Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File:                     kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier:          5KixCc2dwNggCo40/ZC686App42WBC+9dNYt5PK20P8=
Subject key identifier:   8E:60:B5:E1:F8:D5:66:FA:42:27:7D:33:C0:CC:DC:4E:3B:4F:A6:FB
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer:       /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial:       01A17D0583D5B721AF9B6F3BBC010953B318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number:          1817
Signing time:             Tue 27 Oct 2026 11:01:15 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:15 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:15 +0000
Files and hashes:         1: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: IMVi5nklKVrP9XZPXmilMoFO/9TGDY1y6dSqUz3S2/g=)
                          2: pyyCcwg28T8OCxDC7t4WlQvR1fE.roa (hash: vqMvGtxlsS/96gXfo87qGJea1tSQsd6SzOhgyD1guM0=)
                          3: qWgenfzNoLxVJUxMlJg8uksYE8w.roa (hash: 5zL8rRPK4hffhP9A424Y5VU6wUWahVSgRZ2tOwMMBLo=)
                          4: ro3d1JmzAdukByESOlpeuF0zW24.roa (hash: gokr397VxWXE8kc3sUh9UfgOu6V2S+kyKdIbZvikusY=)
                          5: zgYDkmvAGI8BspccK9JmTAYBRPA.roa (hash: +/N/svQkaAWguAU7Ksruh8qP1PBm4maWw1DDJcR7hZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:83:d5:b7:21:af:9b:6f:3b:bc:01:09:53:b3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
        Validity
            Not Before: Oct 27 11:01:15 2026 GMT
            Not After : Oct 28 11:01:15 2026 GMT
        Subject: CN=8e60b5e1f8d566fa42277d33c0ccdc4e3b4fa6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:3d:d7:fd:5e:68:6a:82:42:2b:64:46:ba:
                    92:d7:fe:f3:a0:7a:07:62:8b:cb:85:bf:25:53:8c:
                    d6:97:87:44:fb:b5:a5:c9:45:88:58:5a:ae:af:0c:
                    30:8f:ab:68:30:28:be:95:c6:08:24:f0:12:b9:44:
                    b5:55:9b:7d:73:43:55:77:db:98:cf:b8:29:46:ba:
                    e2:b9:3b:92:ba:59:e6:e4:a8:2f:d1:5b:49:0e:f5:
                    7d:d0:c2:77:6b:57:b3:26:7d:48:ec:8c:0b:16:46:
                    4b:7c:1e:a3:92:75:56:cc:85:44:9d:8b:de:39:13:
                    ac:93:f7:bd:6d:01:85:a3:5d:af:b8:93:86:a6:cf:
                    a1:08:3d:8a:ef:ec:6a:d6:72:c8:dd:7b:06:ba:6e:
                    3d:58:76:a0:c5:f3:01:a7:3b:b8:88:0f:01:46:da:
                    c9:e6:df:62:62:ac:c8:4a:33:e6:dc:57:36:ee:4e:
                    d0:41:f9:5e:c4:34:31:35:bc:b7:13:3f:b6:50:7f:
                    e9:18:54:83:10:dc:84:40:80:11:68:50:38:f5:c5:
                    e6:88:13:99:66:e3:12:ca:97:6e:d6:34:08:2e:6f:
                    67:6f:71:d9:cb:21:5d:3a:31:78:69:2c:b0:58:ee:
                    8c:7c:d5:9e:8e:21:26:0e:06:1a:2a:f2:54:2e:b3:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:60:B5:E1:F8:D5:66:FA:42:27:7D:33:C0:CC:DC:4E:3B:4F:A6:FB
            X509v3 Authority Key Identifier:
                keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:49:bd:0c:24:08:48:df:67:1a:05:8d:f4:4a:d7:ed:b2:ac:
         1d:d4:45:f9:39:c6:89:18:e1:07:50:2d:09:88:29:84:d4:73:
         ba:6d:da:f4:8e:5c:97:1e:f2:ba:66:07:31:7a:f3:fb:eb:ba:
         e3:c0:e7:45:8f:3c:53:c9:71:f0:f8:df:96:b6:e8:d7:1e:01:
         49:10:4b:74:25:95:44:7d:39:66:f9:0d:77:5d:13:59:dc:55:
         0f:e8:23:e4:c6:97:54:01:62:ab:4b:e8:7a:01:af:c0:b7:77:
         69:b9:57:c4:b4:35:77:da:75:1c:61:af:17:0e:3a:81:23:c7:
         ba:fd:0d:b1:35:40:3d:5c:d3:32:da:f2:b7:0b:53:22:96:aa:
         8e:30:bd:26:a5:89:74:83:4d:c8:11:c1:f3:78:09:d7:11:be:
         4e:8b:5b:a8:4e:38:fc:03:43:8c:0c:84:b6:a6:8c:4b:4d:f9:
         6a:a4:01:29:c7:9f:05:4c:1e:94:0b:bb:36:3e:ea:69:21:eb:
         ea:6a:23:fa:97:41:8e:0a:e6:79:25:95:f8:c8:44:7a:51:89:
         ae:68:79:52:04:c9:51:46:25:86:91:1d:90:12:b9:8c:d4:80:
         31:df:8b:90:ff:0a:bb:07:a4:69:ff:4f:a1:3b:87:87:ab:56:
         c8:83:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:05 2026 by rpki-client