Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File:                     KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier:          MuIf1JjzQgYXqq5Et13udiMevs0tyvCjGUXUSr6HLs8=
Subject key identifier:   02:FC:C9:DC:71:7D:52:C5:38:33:44:B6:51:06:C4:82:11:63:8C:8D
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer:       /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial:       01A120528E5132E2430FA13D219667D6259B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number:          02A0
Signing time:             Fri 09 Oct 2026 11:00:43 +0000
Manifest this update:     Fri 09 Oct 2026 11:00:43 +0000
Manifest next update:     Sat 10 Oct 2026 11:00:43 +0000
Files and hashes:         1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
                          2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
                          3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
                          4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: ifk2SPHCWebPGg4RrAmzcnBnWtvojaJgu1M9/mxoxJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:52:8e:51:32:e2:43:0f:a1:3d:21:96:67:d6:25:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
        Validity
            Not Before: Oct  9 11:00:43 2026 GMT
            Not After : Oct 10 11:00:43 2026 GMT
        Subject: CN=02fcc9dc717d52c5383344b65106c48211638c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:d1:61:de:cd:f0:70:d9:3f:a3:98:5d:e6:
                    32:d4:13:68:8f:27:44:ef:d5:7b:7b:41:e9:a3:50:
                    50:d2:96:39:78:d0:87:4c:94:6d:48:af:3d:b3:1c:
                    85:44:b5:ba:f0:96:0b:ea:29:d5:54:23:42:5b:bb:
                    c0:46:e4:63:ae:e0:d0:0d:ce:ec:0f:3e:53:a2:5b:
                    0c:62:42:7b:a2:5f:4b:3b:75:6e:7a:ee:9e:c0:06:
                    bc:51:e2:39:12:9e:ed:39:86:af:ef:30:ff:b2:9b:
                    cd:9c:59:f6:44:75:4f:0d:41:a9:0f:eb:e2:81:43:
                    ae:6a:7a:59:b2:c6:a3:18:65:fd:e4:12:28:3a:de:
                    5c:5a:30:77:13:16:08:06:a3:61:aa:fc:cc:d2:e1:
                    d9:87:6d:5d:d9:db:ec:dc:db:01:60:ff:01:60:81:
                    54:83:18:95:36:81:a8:7b:73:3a:95:8b:a2:e6:72:
                    0e:31:b5:f2:81:b2:64:08:f8:94:0b:e0:2f:8c:5e:
                    74:39:ee:89:db:a9:a5:de:2b:9a:33:4b:e3:d0:b6:
                    75:53:80:75:d9:4c:11:c4:68:a8:01:4a:71:05:45:
                    be:82:3d:48:ed:fb:59:c4:bf:8f:74:3c:d2:de:cb:
                    05:d0:5d:8f:24:08:00:ee:af:74:3a:92:c2:0a:c3:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:C9:DC:71:7D:52:C5:38:33:44:B6:51:06:C4:82:11:63:8C:8D
            X509v3 Authority Key Identifier:
                keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:e5:79:1f:63:7e:ee:b8:bc:74:75:eb:66:80:db:70:3f:
         54:52:1c:8c:20:29:b7:bb:9e:6e:10:87:7d:23:be:db:5b:c6:
         0d:57:b2:2e:dd:9c:29:01:35:80:86:84:a0:cd:43:9e:8e:3b:
         7e:2f:d9:bd:5b:cb:cc:ea:04:6e:11:10:2b:7e:03:fd:19:ef:
         90:ca:db:7d:8a:6a:7a:34:3f:4b:8f:ee:5a:bf:0e:14:d1:58:
         c9:85:71:e7:e6:95:56:22:ee:d9:27:76:f7:f7:6c:e1:24:a0:
         c1:1c:a1:50:d0:e2:4d:26:08:7c:e9:ab:62:cc:e6:dc:4e:a4:
         13:c3:29:e0:c4:6b:f8:72:17:48:e6:ba:ab:93:7e:45:0d:a9:
         c3:19:90:5f:bd:30:af:2a:5f:8b:b3:35:28:70:58:59:1b:02:
         a9:b4:f6:96:e6:1a:6d:66:29:76:88:5d:ff:05:bc:75:34:44:
         d0:a4:8e:92:f6:c8:91:71:91:09:82:a8:39:0a:e0:83:5b:f5:
         5c:82:c4:26:b8:ec:6f:5a:75:88:43:39:d0:4c:07:5d:07:8d:
         c1:e0:9a:18:73:df:02:2b:3b:00:f3:eb:80:e1:f9:33:bd:b4:
         6e:b3:b7:da:99:d6:60:5d:1e:21:30:86:d5:99:7e:25:1a:41:
         1c:69:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:55:19 2026 by rpki-client