Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          /dWPandkHtnX8hWfr1rll4STg677GLXOEh3maAvm2O8=
Subject key identifier:   77:A7:DD:91:E0:50:DF:42:78:E3:3C:15:A1:C7:C0:DF:57:31:08:D0
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       01A17BBB51F752B2D9854AA8DA36F8E8BF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1AC9
Signing time:             Tue 27 Oct 2026 05:00:36 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:36 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:36 +0000
Files and hashes:         1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
                          2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
                          3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: FFM1zjI052t4WpyyMcJ8ECaE3eKpdyyp+Vl8td209vo=)
                          4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
                          5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:51:f7:52:b2:d9:85:4a:a8:da:36:f8:e8:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Oct 27 05:00:36 2026 GMT
            Not After : Oct 28 05:00:36 2026 GMT
        Subject: CN=77a7dd91e050df4278e33c15a1c7c0df573108d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:25:3d:b0:e9:79:d4:37:c9:c1:1a:73:df:
                    8c:22:d5:80:11:7a:ee:80:ea:6d:f0:02:36:d9:f2:
                    19:cc:b2:9e:09:bb:e7:47:8c:a9:a4:eb:bd:dd:d2:
                    69:e5:92:75:a0:2c:94:57:96:8b:bd:58:e3:19:b7:
                    a0:4c:3e:01:96:07:f3:63:e4:ae:33:4c:a6:8b:14:
                    66:21:81:50:5c:0c:f1:af:ce:11:ed:af:a6:1b:49:
                    d9:bc:87:d2:fd:46:e1:c4:76:4f:f2:b4:20:c4:97:
                    da:dc:cb:6f:34:5e:29:d0:db:f6:78:ef:b3:b2:a6:
                    78:f8:20:3b:18:cb:38:6c:97:73:a1:58:80:8c:28:
                    6f:eb:ca:ee:bc:7f:be:d6:89:bb:8b:cf:b5:68:5a:
                    71:c2:2e:cf:4c:51:6e:d0:56:f6:8a:22:37:96:09:
                    27:54:f0:ce:c5:ef:ae:b0:4d:54:f3:41:02:4b:08:
                    ff:7c:14:76:2f:3f:3b:6c:b9:37:e8:c1:2f:2c:fd:
                    e3:4d:77:20:04:f9:81:5d:51:49:44:ba:fa:22:fc:
                    4d:c9:7d:fe:32:94:f5:a5:a1:1f:4a:4f:a1:5d:aa:
                    4b:aa:cf:e4:d7:95:3f:69:09:49:c0:df:9f:db:da:
                    6a:0a:2b:ec:d8:0e:b6:3c:c3:f8:c6:4a:03:49:bc:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:DD:91:E0:50:DF:42:78:E3:3C:15:A1:C7:C0:DF:57:31:08:D0
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:3f:69:aa:49:90:a0:e8:ff:3b:ee:89:ee:df:db:15:c5:
         5c:2a:03:ff:d2:05:6f:04:a1:cf:9e:0d:02:4f:63:c2:76:64:
         b8:70:16:97:27:58:d5:e9:aa:52:5c:c4:ea:0c:29:83:28:3b:
         16:a1:dc:eb:5c:90:81:33:d6:a4:81:43:cf:c9:22:09:54:e7:
         3d:6f:5b:51:99:c2:70:cc:00:ba:79:a3:88:b2:96:21:c0:99:
         ba:1a:90:f0:89:95:64:14:36:2a:e6:28:da:15:77:59:ab:95:
         37:67:09:88:39:46:92:46:f6:e1:f3:b7:31:ea:f7:f1:81:2a:
         a2:ad:b6:c6:5a:49:61:03:95:b0:05:b2:af:2a:bd:d4:5c:31:
         b7:15:c0:04:be:e5:58:1e:3f:66:91:8b:c5:b2:81:d1:c5:1d:
         26:c5:4b:2c:dd:93:4a:f6:18:97:8f:a0:f7:1c:2c:b8:b3:86:
         e7:fa:f4:b1:36:70:df:fc:7c:61:01:ad:7e:ed:31:86:1e:73:
         e0:49:42:e7:4a:70:73:c4:92:71:df:22:1c:68:7e:1f:de:c2:
         cf:85:46:b8:71:70:ee:a4:1c:68:84:fc:0e:08:95:e3:02:d2:
         6a:9d:96:33:2d:5a:55:ef:10:ad:f5:1b:a6:5c:cf:a4:9f:47:
         22:96:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 10:38:35 2026 by rpki-client