Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
File:                     Ke_inNmVTrSDWEKZccdq97tfBWE.mft (raw, json)
Hash identifier:          LgLpvzv6EWmS7ClGtEJWzoBipcA82GS1HolcgFaOcgo=
Subject key identifier:   D8:61:70:BD:84:C6:7F:4F:61:ED:12:68:39:5E:1E:85:AE:77:CB:41
Authority key identifier: 29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61
Certificate issuer:       /CN=29efe29cd9954eb48358429971c76af7bb5f0561
Certificate serial:       01A06F83DDDBAC16571609039D55929F78CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 03:01:47 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:47 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:47 +0000
Files and hashes:         1: Ke_inNmVTrSDWEKZccdq97tfBWE.crl (hash: fjFmSLfPDbrfQ9OMPuXVXv6DFtzRB3r2EFk3d+lt4tw=)
                          2: MJcxGS0k_kKhq_iBy3QqSFYVnVU.roa (hash: fgIqrkRhKvk9zOrKBAATYNkw1hWIeg0IR0Gjr44Q3Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:83:dd:db:ac:16:57:16:09:03:9d:55:92:9f:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29efe29cd9954eb48358429971c76af7bb5f0561
        Validity
            Not Before: Sep  5 03:01:47 2026 GMT
            Not After : Sep  6 03:01:47 2026 GMT
        Subject: CN=d86170bd84c67f4f61ed1268395e1e85ae77cb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:97:3c:c8:47:65:dc:52:88:eb:04:1d:2a:
                    44:5e:ea:ec:a7:68:45:13:68:33:6f:14:49:70:16:
                    05:e2:b4:20:ff:91:95:b3:22:6c:5c:89:82:41:f6:
                    05:d3:ba:81:75:bb:08:8a:ca:92:0d:7a:76:8e:d4:
                    11:f8:fb:1f:9c:b1:e8:48:47:d2:78:7f:ab:8e:ee:
                    78:eb:8c:c5:8b:63:08:a8:bc:de:96:c1:3d:24:79:
                    51:70:92:07:f1:2c:d5:c3:f7:80:6e:5c:af:3e:8d:
                    2c:b4:66:52:b4:87:fd:fe:19:48:76:8e:fb:4e:03:
                    77:b7:00:f2:a4:4d:16:74:e2:fe:63:6b:b2:44:f5:
                    97:e6:49:29:2c:f6:4c:3f:35:4e:21:c1:30:e6:4b:
                    a0:f4:a6:ed:6f:c0:ab:18:62:49:71:21:0e:54:66:
                    c8:07:be:c1:21:69:fd:ba:aa:dc:96:e1:70:e1:1c:
                    f4:43:ed:ca:f1:1a:b9:f2:a4:c9:6a:4d:18:8a:73:
                    36:47:57:a9:ee:5a:cf:99:86:17:be:5e:c2:3d:5f:
                    5f:82:3d:a6:44:9b:aa:da:12:e8:b0:91:15:6a:f5:
                    64:ed:05:9f:d9:bb:79:51:a5:82:30:32:ae:79:7f:
                    97:0c:55:fc:90:c3:ce:24:41:fb:0f:3c:bb:68:6d:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:70:BD:84:C6:7F:4F:61:ED:12:68:39:5E:1E:85:AE:77:CB:41
            X509v3 Authority Key Identifier:
                keyid:29:EF:E2:9C:D9:95:4E:B4:83:58:42:99:71:C7:6A:F7:BB:5F:05:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke_inNmVTrSDWEKZccdq97tfBWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/Ke_inNmVTrSDWEKZccdq97tfBWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:ec:b6:26:ea:9c:75:ff:47:76:b5:e3:8e:ea:e7:42:d5:
         f7:b8:b8:1d:97:4d:ac:f6:aa:dc:9a:24:fb:52:d5:9b:b6:fc:
         c4:fb:e0:46:38:3f:fd:55:87:c2:2a:6a:4f:40:d4:02:1a:c5:
         5a:18:7c:4d:7e:36:42:29:cc:05:7f:cd:bf:91:a2:84:ef:b3:
         14:84:5a:04:24:a3:63:ff:20:ce:a1:66:81:82:77:9d:f9:52:
         71:db:e6:84:78:ab:93:e7:43:7b:2e:99:54:80:f5:f1:7d:b1:
         53:04:1b:d2:93:73:ba:d1:b1:30:1c:60:e6:01:47:e9:50:f7:
         04:0d:c2:18:b0:ce:93:4d:4d:69:b7:c3:62:c9:2e:a3:f2:f1:
         77:a4:18:ce:9a:d9:d7:32:22:24:00:c3:bc:d0:02:7f:95:70:
         f2:87:d3:83:ca:3e:21:fa:27:33:83:5d:a4:17:22:50:19:36:
         02:9b:43:00:ae:43:7a:f1:c9:02:38:eb:2f:ee:4c:04:5d:45:
         e2:84:a0:3b:6f:28:cb:7e:97:b4:45:74:93:a9:21:46:d4:73:
         cf:ca:9b:12:01:fd:a3:21:d8:06:1e:d7:9b:e9:40:93:ff:6a:
         59:8d:40:93:46:71:6a:27:8d:e5:33:71:d8:20:22:17:56:2d:
         a8:9c:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:00 2026 by rpki-client