Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          mWr0EqeGXsgN0h3csGmxdEEd8Ozg8PNjyMMWQ5hSoBA=
Subject key identifier:   FC:18:60:8A:BB:B0:68:73:67:E9:57:D3:2B:A9:61:7F:BA:A4:97:66
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       01A0E13D5456AEAD6F1FDD5F9ECA14732AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0D91
Signing time:             Sun 27 Sep 2026 05:01:27 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:27 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:27 +0000
Files and hashes:         1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
                          2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: fLmqxdsJcLiAwnP1RqSuS2Cv9iN5L7NAtAdYIOQEcAo=)
                          4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:54:56:ae:ad:6f:1f:dd:5f:9e:ca:14:73:2a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Sep 27 05:01:27 2026 GMT
            Not After : Sep 28 05:01:27 2026 GMT
        Subject: CN=fc18608abbb0687367e957d32ba9617fbaa49766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:78:b5:4f:be:7b:29:60:01:94:78:4b:63:
                    98:e6:dd:a1:07:53:4f:fb:5b:d2:d0:4a:9b:78:ab:
                    4f:04:44:cd:7b:12:a4:6b:d6:8a:1f:39:44:8f:ec:
                    94:0f:ee:7a:48:8a:43:da:5d:37:66:a0:43:c0:80:
                    36:68:65:c0:32:c3:38:6e:3c:84:d8:80:74:8d:5d:
                    6a:39:5b:6d:ba:db:d0:1e:69:47:a3:2f:ee:c7:c4:
                    c3:93:8a:4b:5e:08:59:6f:41:ce:99:61:c6:f2:42:
                    8b:1e:f3:5a:1c:20:fd:0e:fc:df:ce:5c:cd:50:de:
                    e0:de:ce:e2:37:dc:29:eb:ad:19:ba:40:9e:87:03:
                    c9:c3:0e:ec:65:6d:8f:14:c4:88:41:ae:2b:ad:2c:
                    bb:73:3a:d7:85:8e:93:3d:fb:16:5f:d1:da:8d:b9:
                    01:0e:52:85:14:42:89:14:9e:32:ed:89:ad:87:f1:
                    12:94:e6:f3:93:0e:b6:33:52:8a:be:77:d7:60:d3:
                    32:ef:d8:52:d5:c7:c9:81:ea:38:af:ad:af:97:7a:
                    02:ec:22:4d:ed:ea:96:e1:3a:0f:3a:3f:9c:a0:30:
                    79:c0:8e:b0:1b:7e:ee:46:2b:f8:35:3e:2f:26:11:
                    66:fb:c1:aa:07:fd:6a:ce:b9:41:90:bc:43:54:b8:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:60:8A:BB:B0:68:73:67:E9:57:D3:2B:A9:61:7F:BA:A4:97:66
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:db:35:84:d9:96:d3:ee:d4:9e:f5:74:15:f6:ec:b6:d3:
         4d:d8:d7:2b:46:2a:11:66:78:6d:a7:35:02:f0:8b:fb:42:7c:
         58:ad:78:8b:8f:26:dd:e0:02:31:3f:71:7d:26:36:fa:e1:d6:
         e7:fc:e7:d0:56:9c:bd:0b:ac:40:9c:13:4c:33:17:bd:20:b7:
         0b:97:3d:4d:03:88:d2:67:2c:bb:26:d0:09:40:54:00:d6:b0:
         ef:a7:47:d0:e1:11:86:85:6e:ec:9b:e4:c8:f2:e9:55:c8:fe:
         41:75:c1:ca:e1:4f:ca:11:c9:37:d8:99:c7:63:ca:f0:2a:3f:
         ef:ce:28:bc:d9:43:64:6e:b9:88:b8:53:0f:3b:c5:0f:30:6e:
         6c:56:db:89:30:21:1a:09:44:8a:78:b9:b1:9b:26:77:d4:10:
         07:93:58:e4:ce:a1:46:a3:5c:de:26:2f:67:15:1c:2a:e8:0a:
         fa:cd:17:8e:8d:73:cd:ec:78:d4:43:08:6b:10:75:ee:0a:9f:
         ef:4e:b0:5f:fe:be:e9:6c:3e:8d:1d:28:fc:80:cb:d1:c1:f7:
         74:32:f1:0f:f9:d7:8b:fe:cc:30:c2:1a:1f:3b:ef:e7:fd:de:
         27:2a:aa:79:b7:85:84:35:eb:c1:5b:8d:1c:fe:46:c5:b0:aa:
         7a:8a:64:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPVRWrq1vH91fnsoUcyrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy
NTBlYTYwHhcNMjYwOTI3MDUwMTI3WhcNMjYwOTI4MDUwMTI3WjAzMTEwLwYDVQQD
EyhmYzE4NjA4YWJiYjA2ODczNjdlOTU3ZDMyYmE5NjE3ZmJhYTQ5NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pR4tU++eylgAZR4S2OY5t2hB1NP
+1vS0EqbeKtPBETNexKka9aKHzlEj+yUD+56SIpD2l03ZqBDwIA2aGXAMsM4bjyE
2IB0jV1qOVttutvQHmlHoy/ux8TDk4pLXghZb0HOmWHG8kKLHvNaHCD9DvzfzlzN
UN7g3s7iN9wp660ZukCehwPJww7sZW2PFMSIQa4rrSy7czrXhY6TPfsWX9HajbkB
DlKFFEKJFJ4y7Ymth/ESlObzkw62M1KKvnfXYNMy79hS1cfJgeo4r62vl3oC7CJN
7eqW4ToPOj+coDB5wI6wG37uRiv4NT4vJhFm+8GqB/1qzrlBkLxDVLhQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwYYIq7sGhzZ+lX0yupYX+6pJdmMB8GA1UdIwQY
MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt
NWFkNThhYmZiYjFmLzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm
LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7TbNYTZ
ltPu1J71dBX27LbTTdjXK0YqEWZ4bac1AvCL+0J8WK14i48m3eACMT9xfSY2+uHW
5/zn0FacvQusQJwTTDMXvSC3C5c9TQOI0mcsuybQCUBUANaw76dH0OERhoVu7Jvk
yPLpVcj+QXXByuFPyhHJN9iZx2PK8Co/784ovNlDZG65iLhTDzvFDzBubFbbiTAh
GglEini5sZsmd9QQB5NY5M6hRqNc3iYvZxUcKugK+s0Xjo1zzex41EMIaxB17gqf
706wX/6+6Ww+jR0o/IDL0cH3dDLxD/nXi/7MMMIaHzvv5/3eJyqqebeFhDXrwVuN
HP5GxbCqeopkpA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:43:49 2026 by rpki-client