Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          I+fZiMRG8Vm5RICXfdUwoKi749F1GUiSK/hcfvKDBUU=
Subject key identifier:   1B:F7:68:DA:8B:9A:CE:A9:D5:B1:D0:F8:24:54:3B:EA:E3:D7:2C:68
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       01A118CFA6C4A8FA2E7BFF3AD43E09C5601B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          1A96
Signing time:             Thu 08 Oct 2026 00:00:24 +0000
Manifest this update:     Thu 08 Oct 2026 00:00:24 +0000
Manifest next update:     Fri 09 Oct 2026 00:00:24 +0000
Files and hashes:         1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: MGKolU9BWSMhzhNaEIVVdya+6utnm/0RjYuOHKYl2MQ=)
                          2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
                          3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
                          4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
                          5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:cf:a6:c4:a8:fa:2e:7b:ff:3a:d4:3e:09:c5:60:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Oct  8 00:00:24 2026 GMT
            Not After : Oct  9 00:00:24 2026 GMT
        Subject: CN=1bf768da8b9acea9d5b1d0f824543beae3d72c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:c8:01:74:53:96:1c:50:9a:31:11:5a:2a:
                    27:2b:3f:3e:be:e3:6e:05:69:30:87:13:3e:3c:9b:
                    f1:79:6c:ac:97:6c:78:1b:86:5c:bb:19:f9:4a:84:
                    30:49:c1:da:b6:01:42:4b:04:9b:4c:e2:a6:7e:65:
                    04:44:c8:9e:08:e0:a1:66:1c:fe:9c:f8:05:c0:08:
                    a7:32:ba:fe:65:c6:ad:b8:5a:c2:9c:0a:0e:2c:ea:
                    f5:70:05:80:07:48:f1:f2:33:15:1f:8c:51:8d:51:
                    10:a5:86:59:30:9a:88:2b:3c:ba:04:70:94:4e:4f:
                    45:ed:c7:cb:37:80:f7:9a:fc:c7:59:3a:81:a2:f5:
                    26:f0:82:63:4b:4d:c3:32:11:f0:60:ca:9c:3c:ad:
                    6e:3c:ac:c6:47:3a:bb:43:26:86:3e:6a:d4:bc:05:
                    5a:57:89:cf:1b:1b:66:34:de:2a:84:1d:6f:0d:02:
                    c2:27:53:c2:41:c8:9b:ca:4b:c5:3d:2e:5f:3a:e5:
                    51:a4:a5:2d:f2:d2:37:d3:e0:09:e1:d1:9a:cf:cb:
                    e7:54:2f:67:fd:b8:f1:dd:13:3a:de:89:78:43:4b:
                    b6:d5:83:d5:62:cf:ae:d4:f4:f2:ef:23:75:d4:f2:
                    d8:6e:16:e3:ec:5e:d0:29:16:8e:91:80:52:5f:fd:
                    df:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:68:DA:8B:9A:CE:A9:D5:B1:D0:F8:24:54:3B:EA:E3:D7:2C:68
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:b9:1f:8c:c7:5d:f5:16:67:74:3c:dd:65:c7:f3:6a:3e:
         ea:c0:77:1f:38:bc:38:28:ff:ab:67:f1:f8:fa:1a:76:8f:f1:
         f5:0d:12:06:00:9e:00:6d:1b:33:49:fc:18:54:2f:c8:50:c8:
         b6:d3:b0:06:44:70:c0:94:54:9c:e4:99:a5:0a:ce:0b:b4:07:
         f8:fa:0e:6e:16:a7:b3:1d:df:9a:7a:0b:d5:9c:53:90:dd:06:
         bf:bd:09:49:54:48:84:51:50:98:bd:d9:c8:e7:d5:0b:e3:f8:
         76:91:1d:a4:3f:fa:a3:cc:45:46:c2:a7:f8:21:d6:42:75:93:
         85:fc:9f:69:a8:33:39:80:e1:04:64:13:91:9a:53:8a:27:b9:
         86:ae:c1:08:45:44:91:ef:33:cd:e5:cb:c3:25:82:2f:8c:78:
         a5:c0:55:74:d4:11:d9:03:85:bc:8a:ff:15:4a:eb:e3:7c:e7:
         27:fd:d5:a0:9a:61:a4:f2:53:b1:87:13:a8:d9:cb:5f:05:c2:
         f2:91:7c:84:f6:a8:45:d2:da:9b:cc:30:e1:bb:03:62:53:a8:
         41:ca:ff:78:92:b0:db:5e:e8:95:62:72:a2:f0:31:6a:53:71:
         34:65:4a:fa:31:40:f2:e6:42:ca:98:79:8c:f6:2f:3b:d0:fd:
         18:1c:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:54:45 2026 by rpki-client