Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File:                     kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier:          GyudGKJW0ke0r1FUyB1Mgs8iYWZuifHKstb1vqqicNc=
Subject key identifier:   3C:FE:D1:EF:82:90:06:E2:05:00:09:37:34:86:CD:35:11:B3:1E:9F
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer:       /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial:       01A0D4CB5C2D19DF14A9065D279D7406F77E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number:          0F90
Signing time:             Thu 24 Sep 2026 19:01:32 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:32 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:32 +0000
Files and hashes:         1: J25M-UnReNKmuFmrWYqkMEZsa5k.roa (hash: Npj2Hscx+1OJB+9GBz72Qbkd/qIIf3wslnj9snkAhC0=)
                          2: hTcOcp0L4y1cZE83wStrArF5yok.roa (hash: IP49Cz4BtOS2hhS7C6rA+5mVBlMhuBxigxpjWGKIBVc=)
                          3: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: TSI4KBlG+hbEH/N0/XGiSh3aiJZ7JBHozyDHuN1xnyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:5c:2d:19:df:14:a9:06:5d:27:9d:74:06:f7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
        Validity
            Not Before: Sep 24 19:01:32 2026 GMT
            Not After : Sep 25 19:01:32 2026 GMT
        Subject: CN=3cfed1ef829006e2050009373486cd3511b31e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b9:3e:b1:b3:23:c5:db:59:dc:bc:0c:d0:c1:
                    3f:53:d6:61:e3:04:ac:4c:db:8f:d3:3e:9c:fc:5a:
                    a0:4d:2a:98:5b:4e:0b:cf:d6:01:ea:3e:8c:ea:2d:
                    db:89:93:f7:3b:1b:b4:f3:92:9a:26:1e:c6:ea:45:
                    a5:80:53:79:19:57:ea:9c:d3:2b:92:74:f2:97:5b:
                    8b:fe:c0:df:ed:49:a4:c9:1d:94:ce:12:e1:40:3a:
                    81:82:d6:39:18:08:86:74:f0:d7:40:46:b1:16:e8:
                    d6:8c:40:dc:b6:84:ea:b5:68:93:15:d5:42:62:84:
                    2c:71:88:10:c5:5e:e0:90:ac:1a:7e:2d:31:28:01:
                    58:fb:80:7d:6c:68:d8:d0:40:d8:3e:b3:6c:f1:98:
                    25:7a:ba:96:85:d1:02:f2:93:6b:d5:21:a9:ed:d3:
                    24:7c:a8:54:6c:14:72:b7:94:df:47:1f:a1:e2:86:
                    a6:a8:2c:9b:f8:d7:34:ff:6a:01:d4:34:aa:cb:1f:
                    72:8e:59:c6:2a:f9:78:6d:8d:b3:d8:dd:68:48:d0:
                    13:92:bd:0d:a9:ae:9a:4a:bf:f4:c7:89:27:2f:89:
                    d6:af:ae:3c:75:91:40:13:a1:9d:5d:fd:00:43:02:
                    94:4b:b2:50:e1:e0:37:13:09:56:fe:a2:ee:bf:16:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:D1:EF:82:90:06:E2:05:00:09:37:34:86:CD:35:11:B3:1E:9F
            X509v3 Authority Key Identifier:
                keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:14:f4:fc:32:a2:9a:f9:8b:d6:4c:35:f2:57:a0:fe:3b:
         72:01:d4:0c:04:75:04:f8:79:99:da:9f:79:78:ac:39:b0:8a:
         26:2d:e1:53:28:eb:bd:13:7f:87:c7:fa:57:08:e7:03:e8:55:
         dc:29:67:c8:a2:ec:bf:f9:75:32:46:c8:b0:07:9b:f6:e8:c7:
         99:c8:d1:14:90:6f:72:d8:e8:f8:e7:13:eb:61:f4:e1:15:d8:
         38:7f:c7:b2:ef:d9:0e:73:fa:0d:1a:5d:f8:9b:c4:9c:a7:93:
         3f:57:f3:f3:e9:08:d4:88:81:63:b5:98:e0:9a:29:14:27:0a:
         79:ff:17:27:b3:af:7b:63:d5:ad:fd:0d:e0:1d:84:10:2d:32:
         f3:5e:e5:9e:bc:eb:10:ab:c1:38:8c:67:35:ea:84:75:47:a6:
         1e:02:7c:26:b4:f0:60:15:fe:4b:a5:c1:11:db:78:ac:84:4e:
         5c:74:87:87:41:f3:26:5c:23:44:44:84:6b:ca:ac:e3:96:76:
         32:d0:8a:71:f0:3a:69:a0:f0:1c:38:97:22:8f:2b:9f:ef:8a:
         c8:27:f1:91:d7:03:d2:95:fe:4c:77:6b:a1:68:a7:62:94:00:
         d0:88:24:f2:fe:7d:26:e9:af:9c:9a:60:b6:fd:37:82:84:ae:
         cc:6e:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:09 2026 by rpki-client