Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          RwOamHB3i9zbmfcZKqSNHZPNCSafgaLdLMRMoOPxs20=
Subject key identifier:   77:F7:2C:D0:EB:32:5B:75:0C:7E:44:39:3C:01:8C:CD:1A:89:DF:22
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       01A165A1D5C1C888D48FB4BDB2E31C06B9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          1416
Signing time:             Thu 22 Oct 2026 22:01:07 +0000
Manifest this update:     Thu 22 Oct 2026 22:01:07 +0000
Manifest next update:     Fri 23 Oct 2026 22:01:07 +0000
Files and hashes:         1: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (hash: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=)
                          2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: PO5PVa2sMHxJvc0Gd2+COxa3hqqmjlh0tMbkX+h0v/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:65:a1:d5:c1:c8:88:d4:8f:b4:bd:b2:e3:1c:06:b9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Oct 22 22:01:07 2026 GMT
            Not After : Oct 23 22:01:07 2026 GMT
        Subject: CN=77f72cd0eb325b750c7e44393c018ccd1a89df22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:cc:29:29:9f:a8:21:7c:26:59:23:9b:db:
                    09:ff:ae:3f:b5:be:98:44:c6:9b:c5:56:10:c7:c6:
                    8e:20:c6:65:ff:b3:28:6a:d2:8f:b8:26:f9:dd:6f:
                    11:ee:fa:2c:91:12:5c:96:6c:2c:40:a2:b4:24:e1:
                    8b:26:09:88:83:02:cc:24:35:0b:e6:08:a7:d8:87:
                    5e:3f:5d:89:9a:0b:a3:cb:d4:32:61:bf:e7:ca:4c:
                    b1:23:e2:80:53:7c:37:c0:7a:8c:2d:8f:39:b6:88:
                    d7:2e:26:92:fc:66:52:5f:5f:ff:3a:c1:66:f4:b6:
                    01:8c:da:f6:02:41:89:1b:44:af:e6:a3:55:54:75:
                    14:ac:01:d8:f1:ac:01:8f:bb:1b:f3:0e:d2:22:ec:
                    da:93:05:29:5a:0f:82:f4:b6:f1:ef:30:42:65:e9:
                    91:29:a9:5d:a3:74:50:b1:28:b3:a7:40:f1:6b:d6:
                    d8:89:71:5c:a8:04:16:95:97:b3:1a:31:f9:4a:be:
                    2b:b5:71:79:a1:d2:d4:c9:96:1f:38:3c:94:ae:8b:
                    0c:cb:1d:47:af:83:32:66:73:b5:65:ba:5f:96:5c:
                    88:7d:cb:6c:81:90:aa:d2:13:b6:2c:af:63:c6:80:
                    e1:61:fe:9c:e4:cd:51:98:0b:75:e6:6d:dd:50:2f:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:2C:D0:EB:32:5B:75:0C:7E:44:39:3C:01:8C:CD:1A:89:DF:22
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:63:e7:6a:39:94:44:75:2c:39:0f:cb:d8:12:e2:e6:8c:
         dd:77:35:48:5a:59:49:fd:f2:e2:20:17:65:06:14:c5:b4:8b:
         a5:18:32:60:be:bd:6e:9e:f5:9b:79:c0:54:43:57:4d:3a:3a:
         84:08:ef:92:91:b3:a4:96:00:6c:e5:95:9e:14:0c:45:77:f8:
         fb:48:9a:fe:54:5b:e0:dd:44:82:84:ad:21:d8:b4:3b:85:c7:
         8e:75:01:77:4e:b6:e6:44:60:6b:f2:90:11:36:54:d8:7a:dd:
         84:b8:9b:a4:67:ce:b3:0d:5a:de:32:44:dc:f4:bd:67:74:0b:
         3e:a2:41:58:3c:c9:be:5e:a7:a0:c9:fd:34:1e:d1:92:83:ef:
         4d:50:90:9b:69:74:35:0d:e9:23:59:e8:e9:08:36:75:c6:c6:
         ef:fc:48:cc:bc:ad:45:ce:cc:d9:58:37:9f:07:7a:d7:ab:6c:
         91:3c:8c:4c:9c:12:3b:7c:e8:73:1c:67:b6:d0:8e:f4:12:92:
         a2:7a:b2:59:83:3d:f5:ab:67:d2:b5:4e:0e:ac:02:82:2e:8b:
         a1:cc:5c:ac:95:1b:d5:a9:b0:b1:29:02:64:8d:f5:fc:2e:b1:
         de:f4:76:4c:73:f5:15:39:0c:31:85:27:63:30:50:6c:4d:70:
         5a:2b:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:18 2026 by rpki-client