Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          O+gk8a4y75rjJZPhGWKJTEswVGU2p6szBG0lGsBJ/BM=
Subject key identifier:   99:62:96:3D:D9:C3:D0:0A:1D:CE:F9:FE:B0:20:36:17:E9:C9:19:34
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       01A166100C7BD7C6AEE5A3907B0C9B0CE72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1638
Signing time:             Fri 23 Oct 2026 00:01:30 +0000
Manifest this update:     Fri 23 Oct 2026 00:01:30 +0000
Manifest next update:     Sat 24 Oct 2026 00:01:30 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: IY+EiG6WOQmAUvwO5MFidQK+eqqX3NARFf39gNfR6nQ=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:10:0c:7b:d7:c6:ae:e5:a3:90:7b:0c:9b:0c:e7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Oct 23 00:01:30 2026 GMT
            Not After : Oct 24 00:01:30 2026 GMT
        Subject: CN=9962963dd9c3d00a1dcef9feb0203617e9c91934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:26:5e:08:b6:90:e6:4f:dd:d0:7f:9c:86:
                    72:14:6d:be:e0:fd:19:66:34:a6:b0:aa:9e:fe:7f:
                    70:62:e7:ab:ad:23:8a:1f:43:35:71:70:fe:f4:13:
                    1a:26:a2:67:ce:de:95:58:99:a4:18:52:bc:39:fe:
                    eb:62:1b:59:f8:ed:89:9a:04:58:32:bb:7b:3f:7d:
                    34:28:49:07:ae:ff:d1:e7:e7:f6:29:47:fa:a9:63:
                    b1:02:76:db:64:65:8a:6d:33:c1:eb:30:8a:0e:e1:
                    eb:69:68:98:57:6c:dc:5a:c1:59:0b:fd:be:6b:e8:
                    8b:ab:24:56:f8:4b:08:82:15:cf:1e:c2:9a:89:f3:
                    23:f3:b0:e5:8d:bc:9e:d9:7c:75:2c:25:77:a5:b9:
                    87:56:96:ea:3a:a6:27:a7:37:ce:7f:4b:f7:5b:28:
                    ce:2f:cd:3e:85:4b:94:3f:fe:2d:15:80:98:45:d8:
                    83:4d:2b:8a:a1:b2:cb:b1:58:ec:47:c0:d9:f3:2a:
                    c5:59:25:87:cf:69:2d:0c:be:96:f3:fe:fe:cd:85:
                    de:cc:01:e1:2d:3e:d6:ea:ec:8b:0e:d9:d6:8b:eb:
                    d8:82:f7:2d:39:b5:03:a1:b4:4d:1d:0f:ab:5d:e7:
                    8e:41:2e:98:f6:64:6c:94:0e:b9:32:32:9c:ad:02:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:96:3D:D9:C3:D0:0A:1D:CE:F9:FE:B0:20:36:17:E9:C9:19:34
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:9d:88:c6:88:f4:ac:c8:fc:93:df:43:9f:19:e8:8f:a0:
         9f:f6:38:05:d2:c4:d6:bd:a9:5f:34:30:66:09:63:de:75:05:
         50:98:43:ed:ce:fb:84:24:93:6e:73:2f:26:c9:e0:74:c2:c8:
         25:ef:64:b2:29:27:2a:14:27:e3:2a:20:1c:b4:30:b6:5b:9b:
         3e:24:9b:2c:52:93:fe:1e:4f:f9:cc:ae:51:df:b9:32:ef:37:
         00:dd:2c:27:a9:95:66:a8:24:18:b5:49:1c:84:ef:25:2c:39:
         6d:f8:da:4f:3e:20:d8:39:ba:64:04:f2:04:ce:d0:f0:ff:08:
         25:16:68:28:47:92:c0:8b:21:a2:4f:74:36:35:11:47:1a:b0:
         53:c7:00:57:a1:b5:40:27:38:39:ea:81:f5:b7:9f:7e:65:a4:
         ff:79:bb:02:dd:e8:60:ce:66:d3:01:d8:22:ea:13:e5:73:2c:
         74:7c:78:01:d5:2b:81:f5:31:bc:66:f2:40:b3:d8:f2:91:16:
         c3:3e:67:d3:0e:c2:d6:c6:cc:03:70:7d:a7:fb:0f:f3:d6:9e:
         77:76:07:fc:d7:ec:9a:8e:51:ea:d0:32:ca:53:c3:4a:74:da:
         47:98:3c:a1:a6:af:c3:cc:29:ac:24:a8:c0:9c:12:6b:ef:76:
         13:3b:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:17:42 2026 by rpki-client