Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File:                     k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier:          uOyqSoHB800+scp2RWZKiWBfZPccRtOvUmSd84ES6Jo=
Subject key identifier:   47:BB:1E:77:56:8A:79:D2:27:67:C5:CB:31:6D:6C:F5:6C:30:1C:46
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer:       /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial:       01A0B5E4001C84511E4075FBA9AEAAA00E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number:          113E
Signing time:             Fri 18 Sep 2026 19:00:13 +0000
Manifest this update:     Fri 18 Sep 2026 19:00:13 +0000
Manifest next update:     Sat 19 Sep 2026 19:00:13 +0000
Files and hashes:         1: WnqftNCyGGgmMJGMeYqSXlYQgzY.roa (hash: 3YPIPkErWf+MSDNSaPD3rVTW2gHMw+9WcKSvT6PGvpc=)
                          2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: wVxcCJUDT6DmM5fn+WKguMVAOtGOLuOKmb6iyvgjkYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:e4:00:1c:84:51:1e:40:75:fb:a9:ae:aa:a0:0e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
        Validity
            Not Before: Sep 18 19:00:13 2026 GMT
            Not After : Sep 19 19:00:13 2026 GMT
        Subject: CN=47bb1e77568a79d22767c5cb316d6cf56c301c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:ba:76:66:bc:bb:7c:1e:e1:2e:81:d2:6d:
                    20:13:8e:f1:8a:83:bd:c9:ef:ef:16:66:fe:36:a1:
                    88:ca:42:91:b1:a3:d1:b0:55:e7:eb:b2:e3:87:5c:
                    17:0b:63:75:eb:e5:69:95:81:5d:15:1d:e6:06:a5:
                    0e:b2:18:4c:dd:ac:44:a9:ec:67:7e:a7:26:56:e6:
                    0e:53:57:4b:e2:ad:26:34:2c:ca:67:78:81:d6:73:
                    00:97:db:a6:3d:a1:da:b1:6a:fe:b4:7f:37:69:69:
                    ef:93:06:14:d3:a3:65:e1:76:4f:82:73:4b:49:1b:
                    ca:bb:7f:fe:5f:63:db:07:3b:f4:81:10:1f:f5:b0:
                    31:b4:83:6b:fa:8d:e0:6d:a0:35:3d:49:cb:82:e1:
                    09:ea:b7:83:b5:0e:c7:b8:a7:0c:2a:3e:af:6d:6f:
                    c2:e5:65:97:2d:51:ed:55:ab:17:35:fc:08:fd:7f:
                    46:2f:b7:44:ae:b4:5d:a4:ff:7d:89:7c:6f:e3:17:
                    96:10:c2:46:30:0c:87:f8:c8:4e:a1:34:95:3e:2a:
                    f3:06:6d:7f:aa:6c:5f:b6:ce:65:d7:b5:da:c9:34:
                    7e:c5:10:c8:56:7e:a7:cc:ac:fd:95:c5:bd:1a:d9:
                    bd:12:eb:dc:e6:9a:9c:84:80:6a:0a:88:85:39:61:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BB:1E:77:56:8A:79:D2:27:67:C5:CB:31:6D:6C:F5:6C:30:1C:46
            X509v3 Authority Key Identifier:
                keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:95:4d:cb:e8:46:06:bd:b9:84:0d:99:de:48:43:d9:4f:
         94:e6:80:77:a9:41:95:0f:ea:e8:c2:59:54:55:ab:d9:c7:68:
         75:86:3e:31:e9:f5:09:cf:5a:2c:7c:c4:d6:01:2d:72:db:1c:
         91:57:77:ab:46:8f:18:e1:c8:b3:f9:f8:af:e4:18:87:e2:7e:
         95:bb:64:1d:92:a0:1f:22:69:de:07:de:6f:db:2b:e0:85:40:
         1a:93:c3:6b:aa:95:bf:93:2b:5f:8d:78:17:5b:c5:75:96:8a:
         c8:03:c6:4e:1a:26:6a:1c:54:42:79:a3:f2:90:a2:12:b5:09:
         b8:84:29:5f:55:71:79:37:e8:b5:2d:38:cf:87:b8:ae:f1:90:
         e5:34:b1:e7:ab:7c:3a:12:20:61:35:d7:f9:96:f4:bd:df:59:
         f8:be:75:66:43:ec:59:f0:36:52:ba:8a:89:79:d9:2d:58:be:
         fb:46:97:b5:c9:08:81:5e:f1:2d:7c:ee:29:99:4e:55:61:36:
         47:9d:08:5d:a6:b8:43:05:74:e1:b8:75:ec:ad:72:1d:f5:53:
         aa:17:a2:6f:f7:39:23:4d:04:80:e8:43:58:bc:7c:45:68:c0:
         da:ec:c9:cb:ed:97:0a:e7:be:95:b6:ca:38:78:51:cf:6e:02:
         d1:e6:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:32 2026 by rpki-client