Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          Z3XHeaAAUHBsVPw543rG7vqFZqsz6zWBnmj4M+jxe10=
Subject key identifier:   E4:EE:BD:E8:7B:70:FF:E7:25:62:5D:25:71:F1:A3:8E:A2:07:0D:86
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       01A0B91C2711732EF638449FD92924FB78D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          1A66
Signing time:             Sat 19 Sep 2026 10:00:24 +0000
Manifest this update:     Sat 19 Sep 2026 10:00:24 +0000
Manifest next update:     Sun 20 Sep 2026 10:00:24 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: 1qTKngQXec6LjiBzRMtFh8b7/krYuu3Um6mVdJZ4aZ4=)
                          2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
                          3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
                          4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
                          5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b9:1c:27:11:73:2e:f6:38:44:9f:d9:29:24:fb:78:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Sep 19 10:00:24 2026 GMT
            Not After : Sep 20 10:00:24 2026 GMT
        Subject: CN=e4eebde87b70ffe725625d2571f1a38ea2070d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:ae:10:a0:ba:fa:99:63:78:78:b7:77:1c:
                    91:5c:e7:5f:ac:08:97:16:4f:42:dc:35:1f:d2:6f:
                    ca:3e:d0:a2:bd:48:f8:60:37:d4:31:de:4b:1d:5a:
                    33:03:a6:65:14:44:94:0c:09:f7:0f:71:4b:6d:3e:
                    91:c1:9e:ff:0e:6e:87:e7:91:28:9b:82:12:79:16:
                    86:5c:e0:88:ef:e5:ed:33:a6:f3:73:f2:57:16:e7:
                    1e:b0:31:8e:28:a6:dd:6d:b5:2c:9c:f9:73:5f:4e:
                    dc:f2:c3:ae:0f:e1:97:19:f1:d0:88:c9:74:71:76:
                    f8:aa:23:0c:79:da:1c:30:46:e5:c4:bb:7c:61:6a:
                    3b:33:23:5e:91:4c:ad:a1:7b:f7:2e:dd:39:c4:16:
                    7e:5c:73:a9:98:ae:a0:e8:a8:a1:0b:9e:4b:56:04:
                    63:14:c6:eb:84:39:99:e7:64:aa:d1:50:21:3b:25:
                    7e:a3:d1:7f:c0:fd:16:af:e9:9e:58:a5:66:9a:fa:
                    a6:1d:0b:ea:de:63:9e:ae:2a:64:c4:65:fd:ee:fa:
                    d2:71:06:9c:72:cf:aa:c9:32:b2:48:7c:09:f6:27:
                    29:35:73:64:c9:51:df:96:54:6c:a2:31:f8:8e:cf:
                    9d:27:b9:3a:1f:9f:9e:4d:81:94:91:77:e7:09:2f:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:BD:E8:7B:70:FF:E7:25:62:5D:25:71:F1:A3:8E:A2:07:0D:86
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:73:43:0a:f2:62:b6:22:17:67:17:c6:05:96:34:f3:5c:00:
         9e:8a:b5:d7:d3:0d:15:53:ca:8c:60:5a:e6:a0:83:8f:cd:4d:
         cd:ab:6a:fc:37:91:61:42:1f:be:f0:c7:be:22:8c:78:6b:6d:
         c2:83:f1:3b:60:95:ab:d9:65:d4:aa:e0:f9:61:5a:61:4a:ef:
         98:3c:b7:2f:7d:b7:cf:de:1f:94:d1:21:7f:65:96:54:53:f4:
         cf:f1:fc:5d:24:c8:16:01:b2:9e:1c:0d:75:17:5c:99:ed:6b:
         5b:80:28:e4:ba:c9:4f:23:1b:fb:eb:9d:0e:e3:d5:6b:cc:b8:
         b3:03:80:28:04:80:29:51:cd:d9:0a:ab:78:78:ba:31:72:2e:
         59:60:66:6d:4f:e7:30:e5:ef:84:b4:a2:59:f2:2a:12:fb:30:
         a4:48:bd:3c:a4:08:ac:c4:05:d4:21:ef:15:e1:5a:01:79:a5:
         4e:e4:6a:55:d1:9d:de:42:8c:d8:51:3c:f3:05:01:cf:16:8b:
         bf:55:fb:15:ee:f8:22:61:b8:aa:e8:d1:fd:41:96:36:0c:18:
         77:5b:e8:41:5b:0b:8a:c4:72:bf:66:b5:d2:ab:21:10:b9:e5:
         5c:53:7f:ab:2b:b9:76:6c:59:b4:3b:54:55:01:59:61:db:42:
         4c:52:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 20:02:46 2026 by rpki-client