (hash: wRHoNrFNfoLupFB4h8pnue6IATQIBeN3aGRRjbWhTLE=)
                          10: quXPd4m3roGOFCgsU-cq5zkXqMM.roa (hash: cygguz3JRfVDe2shlN+tdvmvE/mxwD8qbYQvNiz7ASQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:23:98:ac:61:a1:74:60:78:e9:e1:4f:e9:87:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
        Validity
            Not Before: Sep 23 15:00:17 2026 GMT
            Not After : Sep 24 15:00:17 2026 GMT
        Subject: CN=d2fe467e224336ec3543e33a9dc786b501a75855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:cb:a9:87:40:a4:f4:bb:1e:61:f5:8d:e1:
                    80:d4:27:a7:e3:65:09:37:26:86:1e:80:b1:a7:3c:
                    f6:c4:40:6c:e4:86:b2:7a:5e:64:a0:73:4c:c1:9a:
                    ff:07:15:f3:82:94:e4:b5:2f:bf:cc:98:4c:82:a7:
                    da:8f:e0:59:b1:11:ef:18:32:f4:18:ae:30:d5:95:
                    4c:71:31:6c:83:8c:2b:d4:1d:a0:ca:96:71:1c:b1:
                    ff:7c:fd:ab:05:47:e5:59:e1:8b:9b:f5:d1:a9:fb:
                    56:66:27:85:38:5d:05:0c:4e:3a:2e:9e:b3:d9:3d:
                    b0:3c:47:d3:3c:9c:2b:5d:24:84:cd:30:e2:76:6a:
                    61:62:e1:66:32:d6:43:74:97:63:8d:13:a5:11:4b:
                    22:87:ce:60:f3:da:e0:33:2d:dc:ce:a9:54:e2:d4:
                    78:2c:0f:3a:02:8e:40:b4:d5:76:67:b3:e5:aa:f0:
                    99:bb:5a:a1:91:50:bf:a1:ca:ce:f7:f9:87:2b:90:
                    9f:30:64:96:ad:1d:b2:03:22:ed:09:b5:dc:ff:66:
                    81:99:bd:ed:0f:87:0b:4e:13:51:c8:74:f9:ee:41:
                    24:44:cc:9b:1a:90:95:39:72:12:b2:ec:2d:b6:f4:
                    46:29:b8:55:76:8f:2a:38:cd:b4:fd:50:b5:e3:a9:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:46:7E:22:43:36:EC:35:43:E3:3A:9D:C7:86:B5:01:A7:58:55
            X509v3 Authority Key Identifier:
                keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:43:73:88:61:01:38:e3:fe:da:89:00:da:e7:34:18:12:2e:
         65:a3:07:2f:9e:3e:20:ba:1e:c8:45:26:ab:7c:f0:fd:2d:dd:
         2b:92:2e:8d:0b:83:e8:b3:b6:bf:40:2e:6a:50:17:74:3f:10:
         bd:de:4a:03:50:9f:9c:26:06:23:ff:cd:15:59:85:80:4b:5b:
         87:06:a3:a6:eb:01:b2:e5:81:dd:5f:1e:2c:e4:67:6b:3b:b5:
         bf:0b:4c:72:5a:fc:2d:af:1b:10:0f:49:9c:86:42:cf:e4:0e:
         b0:e0:70:3f:e3:1b:79:72:af:54:59:f4:46:1e:b8:11:46:b4:
         fc:1b:69:2b:f9:5a:75:c9:15:8b:f3:12:27:a0:01:ff:1b:b5:
         9e:e1:eb:cb:23:47:1c:3c:4b:8f:ef:42:e6:25:4f:57:d7:b8:
         ff:79:1d:34:61:2d:a2:22:0b:38:d3:01:82:da:d4:73:d2:70:
         35:12:79:fb:ca:cc:79:38:9c:5a:18:62:78:3e:b0:8e:38:77:
         bb:e2:35:6e:42:e9:31:67:ec:f3:ff:2e:fa:3c:bb:77:36:48:
         34:5b:36:e1:dd:2b:fd:c7:32:f2:2a:ff:bc:bc:ca:c2:39:5b:
         c0:1b:d4:ac:f7:b8:c5:f4:72:77:39:32:02:c8:e4:e2:85:a0:
         bd:fc:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:49 2026 by rpki-client