Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          K37qryU50GAtlqcJfcDUfeLOQtECVTK4GT/4uriIlpM=
Subject key identifier:   D6:53:EC:E6:70:4B:B3:EC:DD:6E:56:B3:66:29:CA:E5:A8:36:0D:C9
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       01A167FE07641ACC63FE935C2F51E95EAD45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1639
Signing time:             Fri 23 Oct 2026 09:01:03 +0000
Manifest this update:     Fri 23 Oct 2026 09:01:03 +0000
Manifest next update:     Sat 24 Oct 2026 09:01:03 +0000
Files and hashes:         1: EDNpAts-6JeGE5wjiUM5BMSnB9k.roa (hash: URMxngJbXriRE2iOut0YpTm56ViTEGhL3sKLZKHuyJ0=)
                          2: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: 1Grc9KonG2L/A+aRjRgsTS+e/cgvwjG5YcdZQF0FHLQ=)
                          3: Mz1Pckz4GFpvQcLGeGjvkgHgEUc.roa (hash: DDYkbbLPOZouFDJgBa+WHylISlZR4ujlVO/1zXw9mng=)
                          4: UBjaQjSsvCaMWIObSymTDrfellU.roa (hash: FakZBVr4LoPzsh/Z6oDhedet2QWrNOrHB6+ZNqqvw9I=)
                          5: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (hash: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg=)
                          6: sAk06Tsd-_YR9NQduC3T-piAvWk.roa (hash: xw7/19cXkRCZDOVeEPf+Eoup5YiNyQhWAOUhvYY+IJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:67:fe:07:64:1a:cc:63:fe:93:5c:2f:51:e9:5e:ad:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Oct 23 09:01:03 2026 GMT
            Not After : Oct 24 09:01:03 2026 GMT
        Subject: CN=d653ece6704bb3ecdd6e56b36629cae5a8360dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:b6:30:26:23:cc:2d:a6:b4:46:ff:2d:be:
                    68:f6:ee:a4:19:4e:db:a5:8c:97:9a:79:e8:a0:aa:
                    d7:75:24:55:59:5f:e8:61:7a:0b:b1:b3:cf:40:4d:
                    ca:ec:88:2a:59:0d:7a:c7:6a:90:37:c9:cb:cd:72:
                    2b:46:1c:d2:b2:7d:a8:53:09:e8:ca:b7:c2:e1:af:
                    52:be:06:ce:11:34:a8:78:42:0b:c4:ec:ec:68:fb:
                    22:9a:6c:28:22:1a:ff:ed:da:60:e9:eb:d0:ce:d7:
                    78:e8:c4:db:a2:09:bc:49:c6:bd:bd:ab:59:f6:2c:
                    60:81:db:bd:e7:5a:66:12:cb:75:dd:6b:11:7c:69:
                    3a:a7:56:23:2e:53:0d:64:8b:ee:0e:d0:18:70:e4:
                    8e:38:fe:47:38:24:58:29:bf:9e:b1:a2:a8:57:da:
                    9b:0d:68:10:07:36:9e:09:8f:5c:36:df:fb:d3:21:
                    20:f1:b1:4f:76:3c:6c:54:67:94:9c:80:44:bc:f8:
                    84:9d:32:90:38:be:a6:24:d1:10:ad:c2:a3:d3:eb:
                    b7:5a:8c:e0:ba:06:83:02:6f:cc:8e:7c:2c:61:68:
                    0c:c3:55:97:51:54:ef:8e:83:96:33:01:1b:c8:61:
                    b0:ec:97:b5:cc:ac:26:e6:fc:b9:b3:d6:77:3f:2e:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:EC:E6:70:4B:B3:EC:DD:6E:56:B3:66:29:CA:E5:A8:36:0D:C9
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:9a:cf:60:0d:b0:3f:ef:36:42:f5:71:36:4e:ce:fb:3a:
         04:7d:5e:f7:b1:f1:9b:bb:5b:6d:fe:be:a6:be:de:b7:39:0f:
         65:70:89:d0:56:14:f0:d4:15:b0:19:87:e4:1c:51:e8:ad:57:
         18:79:c6:47:a4:d3:60:5d:63:50:cf:0f:12:ea:61:d4:34:37:
         58:3d:de:58:cf:40:e7:ed:f9:90:3b:5e:82:67:66:10:54:09:
         7c:df:91:03:fe:48:f0:3e:4e:10:1e:26:37:27:bc:8b:46:12:
         b1:ee:66:f9:bf:e1:f8:c5:6d:7e:06:3c:8c:87:72:16:72:9c:
         3c:9f:39:9c:4b:ad:a1:bd:68:cd:d3:1e:0d:02:80:13:db:f2:
         c4:50:b9:4a:5e:1e:24:2f:62:59:ce:1c:6a:b9:ab:f1:21:6b:
         04:4c:fe:58:c4:64:6d:bc:00:a8:e9:10:0f:1d:bc:0d:77:31:
         26:52:a3:f2:95:11:d1:0c:26:1c:63:ac:27:0a:73:54:9e:50:
         89:8d:c9:01:b9:58:1e:66:ca:e6:1e:4b:6b:b9:75:90:a7:8f:
         bf:0e:93:a6:eb:0c:ec:41:58:9d:e9:1f:e8:23:25:04:a5:35:
         48:4b:17:26:02:fa:70:77:37:42:7b:74:db:1d:1d:31:64:34:
         80:66:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:03:02 2026 by rpki-client