Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File:                     Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier:          h004VaXg0HSRUywdDK8+h7oJDpZ6QhB+MjT4uuGVjeI=
Subject key identifier:   B7:A6:34:BD:65:49:1E:A5:6B:31:C0:1D:FA:8E:4D:C4:D7:0A:A4:81
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer:       /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial:       01A166EBE640FD261E618016E431517232A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number:          02BC
Signing time:             Fri 23 Oct 2026 04:01:38 +0000
Manifest this update:     Fri 23 Oct 2026 04:01:38 +0000
Manifest next update:     Sat 24 Oct 2026 04:01:38 +0000
Files and hashes:         1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: jn+SMRoLIi9b+bohpBa6cQQekdrWhBqiKPhQ2z2wRk4=)
                          2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:eb:e6:40:fd:26:1e:61:80:16:e4:31:51:72:32:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
        Validity
            Not Before: Oct 23 04:01:38 2026 GMT
            Not After : Oct 24 04:01:38 2026 GMT
        Subject: CN=b7a634bd65491ea56b31c01dfa8e4dc4d70aa481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:fd:35:d7:4a:ef:44:bc:19:bd:39:96:04:
                    04:ab:4b:8f:f4:05:ec:02:37:fd:2b:84:63:4f:dd:
                    a3:65:5f:c6:72:43:c9:1b:da:04:65:fe:3e:51:b1:
                    f6:22:3c:6b:1d:d4:62:38:55:94:e4:de:82:bc:29:
                    31:ad:af:1e:63:83:07:bd:95:8c:3d:88:15:d1:ee:
                    b8:06:1b:dc:a1:95:d3:78:41:27:0e:30:02:cd:02:
                    87:9b:c9:67:63:03:42:60:32:b7:f3:6a:ec:ba:92:
                    df:c3:d3:05:d5:11:18:24:0f:54:87:79:7a:25:c3:
                    04:54:b7:7c:21:a2:3e:6e:eb:e8:d6:b5:7c:1d:8c:
                    d6:9a:68:93:ef:e6:b5:84:93:f5:b7:33:75:f9:29:
                    eb:a9:dc:d7:c1:9a:75:5f:f9:5a:cb:4d:af:33:28:
                    95:f9:f1:95:96:04:c5:ef:50:52:a4:9e:cd:da:b8:
                    89:6d:ad:50:7e:09:46:0c:1b:bf:a2:77:6d:02:e3:
                    da:14:88:3a:85:80:62:a7:bb:41:4c:e4:d9:72:8a:
                    b2:ab:08:3a:1a:f2:9c:d7:6d:1b:89:88:d9:49:19:
                    c3:2c:80:c5:42:de:41:6c:61:69:eb:08:ca:37:16:
                    b2:88:45:10:8a:4e:d9:07:cf:83:c6:6f:31:97:39:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:34:BD:65:49:1E:A5:6B:31:C0:1D:FA:8E:4D:C4:D7:0A:A4:81
            X509v3 Authority Key Identifier:
                keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:45:af:71:a6:fe:86:a7:df:64:f4:91:a9:c0:15:be:ad:10:
         bb:2e:22:fc:74:cc:df:fa:30:97:e4:38:7e:27:e9:8c:ce:ee:
         12:f9:91:60:de:3b:7a:37:67:10:9f:ee:55:75:f1:1c:06:76:
         fc:5d:a5:dc:b9:c6:e5:68:06:0e:1f:5c:f3:13:41:53:b7:22:
         89:48:1e:f8:a1:ad:77:08:05:f0:c6:0e:29:01:bb:20:30:86:
         09:11:de:62:d3:00:bf:d0:6b:dc:63:60:60:54:c7:df:de:9a:
         d6:26:19:0e:4d:fa:32:de:66:60:9a:47:6d:6d:b9:05:c2:7f:
         80:a9:42:3c:5f:ef:af:56:bd:87:41:ce:3e:39:e8:6c:dd:ab:
         71:c2:f3:e4:fb:05:a9:97:9b:3d:f0:da:9b:da:4b:99:0f:1b:
         aa:56:14:a4:5f:04:4e:8b:12:e4:c7:91:dd:63:a8:ae:c7:da:
         e5:82:bc:17:a6:e6:e9:3b:e8:32:22:1e:6f:18:5d:dc:4f:43:
         4f:ac:65:84:a2:df:d3:98:7c:dc:44:d1:62:fa:1b:1d:82:df:
         fe:4f:ba:85:d9:fa:44:8a:11:d5:7d:39:7d:e3:3c:47:ec:2a:
         5f:90:c3:df:2d:c2:88:c4:eb:f1:eb:94:c4:3a:d0:77:9a:3c:
         2a:e4:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:36:28 2026 by rpki-client