Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          9yusyIaKattxsG18J3VXaQY/2ql5n7ykI7fzqvq74Kw=
Subject key identifier:   4C:00:48:E5:93:1E:76:F9:74:C9:07:E9:19:36:E6:F5:6E:EF:32:10
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       01A1788378046767A4EEFBDEABEFCB2ACFCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          1824
Signing time:             Mon 26 Oct 2026 14:00:44 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:44 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:44 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: K7pjnPK8S24idyOMea3NYin5SO8.roa (hash: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=)
                          5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: DGA26iQo9mayVV887nGwvtSelbMpz5erxowBjm6pdRo=)
                          6: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:78:04:67:67:a4:ee:fb:de:ab:ef:cb:2a:cf:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Oct 26 14:00:44 2026 GMT
            Not After : Oct 27 14:00:44 2026 GMT
        Subject: CN=4c0048e5931e76f974c907e91936e6f56eef3210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:39:02:09:66:2f:21:96:cf:80:5f:60:4a:
                    85:f5:6d:56:29:92:03:a7:12:9b:de:eb:70:73:4e:
                    94:2b:de:c8:6b:7f:23:66:fb:a5:36:95:d0:24:3c:
                    33:14:11:9a:42:4e:72:c1:76:86:f6:c8:d9:06:3b:
                    17:be:b7:ec:c1:13:32:bf:b2:65:81:d5:92:65:aa:
                    8b:eb:00:b7:0f:02:09:5d:5e:06:cc:9e:4e:47:19:
                    17:57:70:d0:e5:06:78:7c:82:b7:42:0c:4b:ea:9e:
                    97:84:8f:e4:14:5a:ad:b3:b9:d6:f7:75:05:de:fd:
                    02:b6:2e:bf:95:35:cc:81:98:24:08:2d:08:f7:8c:
                    77:38:bf:3d:b9:35:2f:c9:e1:1c:9f:7f:85:65:62:
                    ef:1a:99:10:35:d7:7a:fd:9b:46:9c:a4:7d:76:38:
                    04:df:a7:92:8d:13:0e:00:36:8f:19:a2:e4:2c:af:
                    96:41:c6:eb:cb:72:92:cc:04:55:32:df:9f:ef:f2:
                    65:60:bf:a9:51:09:47:e5:e6:43:89:5a:d9:9a:d9:
                    85:3f:d3:54:a2:02:77:75:31:03:a2:62:07:3b:c3:
                    03:36:66:55:e2:09:45:62:fb:02:7c:64:b8:13:99:
                    9d:a7:d6:cc:cc:d7:35:df:62:1c:b1:fc:f2:62:51:
                    2f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:00:48:E5:93:1E:76:F9:74:C9:07:E9:19:36:E6:F5:6E:EF:32:10
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1a:51:fa:62:03:b6:1e:ca:57:c2:08:58:0a:8a:ae:f7:2a:
         1a:0f:0e:f5:fc:c1:5e:6a:66:c1:6a:53:1f:8d:df:0b:d0:ed:
         cc:63:12:7c:a8:57:89:dc:b8:f6:0a:52:18:87:8a:9f:cd:9d:
         bf:11:d3:70:6e:c8:96:94:db:a5:ac:87:88:24:a1:75:1f:9a:
         41:33:03:0e:73:9b:f7:3f:04:0e:59:79:11:45:c1:35:d7:a1:
         78:c7:ed:b0:d7:1a:ab:57:c4:f7:e3:6b:72:97:05:a6:90:81:
         75:27:f0:68:df:5f:fa:51:d3:26:c3:bc:f1:d8:86:db:59:0a:
         30:d4:00:59:a1:5d:86:51:1f:d1:c6:95:36:95:64:d7:15:31:
         f2:a3:31:ba:69:06:81:46:83:11:a2:82:c0:ac:fb:3a:5e:49:
         b0:f3:4f:21:a2:f0:e8:a5:cc:f3:77:c1:58:e0:84:90:2a:11:
         28:67:9f:c0:66:36:5a:9e:19:8b:f3:be:5a:b4:d8:e7:f6:de:
         32:43:7b:99:62:5d:df:c5:8b:09:16:a2:8c:b2:1b:df:61:fa:
         20:9f:91:c8:3f:e3:93:66:43:e3:7b:2d:20:87:4c:09:31:f3:
         e9:d7:de:81:5b:e2:d0:97:8b:23:ee:5f:c2:f0:e0:e3:d6:1e:
         1b:08:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:12 2026 by rpki-client