Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          TB/65dSmCZGeUGB5IbKygMUdDnQio8/5RmoIKVQL1bo=
Subject key identifier:   5B:33:B3:A5:80:E6:9D:BC:96:82:76:96:1E:45:94:14:36:F9:4D:1F
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       01A0D26DC553E6A27FBC8C972C4408FE43FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          0EEE
Signing time:             Thu 24 Sep 2026 08:00:04 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:04 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:04 +0000
Files and hashes:         1: NLxAAvM0yrk_gaW8UTYZlpD_aSU.roa (hash: koZQTWGtu/yZU8GbkdRNcGGY7bBAtyvzqtTowhwY4EE=)
                          2: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: vknRfud1y49fIa4hnX/8HyBEq2WvAYBB6ZrOXBDpd2k=)
                          3: oyIHnleaxdQmed-d8OgAoabLOCk.roa (hash: SzJ8FmuzjIl9sC++X+hnrkenbzU5J/9NekanXVA8b6o=)
                          4: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (hash: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU=)
                          5: vYxJpv5POvG_3gvqhMqXcCuX_hM.roa (hash: wpDWTjfQBDPG5OjIvThUgTmIIfXP/UypeEU6fjlCrZU=)
                          6: yEbtzhh5wc4rY7MHu27W_dwYhu8.roa (hash: h2s6dV+bwm8ecYVBUiiK45LeIcpS1pxSfpxppjXQ+aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6d:c5:53:e6:a2:7f:bc:8c:97:2c:44:08:fe:43:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Sep 24 08:00:04 2026 GMT
            Not After : Sep 25 08:00:04 2026 GMT
        Subject: CN=5b33b3a580e69dbc968276961e45941436f94d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:8f:80:ef:33:74:cc:e8:1c:0c:13:22:05:
                    47:3d:2d:71:60:16:46:21:e6:63:fa:84:88:77:b8:
                    db:6a:97:ac:73:a4:25:5b:37:95:36:9e:7e:93:d9:
                    22:f5:da:bf:4d:bc:0f:f1:f4:20:f7:85:55:ce:e3:
                    d9:30:3f:aa:5f:b2:fd:46:49:65:a5:4d:c1:0f:cb:
                    65:d8:4e:2d:20:d8:f1:fb:4a:5b:14:3a:21:42:eb:
                    58:8f:3f:8a:28:e7:92:15:d4:61:ea:ad:60:83:e3:
                    b8:4b:61:8d:49:db:c7:38:5e:27:87:c5:55:f2:d8:
                    5a:4b:4a:9f:72:45:1c:80:81:d2:2a:25:4d:dc:90:
                    38:5a:0c:7d:1d:09:14:0a:bf:a8:e0:d1:12:82:78:
                    6d:0d:1a:e7:f6:2d:4d:af:ad:57:41:19:ee:30:8d:
                    7b:09:87:e8:ae:96:0e:e1:9a:cf:ef:43:21:02:f4:
                    f2:bf:20:0c:2c:cc:56:d6:0f:86:0d:d9:a7:b8:d5:
                    a0:b9:64:3b:1f:50:c4:98:cc:6c:89:34:2f:87:93:
                    84:e6:67:ed:72:95:69:5a:d3:60:77:a2:51:ff:0b:
                    b6:63:61:69:52:c5:31:09:56:63:31:aa:57:45:b3:
                    5b:49:66:22:a8:aa:f0:c2:fd:01:34:5a:68:c9:e8:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:B3:A5:80:E6:9D:BC:96:82:76:96:1E:45:94:14:36:F9:4D:1F
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:13:81:e3:91:67:2f:7d:a6:c4:7d:52:2b:1e:04:a2:bb:
         e9:41:b7:c0:10:e0:96:5b:7f:dc:b9:8a:b6:e7:73:c3:4e:44:
         a6:c6:59:50:9b:17:ec:00:e2:57:0e:c9:2d:89:32:09:93:bd:
         ab:fc:58:f4:b8:66:b4:43:c3:84:b7:95:62:f6:f9:d4:cf:fd:
         51:79:7f:ee:6e:ac:43:7a:da:e0:26:05:82:40:02:16:62:37:
         42:5a:59:f4:e0:c4:c6:d4:9f:9b:32:d4:c3:47:6c:cb:d6:13:
         c5:74:73:83:75:94:dc:39:a3:ae:dc:1a:0f:ad:5d:8a:c5:8e:
         8e:2b:36:0a:a6:db:58:b0:4f:67:1c:8b:c1:c3:ff:58:9c:8c:
         1c:cc:4e:0b:5d:f0:92:6c:a2:74:10:24:42:10:73:c7:06:f8:
         1f:4a:71:f6:9a:b9:46:ce:a5:9d:99:cc:de:c6:69:eb:d0:af:
         f4:8a:a6:d7:d6:77:ed:a0:1c:98:58:fc:a3:6e:da:15:cc:98:
         fa:83:66:d2:e5:3f:72:8e:3d:d0:a0:91:3c:59:40:fd:61:d9:
         bb:5a:33:90:78:dd:a9:08:71:a4:03:3b:78:e7:0e:d4:f3:57:
         ee:3e:0e:25:d8:fb:d2:80:f2:45:de:dc:ba:ed:b2:b4:7f:20:
         b0:16:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:26:50 2026 by rpki-client