Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File:                     KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier:          aNUBH8Wkhiw2/oDHef5lWvq+vKY3i3vVxh+5IrMzpRk=
Subject key identifier:   84:D2:00:30:CA:5A:35:54:D4:D2:4F:2C:DE:43:BB:C1:D1:2A:FB:90
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       01A13748358C80282D7AB9256FB31DE24A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number:          1AA8
Signing time:             Tue 13 Oct 2026 22:00:41 +0000
Manifest this update:     Tue 13 Oct 2026 22:00:41 +0000
Manifest next update:     Wed 14 Oct 2026 22:00:41 +0000
Files and hashes:         1: 1zH4HR_jPm-8SwLa0qimE97-P5A.asa (hash: tYxSixnm08xFTCmXHsgsP7H6MfcHJGSd+ujhmOmOLlE=)
                          2: CRy037_i_cUr7ivvwFkaM0Oecc8.roa (hash: 2BvO8Ta902Qq1EYmMVKwFCPEx1ueB5rtDCTKXW2UYFU=)
                          3: GV3rHMHaqZh85X7GW_djNwAYsOQ.asa (hash: MrfqDCvqnvYb6uuxXgWmjLxPfmlym5eT0CjhOIOM+sw=)
                          4: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: n/PV6LbhE5bmsU4H9643+SQKHNoAqccwGjXgVdPPHzU=)
                          5: mra6PNQALIJ4cXHv3iTX1S7RUK8.roa (hash: 5i9ye/QA8fnoRb0KmqSlxn4ykxEHMPNjIM5js5S5I9Y=)
                          6: nxOlTeeVwbJvP0L8gxUuYbskG8I.asa (hash: MikecboX8HHDFogf33eR5geZ8eAmOY2OzEKHUF/uBE0=)
                          7: v6LodvYpOGGUhWjXnG4-LMGPe68.asa (hash: Hf1wgRy5JTLjGpN4VTbA8OHkeD4wSqOV5xdGmFiUEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:48:35:8c:80:28:2d:7a:b9:25:6f:b3:1d:e2:4a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Oct 13 22:00:41 2026 GMT
            Not After : Oct 14 22:00:41 2026 GMT
        Subject: CN=84d20030ca5a3554d4d24f2cde43bbc1d12afb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a7:74:cc:4a:e3:ea:22:a9:c6:95:4f:42:78:
                    ff:a3:de:9b:b3:f4:30:69:0f:96:4e:66:e1:99:c5:
                    8a:18:5d:78:01:8d:64:6f:80:84:74:fa:01:d2:21:
                    e4:1a:e9:f5:21:15:eb:1f:03:7e:04:5c:72:cf:03:
                    36:28:fa:97:3a:09:ca:49:bc:44:1d:b5:79:ff:78:
                    86:a4:bd:e2:f9:3d:68:06:38:e2:0e:86:e7:6e:b5:
                    14:af:07:5b:d1:88:bc:20:b3:93:20:02:51:8f:79:
                    3c:d6:f5:61:f6:21:88:f7:26:8f:81:92:d2:d4:71:
                    2f:9a:45:42:45:0f:8c:39:96:13:7a:e3:4a:95:24:
                    70:4e:d7:b1:a6:4c:f5:53:29:71:1e:d7:79:a6:f8:
                    49:c8:9d:aa:82:7d:06:fd:56:dd:d3:74:0f:f8:3f:
                    90:4d:05:33:ad:8f:eb:c4:20:c5:99:4c:53:b6:9c:
                    d9:70:ec:c9:06:36:31:f1:35:ac:ca:ef:b3:41:b1:
                    ec:4e:0e:db:dd:29:3f:b8:3e:ba:6d:21:83:62:9d:
                    39:50:d7:69:61:e4:c9:6f:95:35:98:93:7f:73:1b:
                    8b:7e:52:b4:88:38:bc:6b:05:50:cc:75:b5:e3:47:
                    c7:f8:26:6c:29:4e:bc:09:2d:2a:8b:96:54:56:99:
                    d6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D2:00:30:CA:5A:35:54:D4:D2:4F:2C:DE:43:BB:C1:D1:2A:FB:90
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8c:82:fc:69:f3:c7:68:06:fc:ee:7b:cb:7a:77:0c:1b:73:
         52:73:5f:33:e6:a8:ee:f8:61:5a:a2:02:c9:5f:c3:12:16:ac:
         3b:2d:8d:dd:88:27:62:ef:71:93:c5:73:9d:a6:09:17:7b:18:
         ea:87:21:86:3d:a8:8a:68:85:06:f5:52:6a:c7:49:18:48:c3:
         61:33:f3:88:fa:58:33:d2:2c:dd:43:ba:dc:a7:96:c6:fc:c1:
         ed:ec:15:89:ad:0e:ff:3b:6d:e0:1d:1b:c4:ca:11:6d:bd:b5:
         4f:43:19:58:47:9e:a4:c5:9c:c8:f6:de:d5:af:41:68:93:79:
         93:36:20:f9:45:f8:57:74:67:4a:0a:d1:fe:a1:7d:ae:77:82:
         34:a8:46:33:9d:60:6b:26:a7:8a:5e:a4:04:7e:84:23:9a:14:
         83:20:3e:59:0a:bc:08:c2:05:12:f6:6d:ad:a5:a4:41:30:ca:
         f0:f5:01:e7:c9:f3:d2:b0:56:fc:3c:75:66:f5:9a:10:39:e9:
         8d:79:a0:9f:ce:ac:d2:52:44:9a:a8:fd:33:a6:9c:ab:b6:89:
         47:f5:6c:14:b0:8b:70:fa:ff:98:ab:92:94:cf:11:c7:da:a7:
         10:ed:93:09:d4:fc:ea:13:7e:ce:4b:36:40:0e:62:62:a3:3a:
         71:e4:1a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:29:53 2026 by rpki-client