Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          Ci9NddtKIYImQb/wlkhW2eKHkkVpLk1z/Nzup3lPj5Q=
Subject key identifier:   E4:FB:07:D6:4F:27:FD:86:F0:AD:FA:D5:E4:26:D5:E1:21:66:2E:9B
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       01A0D20079C743ABC832343F032AFAB76245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          1A88
Signing time:             Thu 24 Sep 2026 06:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:41 +0000
Files and hashes:         1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=)
                          6: ECR02Lvma0Akqx8_eko_IQ3lvNk.roa (hash: WYbPrDTPpGPZPcdOFkDj0vuliDTMuVhh8dLndPv7htw=)
                          7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=)
                          8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=)
                          9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          12: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=)
                          13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: OJwbw5DExkxWqUa51f6GE1Vb8nKp6CaVAuJiEuJXT/4=)
                          14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          17: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=)
                          18: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          19: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:79:c7:43:ab:c8:32:34:3f:03:2a:fa:b7:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Sep 24 06:00:41 2026 GMT
            Not After : Sep 25 06:00:41 2026 GMT
        Subject: CN=e4fb07d64f27fd86f0adfad5e426d5e121662e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:57:91:41:e0:a9:ec:ce:c1:0e:69:b8:1f:
                    7d:b9:88:2d:77:7f:cd:63:12:ec:95:f9:46:71:91:
                    5d:12:57:06:df:1f:e2:1d:9e:5a:08:e7:1b:bb:23:
                    78:56:25:49:07:7e:2a:6d:a7:1e:c9:64:8f:04:4c:
                    8b:fc:02:b2:9d:4b:a1:72:87:5d:28:28:14:4d:cd:
                    7b:97:54:b9:be:30:31:89:43:d9:26:38:29:8e:4e:
                    c8:db:e2:be:b8:cd:69:27:3b:dc:98:9f:52:4e:5f:
                    0d:ad:4a:d8:aa:84:22:02:01:b7:31:94:08:03:68:
                    b1:05:d2:23:63:6b:d9:6a:76:17:86:aa:fe:9d:30:
                    9e:ec:90:0f:f6:4b:13:0b:b7:00:cd:f4:a6:e1:f6:
                    65:37:f4:80:c6:f3:5f:33:13:9e:d6:f7:c2:bf:d9:
                    08:78:f5:b7:05:0b:8b:71:62:48:c8:05:58:db:a0:
                    01:43:3e:f0:d2:81:12:5f:67:ba:54:24:f7:4e:6d:
                    e2:68:63:5b:83:db:4f:e1:08:36:67:6b:4e:1f:49:
                    b8:a9:0c:aa:a8:20:2a:fa:4e:37:38:1c:51:4a:d5:
                    ab:11:06:16:ee:2f:a5:b4:3b:89:0b:99:02:69:a2:
                    5f:ea:8c:1f:b6:b0:88:8d:40:2e:60:59:fc:71:9d:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FB:07:D6:4F:27:FD:86:F0:AD:FA:D5:E4:26:D5:E1:21:66:2E:9B
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:41:29:da:f7:b5:be:eb:43:05:e7:15:91:2a:d7:eb:92:1d:
         4a:d5:69:7f:60:ab:f2:d3:a2:58:80:78:65:c7:ab:6c:d3:c8:
         44:5e:bc:fe:e8:3c:41:67:9a:93:aa:51:78:b3:ee:90:30:24:
         25:6c:c3:ab:a4:4f:0a:79:19:0a:3b:e2:34:c6:73:e1:db:41:
         0c:e1:dc:81:41:24:12:50:09:00:9f:7f:a7:93:dd:d4:89:d9:
         f1:49:11:8d:b4:b6:bc:c6:71:aa:fe:c7:93:6a:3a:86:1f:4f:
         ef:39:7f:38:fc:a0:6f:83:dd:70:ee:e6:a9:51:83:1a:51:ee:
         21:a7:8f:71:1f:60:76:67:6b:83:6f:1c:e1:ae:90:e2:60:3c:
         20:54:f1:be:4e:d4:87:1b:5b:db:1d:04:e3:51:51:e6:10:ec:
         67:07:eb:27:e6:67:9c:79:0b:14:19:3d:70:4c:63:90:73:ad:
         ad:ff:e8:2a:7e:39:e6:e2:55:7e:11:38:c0:7f:6f:c5:21:fa:
         bc:27:4c:36:8c:32:d5:d2:7d:51:48:c6:c4:33:05:2c:4d:53:
         bd:75:4e:d6:a5:6a:ca:6e:5f:45:7f:18:4b:5a:6f:be:56:8d:
         7e:6f:bf:ab:6b:28:02:9b:62:7c:78:e8:9b:d9:4a:fb:a7:9f:
         a1:c5:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:54 2026 by rpki-client