Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          poojHBBRnUMYtJSJ2IoqYfqlPSqnAnvufhxgMzRSPvA=
Subject key identifier:   E7:33:90:05:6A:FD:E0:7E:EB:0F:80:83:70:E1:D2:71:B8:8E:92:02
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       01A11D1A8A9A75113497FA10B164F9A50A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1A98
Signing time:             Thu 08 Oct 2026 20:00:40 +0000
Manifest this update:     Thu 08 Oct 2026 20:00:40 +0000
Manifest next update:     Fri 09 Oct 2026 20:00:40 +0000
Files and hashes:         1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
                          2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
                          3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: OF8T/BVKQK2DyAAmGcDjAppDcsceW6l6n4wsRykk0yE=)
                          4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
                          5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:1a:8a:9a:75:11:34:97:fa:10:b1:64:f9:a5:0a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Oct  8 20:00:40 2026 GMT
            Not After : Oct  9 20:00:40 2026 GMT
        Subject: CN=e73390056afde07eeb0f808370e1d271b88e9202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:66:f4:f5:8e:6b:ad:6f:3a:9d:63:9b:6c:
                    7e:9d:69:b3:f7:ae:0b:38:58:e1:26:cb:58:cf:76:
                    2e:9b:4e:34:b3:1f:7c:4c:26:b9:72:46:c9:e1:16:
                    e8:40:d2:e4:d0:3a:6d:25:95:44:cf:53:54:d2:be:
                    20:f9:dd:c7:66:d3:39:bb:28:89:10:b0:0c:10:0f:
                    fc:3f:d0:3e:ff:fb:0c:71:94:fc:86:f4:73:50:ca:
                    06:ec:be:46:ad:82:05:5a:00:1c:28:38:03:55:16:
                    d9:1a:70:de:a9:86:fe:fa:a8:95:16:ec:a4:9b:89:
                    c0:85:0e:81:f6:19:55:45:6d:b8:ff:9e:ef:34:53:
                    4f:ac:e2:6b:fa:05:69:42:07:32:76:0b:93:04:00:
                    db:6c:be:c8:76:a4:49:c1:9a:6c:a4:62:3d:7f:50:
                    d3:9f:bc:b7:61:65:01:6a:16:34:e6:e1:a0:4d:e6:
                    bc:a7:aa:9f:05:8f:12:da:8e:3e:c7:f0:1c:e7:c2:
                    e9:05:b7:4a:67:cc:61:e7:0c:e2:38:91:14:fe:ec:
                    9a:17:4f:27:8e:61:29:fc:89:0b:dd:9e:1a:11:9c:
                    94:68:db:5e:bb:fb:94:c3:c6:3a:e0:8f:c3:cf:81:
                    36:05:56:70:a5:eb:4d:53:c9:4e:55:d5:86:d2:bb:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:33:90:05:6A:FD:E0:7E:EB:0F:80:83:70:E1:D2:71:B8:8E:92:02
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:38:53:8f:94:96:a3:fa:f6:ed:3e:00:b2:93:98:bd:12:35:
         76:1b:dc:66:dc:14:1a:40:69:56:ee:a1:a0:53:c1:0c:55:84:
         2a:79:6c:0b:6f:c8:60:c4:75:57:bd:cd:ec:0f:fc:58:d7:0e:
         a3:a2:ee:7d:16:e1:06:d9:b0:fc:79:41:13:7f:b0:14:b7:08:
         cf:07:2b:5c:fd:19:f6:6c:ee:a5:5a:d8:e1:b0:f0:2b:64:62:
         fb:c5:ec:48:22:d9:f7:c2:be:d8:96:7b:a3:73:a2:ac:8c:f7:
         e4:6a:01:24:76:66:81:ee:fd:3f:b3:35:04:f0:e9:76:e7:98:
         54:40:a8:f3:8d:07:de:b4:00:74:f3:6d:24:aa:7b:18:0a:a2:
         fa:77:34:f4:a2:62:5f:85:5b:72:d5:1f:23:1e:6e:de:d8:cb:
         94:67:d2:9e:98:0c:61:48:35:77:af:9b:00:3a:16:93:f3:f6:
         29:88:2b:2f:54:66:0e:83:b0:fd:7b:17:4e:00:77:b3:4c:56:
         29:3c:a6:82:44:ae:90:33:62:a8:a2:aa:69:b7:ec:f1:0f:d9:
         ca:8d:28:60:4d:d2:74:ea:de:74:39:56:80:7d:7a:f4:dd:07:
         68:66:8f:21:02:ba:c9:ed:7b:36:35:cc:ab:a0:1a:4a:b9:80:
         5b:03:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:19:00 2026 by rpki-client