Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
File:                     kZ0SeaWG-mmYusKeSnYtacZHkT8.mft (raw, json)
Hash identifier:          m9eJruDnVvcPal0JmVJNSencB56Qa9wrjMkbAVSpjoE=
Subject key identifier:   D1:1B:7B:01:91:A7:08:B0:2A:7E:47:83:B1:86:B9:15:D0:44:75:94
Authority key identifier: 91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
Certificate issuer:       /CN=919d1279a586fa6998bac29e4a762d69c647913f
Certificate serial:       01A10091764820AFB91415BAF59695FCEF25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
Manifest number:          54
Signing time:             Sat 03 Oct 2026 07:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:35 +0000
Files and hashes:         1: dzp90agq2vvBJsLkpxE0l28RmS0.roa (hash: TkQPgCCuKHshtjm85sZCsOI0GrifQVYAf/Ejb921RBY=)
                          2: kZ0SeaWG-mmYusKeSnYtacZHkT8.crl (hash: JlGxk1sCsOAlFZF5OLVSeq4OcSvnohs3flUTAEr97Hw=)
                          3: xkBQpCnwkBAtC9kCslaBf5jSxLU.asa (hash: Lq702Ll5x4p2hwewp6EOD4YKMzeRL1L0nQ70x58rhyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:76:48:20:af:b9:14:15:ba:f5:96:95:fc:ef:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919d1279a586fa6998bac29e4a762d69c647913f
        Validity
            Not Before: Oct  3 07:01:35 2026 GMT
            Not After : Oct  4 07:01:35 2026 GMT
        Subject: CN=d11b7b0191a708b02a7e4783b186b915d0447594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:d9:dd:22:9d:a2:e6:13:3c:1a:ca:86:ff:
                    b2:18:21:4a:44:af:d8:be:6a:a7:70:e0:ae:62:59:
                    aa:62:35:5c:0f:55:ee:84:51:59:1e:4d:ad:e6:1d:
                    20:12:b3:3d:e4:70:da:86:bb:fa:5e:e2:a1:3a:ca:
                    07:eb:53:ae:1c:a0:af:6b:52:61:26:4f:ab:71:6e:
                    fa:b4:47:e2:33:20:50:6a:94:25:d7:09:0b:02:69:
                    35:2e:eb:68:75:a9:8e:e4:92:d2:ec:a1:9f:6e:ac:
                    7b:f4:7e:f3:6d:21:a6:13:2d:76:bd:36:02:74:94:
                    94:e6:55:3e:03:43:dc:7a:d7:49:25:0c:f0:20:18:
                    e2:b3:5b:1f:2c:1f:33:f0:80:42:75:20:aa:58:0f:
                    23:83:6c:cc:1b:5d:ca:eb:2d:cf:5a:d0:16:5f:9a:
                    fc:e7:54:03:8f:be:99:34:39:60:69:0c:f8:23:0f:
                    30:d0:55:a0:5a:b8:2b:1e:9e:9c:c9:45:be:ef:a4:
                    18:1e:df:f0:f7:31:db:10:3d:fe:cf:52:66:62:8c:
                    10:42:c9:ad:78:1e:51:a4:5a:f3:b9:24:ae:9d:fe:
                    8a:f8:86:64:9e:37:c2:20:20:5c:cc:c3:52:75:b2:
                    6e:86:a4:f2:13:cb:35:e5:8d:19:42:06:c6:8e:0d:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1B:7B:01:91:A7:08:B0:2A:7E:47:83:B1:86:B9:15:D0:44:75:94
            X509v3 Authority Key Identifier:
                keyid:91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:72:90:27:16:2b:a2:b0:c9:d7:49:d9:9e:9a:5e:27:12:
         81:2d:8e:2a:99:0f:01:78:3e:b2:6a:b8:ae:31:71:ac:42:33:
         4a:cf:83:7b:f1:5d:03:bd:6a:4e:c9:9a:76:23:f9:6f:72:70:
         3b:4e:6d:6b:70:82:b6:81:c5:27:b0:43:99:99:b9:51:58:f5:
         d0:47:2b:4d:70:01:8c:46:2b:12:db:4f:06:7c:0d:9f:b1:2c:
         43:f2:80:fb:2b:ff:86:0d:d4:fb:a4:6d:22:83:1c:89:47:8e:
         67:d6:4e:23:94:97:9a:31:c9:74:8a:ae:f6:c2:30:0e:b5:f3:
         4e:8a:7d:ab:d3:b4:c7:ee:3f:16:66:14:c0:12:86:b7:f3:68:
         7e:a1:e4:83:c7:c8:17:9e:4a:60:2e:9c:66:02:c8:52:32:6b:
         2d:71:9f:74:f6:76:c0:4d:cd:d6:c5:0d:0a:e4:04:2e:62:c5:
         5c:6a:32:69:8a:c5:ff:6b:0d:58:da:95:84:b5:c1:1d:61:ef:
         07:da:f7:0b:a5:4b:96:2e:6f:f5:db:a6:a1:ab:b8:da:af:79:
         e6:87:af:b1:36:d5:0c:d4:87:4c:22:06:6c:bf:68:e2:7d:b9:
         cf:cd:49:3b:ec:1b:c0:ec:5e:79:a4:12:0c:94:77:2c:d4:7f:
         45:76:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:29 2026 by rpki-client