Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          CyGCCFACmOs4Vc0u2ZSM8HmrsJkkjPROpLsh2oSGsn8=
Subject key identifier:   89:0A:47:90:DA:4F:89:33:1E:AB:33:10:B4:21:C4:AA:8D:62:06:AA
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       01A08AFA36B8EFF663C4DEB7E5C0416192F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0932
Signing time:             Thu 10 Sep 2026 11:00:48 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:48 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:48 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: BmtDpJXIO3BrcrS0xXjzHnNZBjH7RKQo0YBQdT3Uj20=)
                          2: xCA0Tyr9gAJcBb_aRk9f4_-65Hw.roa (hash: vLJiM8h1yXdHJ3CZa6/nqFa+H4CdzM6jrN7A815VTRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:36:b8:ef:f6:63:c4:de:b7:e5:c0:41:61:92:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Sep 10 11:00:48 2026 GMT
            Not After : Sep 11 11:00:48 2026 GMT
        Subject: CN=890a4790da4f89331eab3310b421c4aa8d6206aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:20:b1:c4:c5:b0:37:0f:b8:ae:90:90:d1:
                    79:19:55:c0:00:18:bc:a0:87:3a:e9:88:a9:d4:a1:
                    40:7b:58:d1:d6:77:7b:bd:3e:71:0f:39:fa:29:aa:
                    e3:62:80:f1:f2:ce:0c:98:97:56:6a:0a:39:3f:da:
                    e7:60:e2:b3:24:2a:0a:71:5b:23:7d:63:b1:99:49:
                    cc:93:57:13:1f:63:59:6e:98:22:8e:52:a4:df:34:
                    9a:fa:b2:3d:e6:df:4f:7b:7f:22:e2:09:49:45:1a:
                    2a:de:ad:76:0e:87:0d:b5:74:85:11:ac:6e:e6:4a:
                    cf:4f:40:ea:e6:98:a0:ac:e2:d5:fe:9f:44:10:02:
                    87:40:e2:40:f6:0e:b6:6e:ce:a4:f1:c4:62:57:8d:
                    03:ad:18:fc:8e:4d:a1:60:df:52:99:e1:81:a5:cb:
                    e6:6f:17:59:d4:0e:45:09:01:a3:be:d1:4b:36:f8:
                    a2:5d:c2:12:b1:76:b5:c0:b3:c3:c4:1c:65:2e:73:
                    02:4b:f0:b5:8f:be:06:e8:7d:cb:82:11:4c:e6:1d:
                    20:2c:7d:9d:8e:c6:95:47:b1:50:a8:7c:42:e4:44:
                    b0:7c:77:a8:fa:be:a4:10:4c:5f:d7:cf:5c:58:1d:
                    9f:08:db:ba:16:56:a2:6b:c5:82:12:a2:43:3b:a1:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:47:90:DA:4F:89:33:1E:AB:33:10:B4:21:C4:AA:8D:62:06:AA
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:fc:46:48:13:84:f2:a8:8d:06:72:cf:80:e4:27:71:16:
         cb:1d:e6:de:81:00:a6:e2:92:f7:cd:3f:01:87:ad:9c:a0:54:
         fb:0d:c1:ae:cb:30:15:65:0c:82:18:04:b8:90:c4:8f:40:dc:
         c6:2c:d3:18:7f:2e:d6:10:00:35:e0:5f:59:c6:9b:40:4a:38:
         72:54:3e:42:e5:bf:7c:41:9a:c6:3f:18:e6:ad:c0:50:fe:53:
         50:3b:ad:ba:29:49:e0:7d:19:ac:d2:e1:32:4f:17:5e:1a:da:
         a5:c6:aa:39:c6:00:36:db:51:21:f0:75:c0:82:ac:7f:d1:8a:
         54:72:a2:68:44:1a:8b:b1:a6:8c:88:7d:1b:f2:fa:78:f4:0c:
         e6:c8:ed:ae:72:db:67:f8:6c:08:07:0f:2b:e3:26:74:fd:74:
         bb:30:ea:19:c5:07:dd:7a:ce:9c:a6:a1:e5:63:bf:f2:ae:c2:
         ca:96:e6:91:a8:10:57:f6:59:a5:c6:75:f9:22:20:c4:db:c3:
         a3:bb:0f:84:f8:38:db:d2:66:51:3a:9f:56:5e:9b:9d:25:bc:
         5e:d7:d3:12:e8:60:f7:9a:0b:8c:bf:60:a8:b0:73:25:c2:5e:
         a1:03:d7:5f:de:2d:b7:c2:8d:ed:a4:9f:ce:51:d7:9b:92:e1:
         9c:e6:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:32 2026 by rpki-client