Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
File:                     kT_tJHxm0ELnOUDStHEvO-2UUe4.mft (raw, json)
Hash identifier:          oMix9uyDmFxfAplGXQu/1yaGlvdQoifiqPBmQvAUO8k=
Subject key identifier:   41:72:38:5E:5A:17:6D:01:04:0F:EC:37:37:8E:12:E5:40:AB:AC:16
Authority key identifier: 91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE
Certificate issuer:       /CN=913fed247c66d042e73940d2b4712f3bed9451ee
Certificate serial:       01A180065267A32AC4E40F979942FD1B51E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
Manifest number:          01FC
Signing time:             Wed 28 Oct 2026 01:01:00 +0000
Manifest this update:     Wed 28 Oct 2026 01:01:00 +0000
Manifest next update:     Thu 29 Oct 2026 01:01:00 +0000
Files and hashes:         1: GoKLvdRqpzhQ5LjAkf1CdFno6ZA.roa (hash: CO8aNhlB1Y64wW1MQUT5+bJ7ilSYr6RPdzylnCF/3KY=)
                          2: kT_tJHxm0ELnOUDStHEvO-2UUe4.crl (hash: tQ/7frIL8FjXDz7kKGdl9pBXmV/eaeQMaL+zAAzbKNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:52:67:a3:2a:c4:e4:0f:97:99:42:fd:1b:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913fed247c66d042e73940d2b4712f3bed9451ee
        Validity
            Not Before: Oct 28 01:01:00 2026 GMT
            Not After : Oct 29 01:01:00 2026 GMT
        Subject: CN=4172385e5a176d01040fec37378e12e540abac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:a5:c0:e9:a4:81:bf:99:bd:20:a0:a6:d9:
                    1a:dc:8d:80:7b:9c:e1:82:54:69:5d:30:79:4f:7b:
                    b9:8f:2d:88:d6:a7:f1:ae:cf:71:93:a5:d3:15:3c:
                    36:e1:0a:c5:00:c2:cd:4c:43:db:ab:6e:cb:3a:df:
                    77:34:d5:9d:87:24:33:8a:06:55:a7:41:18:1f:e5:
                    5c:b9:2c:fe:7c:07:f4:df:ef:a2:11:f9:38:cb:30:
                    9d:75:8a:5e:30:d0:59:16:d8:5e:0e:d1:25:99:02:
                    8f:b2:88:c4:73:9c:fc:90:d3:20:20:59:83:f9:d8:
                    06:de:b8:ce:ed:87:3a:27:58:7a:8d:c5:ff:7e:11:
                    cc:51:a6:01:e2:73:b1:16:22:97:45:8b:9b:35:21:
                    2d:c8:2a:4f:55:ea:d8:9c:02:3f:61:36:eb:7d:f4:
                    3e:b4:59:9c:f7:88:92:98:bc:3b:86:ec:52:e4:ba:
                    5a:a2:5d:15:2a:b5:09:e4:d4:f0:74:b8:8d:e4:a2:
                    2f:e8:22:7f:06:33:ae:91:ab:6e:9e:e7:0a:cd:5b:
                    dd:ee:15:39:34:96:c6:12:24:6d:2c:c8:05:7f:b0:
                    db:ce:1e:af:7e:41:d6:73:9e:d7:31:df:4c:81:14:
                    fa:47:19:07:8a:e8:df:f5:be:b5:84:da:ea:b4:d1:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:38:5E:5A:17:6D:01:04:0F:EC:37:37:8E:12:E5:40:AB:AC:16
            X509v3 Authority Key Identifier:
                keyid:91:3F:ED:24:7C:66:D0:42:E7:39:40:D2:B4:71:2F:3B:ED:94:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT_tJHxm0ELnOUDStHEvO-2UUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6f110e-3eda-45aa-bd80-5c709d20c304/1/kT_tJHxm0ELnOUDStHEvO-2UUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:06:6b:55:bd:ee:21:4e:4a:df:41:b2:0f:79:5a:bc:ae:37:
         ff:c0:1b:cb:31:08:5d:ac:82:11:b5:c0:cc:72:76:da:a9:ba:
         f6:9d:59:d5:dd:58:dc:a3:d6:e8:46:0d:91:13:73:7f:bf:34:
         18:17:ce:d1:e4:eb:4c:66:88:52:39:68:f2:dc:e5:0a:bc:e9:
         af:d5:a4:50:3e:29:6b:b1:18:32:8f:d8:6e:50:6a:97:35:a7:
         ca:ca:8e:bd:c1:db:d8:f0:19:c4:65:33:76:43:29:82:75:72:
         09:67:81:85:65:f0:f2:0a:97:3e:0a:c3:99:f8:ce:1e:bf:74:
         2b:9b:ed:37:93:db:b2:48:e2:0d:c8:2f:60:7e:1e:83:e6:2e:
         dc:a3:87:a9:4c:02:86:8d:fd:b9:54:3c:13:54:64:87:f7:9b:
         27:0b:dc:71:7a:98:38:d9:bb:a2:90:e7:56:10:c2:47:97:d2:
         8f:f7:ac:c1:5f:4a:e2:1d:41:0b:b7:9f:d7:2f:0b:74:34:dd:
         3c:f7:a9:fd:9d:ca:ac:24:5c:4a:25:fc:51:3e:ee:ff:d6:40:
         0e:06:58:26:bb:e4:5c:8e:68:26:ad:cd:6f:90:6e:a8:83:72:
         0d:fb:f9:4f:bc:94:25:8f:03:68:81:ef:64:63:ac:33:9e:2a:
         0f:44:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:57 2026 by rpki-client