Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
File:                     KZkwB8fJLfYXjny0MYP9f1KlJtg.mft (raw, json)
Hash identifier:          AEgym+wVn1Jtb5YcQ5DVdSEthL7/5nDZpQ9DMwX5Tn8=
Subject key identifier:   E1:28:BD:AE:EB:57:7A:9C:7B:12:6E:50:52:90:BD:4D:BF:1D:43:C4
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Certificate issuer:       /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial:       01A11718829B59CCDD2ED62E59403E79901C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
Manifest number:          083F
Signing time:             Wed 07 Oct 2026 16:00:44 +0000
Manifest this update:     Wed 07 Oct 2026 16:00:44 +0000
Manifest next update:     Thu 08 Oct 2026 16:00:44 +0000
Files and hashes:         1: 7f4UvQlMdpfAbI5t8bFTk5iRj8k.roa (hash: /N2n+SGiRBz3V3eyWEIptUhy7tOM9oDQMEZwfy867yE=)
                          2: CGspQAEXscYtnhUkcO43B4rOMYI.roa (hash: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0=)
                          3: JdmDASsiVF3OIVzqa3C7Cim1k98.roa (hash: nFwnLYcc5xw59Kim5t3Ysus4IUlGUDLjCzJ6lO8Sg5o=)
                          4: KZkwB8fJLfYXjny0MYP9f1KlJtg.crl (hash: gGVnFURKjgMiTYxYEaWg1rBXbKA9TuxR1tAUqExyTNQ=)
                          5: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (hash: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o=)
                          6: zq_9_kcYqu3vefIRsvfC8bPWQ-g.roa (hash: QDKMvUQqB0HqtMyuZtPJ5BCeeeIwdd+NrKPpEKtzi6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:18:82:9b:59:cc:dd:2e:d6:2e:59:40:3e:79:90:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
        Validity
            Not Before: Oct  7 16:00:44 2026 GMT
            Not After : Oct  8 16:00:44 2026 GMT
        Subject: CN=e128bdaeeb577a9c7b126e505290bd4dbf1d43c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:89:b3:cc:7a:d5:d8:9b:cd:91:3c:3a:73:
                    60:13:96:4f:ba:3b:e8:74:e0:41:7e:76:7c:30:60:
                    b2:ca:0e:87:1f:67:23:f2:d6:a9:24:65:f4:5c:61:
                    f8:5e:f8:ab:36:fb:cf:f7:53:8b:5c:c7:3a:e1:e6:
                    15:b1:d0:29:de:92:b6:a8:e7:83:f2:2e:19:fd:24:
                    f4:fb:1e:12:8a:43:77:d5:7b:fa:81:86:85:5c:47:
                    5b:6a:f9:1f:68:0f:e0:a5:f5:18:63:fc:55:24:82:
                    bf:15:a1:5f:01:8f:2a:6e:da:e7:eb:f3:ae:9d:f1:
                    65:b3:5d:ac:22:aa:7f:d6:1d:8e:3d:87:f0:72:86:
                    4d:65:3d:54:40:e5:74:eb:7f:6b:9d:24:13:0e:df:
                    e0:48:2c:6b:22:c0:14:3b:f5:e0:cf:91:70:81:3d:
                    00:c1:7f:1c:25:44:18:0b:cf:54:d8:56:89:5f:09:
                    a8:6e:ab:89:bf:de:37:a2:60:72:d1:93:8f:e0:d5:
                    aa:6e:d4:80:9e:77:0a:bf:bf:ad:23:49:7c:3e:b1:
                    22:89:70:01:fd:6f:ca:9d:7e:60:bc:97:9d:f2:48:
                    6c:3a:28:b4:95:ab:32:3f:f6:f5:68:0a:7a:ed:c6:
                    a6:17:99:7f:b6:99:a5:99:a2:70:00:6a:71:46:c9:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:BD:AE:EB:57:7A:9C:7B:12:6E:50:52:90:BD:4D:BF:1D:43:C4
            X509v3 Authority Key Identifier:
                keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:aa:93:f4:3e:b3:47:c9:90:43:b5:1f:55:91:a4:f0:3a:60:
         7b:35:da:da:94:2a:70:cc:44:df:d9:ab:77:f9:02:96:e1:5c:
         fb:1c:5d:63:96:6b:a6:6b:b2:f1:19:a3:08:a8:47:5f:e2:82:
         6a:d1:08:6e:ae:35:f6:5a:43:fd:56:39:e0:b4:28:6b:b6:dc:
         55:c3:35:25:e7:21:36:e1:5d:44:4e:6e:41:ce:a4:76:99:e7:
         38:96:d9:06:97:6d:5d:ce:50:36:80:bd:83:aa:92:3c:df:c2:
         d0:9b:e4:d1:51:2e:a1:02:59:a0:97:4c:1f:7d:88:bb:06:bf:
         88:41:23:00:3d:9b:f0:a9:86:3b:02:f3:e1:0c:ef:2d:1c:87:
         5f:eb:e0:e4:54:a0:a1:fa:fc:a6:95:83:f7:56:ae:54:b5:0c:
         82:10:94:7f:06:36:c9:07:c4:a8:c6:b2:c6:f5:1f:3f:1a:39:
         b1:c9:c4:c1:8b:a1:e5:2b:5e:6c:bc:fe:26:68:16:74:3b:7a:
         b7:54:dc:a6:1c:69:91:ad:1b:2f:6c:c4:d0:4b:3c:6c:fd:cb:
         a0:16:e3:5d:5e:55:1f:7b:1e:97:cc:05:fc:f3:19:14:34:bb:
         21:9e:65:6e:5a:e6:51:e6:a6:0c:cf:46:23:85:28:f1:e1:fc:
         73:e1:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:45:40 2026 by rpki-client