Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File:                     kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier:          07T+0NedctY1BKQubzm8FjGucCajCR/9ffBoRqtWEiU=
Subject key identifier:   6D:5C:27:33:3D:7A:DA:38:86:E1:3D:D0:EE:BE:7D:A7:8F:BD:21:75
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer:       /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial:       01A1212EE615A02124E39EC520CCE95152B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:01:23 +0000
Manifest this update:     Fri 09 Oct 2026 15:01:23 +0000
Manifest next update:     Sat 10 Oct 2026 15:01:23 +0000
Files and hashes:         1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
                          2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: m32OL9oqM3Nv9mK9yWzh2AxYNi4bbhLp2ND1fNl073o=)
                          3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
                          4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2e:e6:15:a0:21:24:e3:9e:c5:20:cc:e9:51:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
        Validity
            Not Before: Oct  9 15:01:23 2026 GMT
            Not After : Oct 10 15:01:23 2026 GMT
        Subject: CN=6d5c27333d7ada3886e13dd0eebe7da78fbd2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:33:17:2f:fb:03:98:1b:35:53:d7:83:81:
                    4a:8f:b2:10:72:a2:f9:0b:4e:7b:96:85:3b:1d:c7:
                    bd:61:8c:e4:cd:3b:62:75:6b:c9:09:27:29:dd:6d:
                    c5:a5:14:27:fc:3f:62:1d:54:4c:b9:2b:2d:83:c8:
                    79:76:fb:f9:72:89:4f:f3:d5:61:eb:99:70:55:cf:
                    7e:54:f3:6e:65:ea:c4:2a:24:04:16:68:fe:45:7f:
                    83:9b:53:87:b2:ad:c0:29:02:41:46:19:85:7c:43:
                    ee:08:e9:92:cf:ba:23:77:53:5f:7e:97:ef:13:cd:
                    d0:45:e9:98:da:f6:d6:8b:5f:33:5e:cc:c1:3a:ab:
                    9f:0c:b2:95:9f:69:7c:cd:44:66:60:d8:1d:d5:eb:
                    91:ca:c1:86:71:08:62:f7:42:3d:4f:64:24:82:26:
                    cc:64:41:ba:08:c2:a4:f8:32:bf:ed:13:9b:2f:a0:
                    d5:a2:ad:ae:17:4c:d9:30:c7:c1:70:79:5c:7e:9e:
                    2a:0a:bf:76:be:ef:f2:94:72:00:28:48:35:ab:ca:
                    52:e2:1c:92:f8:c9:59:ed:de:ff:61:65:44:46:8a:
                    ff:0a:bd:ab:e9:72:91:29:45:a3:59:b0:0d:59:d3:
                    0b:a2:aa:a2:ac:74:03:5e:f4:ba:30:ce:eb:e7:29:
                    39:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:27:33:3D:7A:DA:38:86:E1:3D:D0:EE:BE:7D:A7:8F:BD:21:75
            X509v3 Authority Key Identifier:
                keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:32:26:aa:a2:3b:92:1a:36:42:71:d1:09:64:61:d3:39:df:
         93:ad:59:c4:34:40:90:1e:16:84:64:f6:3e:0f:8e:5d:a4:e6:
         98:b3:85:85:f4:b0:dc:c4:ea:23:a2:4f:92:eb:71:2d:d5:f3:
         e7:d1:19:81:dc:33:90:0f:fd:5a:17:55:02:04:77:85:ad:06:
         84:6b:33:c2:85:6f:18:f3:50:c2:d1:62:cf:a2:67:42:1a:9f:
         e6:0e:67:03:26:61:5f:28:92:e9:77:95:cf:55:89:5c:35:ac:
         18:8b:40:e5:e8:99:52:8b:85:d4:90:06:59:b4:54:8b:9e:a3:
         1e:bb:20:eb:4a:0d:a9:71:d2:89:50:3f:de:56:be:0e:b2:60:
         f5:5d:66:3e:34:99:92:0e:ed:4c:82:2c:42:8b:49:d6:e9:56:
         49:27:f5:53:ed:1d:a7:6b:2e:a8:93:60:24:3e:cc:db:00:e3:
         77:61:a3:9c:1e:e3:32:6c:d8:ac:f4:8b:00:df:62:b3:48:78:
         26:14:7e:76:ba:4d:f7:30:d2:0b:38:bd:3d:95:8b:08:66:cd:
         19:03:54:21:fe:63:be:f5:57:9e:34:2b:5a:64:4b:64:4f:5c:
         5d:7f:10:f9:e9:89:fc:33:2f:dd:a7:a8:8d:17:36:07:08:9b:
         8e:f3:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:46:38 2026 by rpki-client