Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          Xao9bO57BzVnL4IV/AHoZuRjEBiTtaQE7QeUx7sKxf8=
Subject key identifier:   67:F3:A0:55:9D:D5:B1:0A:08:16:08:63:F8:D2:9C:4A:0C:97:4F:20
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01A0D45D1B848A27AC18CF4BCE26B6D95763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0EEF
Signing time:             Thu 24 Sep 2026 17:01:06 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:06 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:06 +0000
Files and hashes:         1: NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa (hash: koZQTWGtu/yZU8GbkdRNcGGY7bBAtyvzqtTowhwY4EE=)
                          2: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: WtSuDWYJf/5MNSUYuMEoCdru5ubOJkXrNarBG6IpxZU=)
                          3: oyIHnleaxdQmed-d8OgAoabLOCk.roa (hash: SzJ8FmuzjIl9sC++X+hnrkenbzU5J/9NekanXVA8b6o=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:1b:84:8a:27:ac:18:cf:4b:ce:26:b6:d9:57:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Sep 24 17:01:06 2026 GMT
            Not After : Sep 25 17:01:06 2026 GMT
        Subject: CN=67f3a0559dd5b10a08160863f8d29c4a0c974f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:54:b4:fd:79:38:09:bd:2b:52:87:aa:46:
                    88:59:8a:f1:de:85:c7:53:83:df:73:5f:1b:cf:88:
                    95:ff:48:14:19:64:77:25:1d:7d:5c:19:c7:b6:18:
                    02:12:bb:bf:85:90:4f:ff:6a:a3:83:c9:c4:38:47:
                    7e:09:08:c3:cd:b9:3e:02:61:53:0c:42:18:d8:98:
                    20:52:3c:ab:3a:2e:08:11:99:07:9f:3d:6e:29:49:
                    a8:2e:0b:6a:76:6b:6d:22:7d:68:6f:d9:76:96:79:
                    02:c3:8d:09:ad:d6:f4:83:ee:c5:df:53:7f:f6:79:
                    5f:8b:17:28:8d:57:fb:bf:41:33:02:d0:31:92:8e:
                    10:9e:07:69:d1:4e:6e:86:e6:1f:10:02:58:c9:7d:
                    b7:fe:2a:fe:56:62:47:65:0c:ee:35:be:fc:b8:1c:
                    81:22:7c:cb:4d:fd:57:52:26:98:45:aa:2a:2a:29:
                    55:8a:ff:4e:ab:41:e4:88:48:3a:33:8e:85:47:92:
                    a2:6c:5b:5d:6b:e7:b3:7a:1d:8c:c6:a7:21:77:3b:
                    d4:03:0e:57:a1:36:29:aa:3e:09:57:a2:0c:55:ae:
                    82:7b:06:58:07:6b:c6:11:af:3a:41:d4:b8:e8:0d:
                    fa:ca:68:a6:bd:30:09:4a:2a:37:db:69:cf:d0:e0:
                    fd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:A0:55:9D:D5:B1:0A:08:16:08:63:F8:D2:9C:4A:0C:97:4F:20
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:90:fa:d1:fb:af:75:98:39:5a:92:95:cb:19:0e:cf:ad:
         6e:ec:ff:06:56:1e:28:fc:0f:41:33:7e:18:67:f6:df:ef:fd:
         52:f8:cc:6d:61:fc:0a:65:b2:50:06:c2:bf:ba:77:f9:ed:e3:
         db:f2:06:c2:73:76:c1:22:fe:8b:dd:b0:d1:c7:96:3e:e5:3f:
         d0:e7:d0:af:e4:2a:3b:50:00:5a:9c:21:37:55:8c:16:57:c4:
         ae:4d:9e:4a:cf:d0:9e:7d:7c:b1:78:af:dc:66:7b:36:6b:ab:
         e8:9f:fb:37:f2:95:ff:5d:5c:ff:a9:c6:0f:af:f4:57:e3:e0:
         dd:6d:62:74:51:16:2a:5b:13:12:e0:3b:73:49:3d:4e:e9:16:
         cc:80:c6:4a:03:a2:36:3d:34:53:1a:71:e8:49:6e:6b:90:c3:
         5b:eb:07:12:6c:0a:cc:a8:d5:20:41:a0:bc:49:72:35:ca:40:
         66:0e:a6:53:3f:17:63:2c:90:2f:a1:d6:62:5f:74:86:a5:22:
         c0:1e:cf:d1:5c:0e:00:9d:32:1c:0e:f5:1f:af:72:9f:10:ec:
         e4:13:82:2f:a2:0a:19:b5:93:ec:43:0d:fb:da:4a:86:5a:34:
         74:55:5e:c9:51:c4:f7:25:73:f0:4e:86:56:cf:a4:90:66:4b:
         7e:32:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:09:38 2026 by rpki-client