Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
File:                     kY-mQPg8SCrJWskFF0tSN9doN5s.mft (raw, json)
Hash identifier:          PyNz7373xLGQ0zkoUBbMIjIx3hRhwM+VnWnAFWbnWrQ=
Subject key identifier:   EF:71:81:A0:E2:EE:7C:AC:5F:08:97:43:59:9A:00:B8:5C:74:05:95
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Certificate issuer:       /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial:       01A16C80095B3039B0FE74F837CB4A06D190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
Manifest number:          0136
Signing time:             Sat 24 Oct 2026 06:01:32 +0000
Manifest this update:     Sat 24 Oct 2026 06:01:32 +0000
Manifest next update:     Sun 25 Oct 2026 06:01:32 +0000
Files and hashes:         1: 251AqFOyskaKWs66aZFawfV5z14.roa (hash: XUxs9JPcVOmTRxaAw3XtUXshA8geswAzFtASBhH4g6w=)
                          2: 2WVr5p2H7r2azbb2WIvSV483tPM.roa (hash: IwiB9DNZvI6+xxe/bmcy9dKCy2z4spHmBIdmUbXkKUo=)
                          3: LCRwU7xfdUzvJbwsekyl3kZ7YQM.roa (hash: npyymPGB2JJn3weBX4RtZOrvbRJhsnjy2HLem4uOQMI=)
                          4: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (hash: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=)
                          5: kY-mQPg8SCrJWskFF0tSN9doN5s.crl (hash: whUsswAkjTPizOqxvofs99q0IX48y/PNIo7apJsUDDA=)
                          6: k_p0G99T-kOb8IDRnsd82pe43DM.roa (hash: fAHyhB6wFFezzUaln2OnR6OxOwi0d6bOr/s4KfY2WbI=)
                          7: xjfV9MLeTgGdVvW7HYXIzxvv-YI.roa (hash: zVFYnjswOeC1o9AjP9zhGvgKqOwrSI1huC/5Bh7oUPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:80:09:5b:30:39:b0:fe:74:f8:37:cb:4a:06:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
        Validity
            Not Before: Oct 24 06:01:32 2026 GMT
            Not After : Oct 25 06:01:32 2026 GMT
        Subject: CN=ef7181a0e2ee7cac5f089743599a00b85c740595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:13:a8:59:fd:9b:60:dc:40:fd:1d:a6:d7:
                    21:97:13:6a:13:ac:a4:c6:7c:f9:1a:fd:19:2b:23:
                    2c:62:54:38:b4:87:6b:83:86:d7:0a:6a:e3:a1:e4:
                    a3:af:81:e7:f9:0e:85:9b:2b:f8:58:27:72:e2:6e:
                    a8:59:78:f5:21:d7:c9:ff:47:dc:0f:b6:e7:2d:ca:
                    94:4c:ce:9d:b9:24:0b:5e:33:48:97:4f:75:af:a3:
                    96:2e:b6:8d:3e:1d:28:76:88:8a:7b:02:d2:39:5e:
                    65:a7:15:55:57:ab:dd:f2:a1:5a:ec:15:be:3d:69:
                    89:3f:b3:df:92:96:46:c1:37:76:81:e8:b8:94:cf:
                    50:8b:54:42:24:5a:19:13:74:ec:bf:cc:e5:e7:83:
                    35:6b:98:b5:20:c2:9f:41:ed:83:4c:c8:86:80:90:
                    6a:55:43:1f:de:ea:26:b8:be:b5:1b:18:fb:af:dd:
                    b6:fb:50:0d:fb:dd:42:8a:f5:2e:29:06:7c:59:9c:
                    f1:7c:66:43:e9:2b:c7:ff:1b:98:85:05:2c:7c:dc:
                    dd:bb:f1:5b:b7:c7:ed:3c:e0:86:7f:27:b5:3f:ad:
                    cb:c1:94:e5:f4:18:13:e7:70:64:48:65:c3:0a:9b:
                    d9:49:5d:cc:2e:cc:9d:da:94:20:e4:93:46:e8:8f:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:81:A0:E2:EE:7C:AC:5F:08:97:43:59:9A:00:B8:5C:74:05:95
            X509v3 Authority Key Identifier:
                keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:16:18:54:14:dc:42:b8:da:c5:0f:d8:65:ca:f3:f8:e3:5d:
         93:00:d6:a5:43:b5:ca:76:ef:1a:43:74:ab:1d:0d:1e:7b:84:
         91:b3:e0:bf:ec:ca:54:4a:da:a6:1f:d8:a2:99:f8:58:97:ba:
         e0:82:c7:5d:aa:18:a2:c7:d1:9c:68:8d:44:db:0a:bb:a2:3c:
         09:63:35:53:84:13:49:91:17:d1:6a:d8:d2:5a:6c:b4:8c:31:
         fd:82:4e:3d:4d:15:12:5a:c5:40:28:56:c7:08:30:94:b8:b6:
         80:4f:5a:57:e4:8f:d6:d4:be:13:98:43:50:ff:13:e0:0b:ec:
         7d:da:fd:fd:3b:02:13:76:42:43:9b:0c:8b:60:23:5f:11:69:
         5a:92:69:58:4a:5c:ea:03:b5:0a:a5:e0:75:87:e6:e8:02:f9:
         be:3d:aa:d4:74:ac:e5:ae:eb:2b:0a:d4:c1:ab:64:37:5d:cb:
         e2:34:8e:00:88:b4:3b:41:39:17:4b:de:83:af:a2:96:b0:6f:
         a1:3f:4b:f6:75:1d:27:10:a9:6e:68:58:9f:76:de:e7:1b:9a:
         e4:64:46:20:c1:84:59:74:99:48:53:fb:80:e3:50:26:ba:84:
         40:51:c0:59:c8:5a:e2:03:cd:f9:37:b4:8e:d1:2b:34:f8:61:
         e0:2d:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:40 2026 by rpki-client