Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File:                     kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier:          7KgYpQRIVQP6wnI9yqLWauFmO6q5XicXoyxG31/V4iA=
Subject key identifier:   62:5F:0F:73:A6:D1:40:3B:2C:3C:C2:A4:A4:90:9E:E4:E3:F7:AE:55
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer:       /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial:       01A027A12304C548D18DCFCAF1C4107552A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number:          1A16
Signing time:             Sat 22 Aug 2026 04:01:06 +0000
Manifest this update:     Sat 22 Aug 2026 04:01:06 +0000
Manifest next update:     Sun 23 Aug 2026 04:01:06 +0000
Files and hashes:         1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=)
                          2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: vdyztSxEcipUjJ/IlbtcQsiAXH+R9H9kcjyCyA2HRys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:a1:23:04:c5:48:d1:8d:cf:ca:f1:c4:10:75:52:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
        Validity
            Not Before: Aug 22 04:01:06 2026 GMT
            Not After : Aug 23 04:01:06 2026 GMT
        Subject: CN=625f0f73a6d1403b2c3cc2a4a4909ee4e3f7ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:be:69:c2:51:22:af:d2:63:53:06:a4:17:
                    f4:59:da:4e:c8:a9:1a:4d:cc:cb:28:c1:8d:f4:b3:
                    97:7c:50:6b:2b:f8:7e:b6:ad:da:0c:32:1c:1f:25:
                    88:ad:e0:d5:d7:2b:4f:21:b7:2d:0b:b3:b2:af:5c:
                    43:e0:ae:e0:26:45:43:07:5f:5c:93:db:7a:8d:5b:
                    ee:88:0b:23:99:3f:41:c8:49:6e:6e:ab:5b:c8:35:
                    dc:47:11:45:81:f3:29:7f:85:f2:10:65:b5:06:2e:
                    da:ae:88:31:59:7f:84:63:ae:95:f8:82:0d:cc:4b:
                    61:0b:5f:1e:0f:1e:ba:9e:9a:62:d6:b8:cc:aa:38:
                    7a:c3:d7:91:e9:d6:e3:5a:da:aa:72:ad:55:51:6c:
                    b5:b4:e5:d9:93:37:bb:59:f9:12:cd:03:bd:7d:55:
                    e5:54:e0:6c:a6:62:fe:a1:95:6c:4d:8f:81:41:25:
                    ea:27:38:e7:98:0e:22:f1:97:bc:f4:fe:d6:6b:30:
                    1c:b8:76:28:eb:29:94:ae:c9:3a:22:3c:01:7b:af:
                    44:b7:e9:50:89:77:29:15:bb:c4:ed:28:55:96:53:
                    a5:e4:ce:9b:eb:f6:61:af:b7:f1:2d:1e:cd:9d:b6:
                    37:d1:f9:f6:16:c5:9f:74:ef:d0:45:5d:ad:c4:78:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:0F:73:A6:D1:40:3B:2C:3C:C2:A4:A4:90:9E:E4:E3:F7:AE:55
            X509v3 Authority Key Identifier:
                keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c6:df:4d:35:bb:d3:38:aa:1d:1b:0e:e0:7f:09:c3:4e:f8:
         a9:c0:74:cd:3c:fc:cd:7d:96:a6:a1:32:3c:a7:df:ee:03:03:
         65:ab:ef:24:a3:1f:ca:8e:42:b9:6f:f9:d2:27:5a:ac:5a:0d:
         98:f5:bd:88:dc:96:10:cd:09:58:67:d3:15:8b:44:ec:0e:b1:
         e7:46:3b:2a:b1:90:e4:31:b1:43:1f:ac:0e:1c:1d:79:1a:07:
         9e:99:9e:34:a6:89:7b:63:ba:e5:d5:a8:ec:e3:30:69:c3:6c:
         f6:19:5e:3c:ec:5f:18:c3:1d:b8:32:bf:0f:a8:9f:a1:8f:4a:
         ac:94:d9:5e:1d:c4:ac:72:fb:b3:db:61:44:22:5c:74:25:29:
         8d:39:90:c2:da:76:27:65:ae:ee:de:9a:aa:16:ea:10:6b:2b:
         22:6e:b4:ec:19:fb:8a:08:4e:4f:7d:83:e4:67:99:a6:87:7e:
         b1:26:3b:91:36:f0:d8:60:63:51:b1:9b:cf:18:4b:c0:35:18:
         bd:46:c0:37:eb:2a:da:dc:dc:6d:13:7f:6c:7a:51:ad:5d:aa:
         9c:80:94:76:90:b4:49:c6:db:9f:82:f4:2a:80:89:5d:59:57:
         88:40:42:ee:56:43:0f:ce:c6:5d:42:01:e5:b3:4b:88:4f:db:
         66:ae:ba:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:35 2026 by rpki-client