Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File:                     kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier:          hEd3T2g5k04f2hMOQe48AdNKqpdWo2g9JiSEoPzoHk4=
Subject key identifier:   4B:7E:BE:AB:3A:C3:48:B3:B5:8D:F1:8E:A2:3B:DB:02:DF:E6:49:EA
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer:       /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial:       01A08C441E3CD74D056E3F72BCD5DCE49916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number:          0827
Signing time:             Thu 10 Sep 2026 17:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 17:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 17:01:09 +0000
Files and hashes:         1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: fqCJJ9KZEwYH+9sLyTRcrJUNRcyBDwc/6/aj1ooFNc0=)
                          2: v8xN2-d0fpKAaThoNW-wrq46cas.roa (hash: w0wQ9b7+xzxFuqPdPpkrYcYWx9TLPMta+onXlpVwk44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:44:1e:3c:d7:4d:05:6e:3f:72:bc:d5:dc:e4:99:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
        Validity
            Not Before: Sep 10 17:01:09 2026 GMT
            Not After : Sep 11 17:01:09 2026 GMT
        Subject: CN=4b7ebeab3ac348b3b58df18ea23bdb02dfe649ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:37:a5:21:cf:2c:bb:2d:8f:ca:0b:12:ff:
                    f1:70:51:8f:52:f2:33:f0:a6:b4:6d:45:fd:7d:5c:
                    7f:34:a2:84:e4:81:d8:48:9c:27:12:24:be:a1:e9:
                    b4:63:1f:4f:ca:8c:93:db:9f:e3:42:8c:1b:6c:c8:
                    94:12:e1:36:5d:1c:5d:4e:d4:65:6b:0e:e4:03:02:
                    7f:7e:ce:8f:cf:50:70:7c:c6:0f:0b:6a:49:f7:3a:
                    b3:fd:70:c6:c9:0c:a9:66:7b:bf:b7:16:e0:74:6a:
                    b9:48:6a:b3:f9:60:3a:21:b0:86:6f:8a:fa:91:81:
                    7b:b4:23:50:79:40:98:59:e1:6a:eb:6a:00:4a:d3:
                    d5:71:a3:4e:0f:91:0e:fd:73:1b:69:68:11:0d:67:
                    35:e9:cf:fe:e1:33:88:40:5b:58:a8:2b:d6:bc:07:
                    86:eb:6d:da:41:7e:5d:6c:25:e0:3f:77:b0:ce:16:
                    01:9f:98:f1:6d:85:79:0b:e6:f3:83:b0:19:d4:aa:
                    bb:ae:0b:55:cd:16:6b:e4:2c:6d:d0:25:36:f9:e1:
                    19:52:9d:67:5f:ee:cb:04:7f:fb:8e:63:b4:3f:5a:
                    08:f9:c4:ef:9b:42:c6:1d:69:ea:a1:99:6d:6c:2e:
                    5e:1f:b0:d2:2f:39:ad:6b:26:1e:78:07:6d:46:b2:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:BE:AB:3A:C3:48:B3:B5:8D:F1:8E:A2:3B:DB:02:DF:E6:49:EA
            X509v3 Authority Key Identifier:
                keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:72:a7:74:89:bc:86:77:1a:6c:58:d7:5c:0b:1a:ae:6e:a9:
         01:82:56:99:86:5a:79:5b:36:e9:93:e8:e2:8f:3d:7d:f0:85:
         a1:fd:4e:e6:1c:5d:69:6a:0c:ba:1e:04:c7:ee:f6:9b:c5:2d:
         aa:f3:d1:b1:b5:20:7a:3c:c0:95:12:24:83:4c:5b:c7:0b:1a:
         cf:c7:f1:23:70:52:32:dd:4b:81:33:8b:10:e7:a8:91:40:f2:
         1e:0a:cd:bf:68:8b:a4:c4:2d:b1:57:3b:21:68:c3:96:25:82:
         39:f1:54:cf:9b:be:78:3d:f7:6c:9a:ed:35:5c:62:b7:36:18:
         c8:d8:8d:5a:a9:38:2b:82:ed:93:dc:5b:78:0f:5f:26:90:06:
         d2:0f:56:86:97:a0:62:8e:f8:21:01:48:96:63:1e:b6:63:d8:
         0e:f0:18:d9:2d:9a:99:8e:6c:a9:4d:cf:d2:08:19:18:b1:d1:
         dd:32:60:dd:b0:24:65:ba:31:44:2d:45:01:0f:7d:2a:4d:7a:
         fd:b9:ed:7c:6e:33:7c:c8:db:50:e4:fe:92:4b:3d:4c:55:76:
         50:16:f3:97:54:ba:5b:d5:13:94:f9:f4:02:ec:ea:ce:b1:0d:
         ed:c9:7b:d0:02:4b:37:ed:fa:99:9b:32:d9:29:ac:72:03:2e:
         da:00:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:24 2026 by rpki-client