Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          pJhb+1slGNEFhUoojPh5dJ+Y47VUy5hszsmtLv7FiEU=
Subject key identifier:   DE:38:30:F1:75:C0:C7:BD:B5:00:3E:37:8C:B4:A4:D8:5F:B4:11:EB
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       01A004A6D7F1AA1D474738ADC96FC46552ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          1928
Signing time:             Sat 15 Aug 2026 09:00:38 +0000
Manifest this update:     Sat 15 Aug 2026 09:00:38 +0000
Manifest next update:     Sun 16 Aug 2026 09:00:38 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: tTnec9MmZf+0SdNXY40z+EzQXyL2D6cbC44yjOFBjwU=)
                          2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:a6:d7:f1:aa:1d:47:47:38:ad:c9:6f:c4:65:52:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Aug 15 09:00:38 2026 GMT
            Not After : Aug 16 09:00:38 2026 GMT
        Subject: CN=de3830f175c0c7bdb5003e378cb4a4d85fb411eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:1a:2b:22:e1:66:72:4b:38:4e:59:35:ec:
                    06:cc:e2:1d:c9:d4:72:4f:37:4a:ac:8b:20:c7:08:
                    22:51:7c:1a:9e:09:c8:36:8f:8b:03:5f:dd:9c:94:
                    fd:12:e0:10:81:ec:e8:7c:23:69:8a:5d:17:ef:3a:
                    1a:0e:90:f5:91:c2:e8:38:80:8c:8b:3c:f8:37:7a:
                    19:61:47:50:92:7f:9a:63:71:1a:ff:2e:0f:57:20:
                    b9:85:a9:6c:ac:a3:6a:6e:d2:c9:a8:84:1c:ea:f9:
                    0a:4b:eb:77:f5:d4:f8:e5:9c:8b:0b:b8:db:c9:b6:
                    05:fb:d5:1e:7d:42:2d:b0:7a:76:13:64:e7:5e:10:
                    ef:d6:ec:7c:4e:4d:41:12:54:54:ca:b3:44:ce:5c:
                    16:ea:c1:ae:17:51:9b:4a:ad:1b:58:07:f0:2d:c7:
                    59:95:ef:8d:64:88:b7:92:bc:6d:4a:df:84:7d:37:
                    6c:18:51:d2:c9:5c:70:c1:45:49:de:cf:12:99:44:
                    92:15:55:6d:74:36:0b:7c:7e:31:53:a2:42:08:a6:
                    6b:13:90:f7:d9:66:ea:ce:ee:bd:e6:0c:b5:5f:37:
                    09:e2:9d:f2:e4:72:82:53:ef:06:a2:b4:0c:91:b9:
                    9a:9b:96:ba:e2:04:ec:d9:9d:f0:aa:dd:ef:ab:05:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:38:30:F1:75:C0:C7:BD:B5:00:3E:37:8C:B4:A4:D8:5F:B4:11:EB
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:e6:13:85:e4:1c:c8:12:c1:4c:c2:ee:2e:29:ef:9b:e7:
         e8:f4:d9:e7:d4:51:cf:30:37:20:ea:6d:b9:1c:eb:2f:4d:68:
         50:b0:f0:56:fa:d7:49:96:45:6c:e0:56:e4:d1:3f:1d:74:d7:
         64:b0:b5:b8:64:ff:a0:56:96:3c:aa:69:e0:42:6e:4d:ad:fc:
         61:bc:a2:de:71:5c:35:40:3b:96:2f:cd:d9:85:8c:b7:1f:7c:
         68:c8:36:20:ef:26:fb:22:d5:03:18:01:97:01:fd:fe:08:2d:
         aa:d7:ce:e5:39:57:48:8d:8d:bd:08:02:ac:ba:a9:c5:2d:74:
         07:92:a0:b8:6b:e8:45:a8:70:bc:25:76:27:ae:36:8d:15:3c:
         39:d4:a1:4a:96:8a:e8:36:c3:e3:48:5d:d8:bc:0e:d4:ba:b5:
         8e:53:f2:c6:e6:51:2a:bd:9b:40:5f:92:7d:74:70:a8:9f:55:
         ee:33:83:55:de:e3:65:8c:52:f8:29:87:09:01:71:f2:46:1c:
         87:bd:24:d5:24:c3:6d:77:af:bb:9a:df:78:f5:f7:c2:58:29:
         36:a8:ae:48:41:be:a9:b8:84:ec:68:85:0a:33:a3:41:4c:43:
         71:cf:cf:41:0b:a3:88:f1:f8:ea:82:fa:d2:fb:4e:67:66:26:
         60:3a:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:46:22 2026 by rpki-client