Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File:                     KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier:          dsAIOOjgh6Ihyo+wBLdOXVRPj5khI9EYsd91su1yBqo=
Subject key identifier:   24:B2:59:D9:B9:0A:29:4A:5C:64:38:22:2C:27:CE:27:24:2D:F6:40
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer:       /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial:       01A089B1160456D916562F27F01DC94DBBC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number:          0B45
Signing time:             Thu 10 Sep 2026 05:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:19 +0000
Files and hashes:         1: 9bNCpS-BnNsc0OV_kVUAGpMesVQ.roa (hash: SEbw3h7uQbDEC24FBGDOhfqkNO2N0ao6d2+D5+Fazds=)
                          2: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: gUomoYojmlJsSDKCqqQfOKN2EFSLg3cwD/5cHIxvtFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:16:04:56:d9:16:56:2f:27:f0:1d:c9:4d:bb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
        Validity
            Not Before: Sep 10 05:01:19 2026 GMT
            Not After : Sep 11 05:01:19 2026 GMT
        Subject: CN=24b259d9b90a294a5c6438222c27ce27242df640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:83:20:ae:4d:9e:cc:4f:bd:5b:88:6a:26:
                    db:75:17:b5:b9:d4:5a:04:7d:0d:d3:af:a1:e3:9e:
                    8e:8a:74:36:66:bd:0f:ea:2b:3b:71:3a:0c:cb:4b:
                    6c:85:e7:aa:21:c6:6e:65:6b:8a:a3:a6:64:e5:42:
                    43:d4:cc:be:50:18:1a:29:7d:8d:0d:9a:4b:b2:a4:
                    fa:92:df:38:69:98:c3:7f:9b:3a:2d:ec:dc:74:69:
                    c4:37:9a:3a:3c:c8:cd:10:28:67:ee:a1:d2:01:48:
                    d0:83:ab:04:c6:b8:26:a4:87:16:0c:ea:e3:e6:34:
                    0c:ac:db:cd:28:6e:9e:49:bb:8e:48:c2:6c:bf:b0:
                    81:ad:9e:5e:a5:66:74:c6:47:d4:2c:b3:8b:ae:13:
                    2d:3d:e0:e5:dd:37:d9:49:cd:7e:6b:59:ce:7b:6c:
                    4e:f1:e9:76:dd:34:a1:6a:7f:87:99:52:a1:f7:f5:
                    c9:96:48:63:5f:be:4a:35:40:64:56:8a:e6:6d:75:
                    fc:d4:be:db:73:43:f1:a4:4c:a4:65:36:89:b1:29:
                    7a:c8:ff:81:ec:e9:fe:ee:52:2f:56:7b:f1:63:06:
                    a5:4a:53:7f:3b:16:65:82:4b:a9:f9:98:fe:c4:0e:
                    25:39:cb:c1:0b:d1:b5:92:b0:2f:7a:19:d4:06:90:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B2:59:D9:B9:0A:29:4A:5C:64:38:22:2C:27:CE:27:24:2D:F6:40
            X509v3 Authority Key Identifier:
                keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:77:7d:18:86:8e:13:80:81:60:a0:88:77:3f:3f:5e:33:
         94:f8:22:23:30:a6:57:b8:7f:ca:e1:cb:b3:d9:34:f2:63:c2:
         17:6e:6b:20:70:23:f5:25:bc:16:ce:f4:e2:8d:66:ff:b8:a4:
         44:cf:e0:de:b3:34:ef:a2:e5:e7:08:87:de:71:14:cf:04:0f:
         55:dd:90:00:88:d0:f9:a9:a8:4f:ec:61:a3:2f:15:b5:19:b5:
         6e:d4:34:c2:2b:70:6e:6d:21:07:55:39:fe:22:fc:d7:63:d1:
         17:3c:7b:63:08:f1:cc:a6:fb:6a:91:49:bc:56:e4:ed:2c:c4:
         7b:66:47:8b:83:8d:74:8d:0d:81:46:67:11:a0:93:0f:84:e9:
         59:db:d5:b3:88:6e:c1:4d:16:06:80:01:a7:83:51:d4:d3:68:
         61:1e:26:db:0d:d4:a5:1d:f8:19:82:10:2a:9a:06:57:31:4d:
         b3:8c:00:48:a1:f7:d4:61:fd:cc:8c:a5:4e:7f:1d:10:42:5f:
         84:9b:5f:eb:f9:85:a1:d4:3e:0b:c2:3f:5f:6e:24:8e:8d:9e:
         7d:b0:4a:2d:97:b5:09:2a:52:26:f9:e7:8a:62:f4:b7:25:7b:
         a8:90:f9:69:2e:df:ff:7f:ba:25:69:35:a2:78:fb:4c:92:6e:
         0e:85:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:36:04 2026 by rpki-client