Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File:                     kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier:          1GcvfTPZPmJgWfMtiHNFdaLwGUaZgs09J1UBHxxXGNU=
Subject key identifier:   8F:37:96:8C:10:71:AE:24:8D:6B:61:04:2F:D3:C4:DC:05:94:D6:C5
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer:       /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial:       01A06D5E56DE0EFA8FCE84D359C5AA577FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number:          0D55
Signing time:             Fri 04 Sep 2026 17:01:34 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:34 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:34 +0000
Files and hashes:         1: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (hash: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU=)
                          2: 93jVDH-zB17GHVV4CvC_Vu4ZAjg.roa (hash: e8hjU0chelgASP0m/iz7CcB1JuMpCP/VF205/UzfQOE=)
                          3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: Jrgeixcf3qGasX5AsQMsCG7Lc0IPo4v4LFXcVBT0Lvg=)
                          4: ya9LYPXvHEEXO5XvEJTV9ST8Zk0.roa (hash: cgKvDxCnzGGms11PufhD9gT5FhjHVHi9rSIbt12B0YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5e:56:de:0e:fa:8f:ce:84:d3:59:c5:aa:57:7f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
        Validity
            Not Before: Sep  4 17:01:34 2026 GMT
            Not After : Sep  5 17:01:34 2026 GMT
        Subject: CN=8f37968c1071ae248d6b61042fd3c4dc0594d6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:96:5d:96:2c:45:e3:f6:10:98:28:d0:76:d3:
                    73:59:a3:2d:e6:84:49:5b:c5:15:2d:1a:38:c2:87:
                    fa:61:b6:b7:d5:55:69:4d:6f:33:3e:9a:1f:5e:12:
                    09:61:01:f6:8f:3e:e7:95:58:a2:24:10:58:1d:3d:
                    ee:82:77:c4:40:d9:cc:9f:ab:53:cd:84:41:0c:44:
                    3f:4e:fc:40:1a:f3:12:fa:a0:95:c2:8d:d1:1b:da:
                    56:4a:0c:c7:c4:00:ec:d1:4b:ee:93:ba:f0:16:f5:
                    b3:45:ed:f4:bc:65:ec:51:6b:f7:81:68:04:f7:97:
                    26:79:e5:73:2d:f5:00:c7:23:a7:00:e5:96:7b:a0:
                    ea:d9:47:58:a2:a2:70:c5:a0:de:e7:02:5e:00:96:
                    59:e6:2a:8b:39:d7:c7:e9:12:98:47:72:62:2b:ab:
                    e7:4d:a2:71:d4:12:96:68:d8:55:77:3a:0b:68:9d:
                    f6:0e:ab:e1:67:a8:09:37:cc:75:6f:ec:94:54:76:
                    62:72:f9:55:3e:87:c1:a2:f3:21:57:2f:ac:b3:ac:
                    12:12:61:d1:7f:f6:18:97:16:c8:c7:5f:63:a0:a0:
                    c9:6c:8c:88:43:3f:93:fa:ef:1d:c6:15:9f:e2:e6:
                    ee:33:89:d6:f7:12:ef:32:b7:21:af:2e:17:c0:95:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:37:96:8C:10:71:AE:24:8D:6B:61:04:2F:D3:C4:DC:05:94:D6:C5
            X509v3 Authority Key Identifier:
                keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:ed:02:ce:93:f5:d2:0b:50:67:7e:ec:6c:bc:7b:c8:73:
         d3:ba:39:62:7e:ab:db:d7:f8:21:e3:2e:1e:ee:00:71:a5:c7:
         23:23:1f:39:22:6e:3c:c3:6a:4f:1a:c9:8f:65:f8:5a:a4:dc:
         d1:8d:15:9a:dd:e5:9a:f4:af:8e:3b:80:34:21:ed:55:ce:ea:
         19:f6:69:79:3e:22:5a:ff:ad:d6:ef:09:d6:96:56:3a:80:82:
         cf:bc:39:e3:1a:f7:ed:6e:c0:18:23:e4:d5:d2:9b:e0:13:33:
         8d:9f:e9:93:95:bc:22:56:ef:65:84:97:e0:b9:64:60:8f:ac:
         3c:0d:0f:03:26:de:b0:01:e9:bc:98:ee:82:91:a9:e9:5e:1f:
         18:53:9e:39:2f:37:c1:43:b9:8f:cd:30:39:65:f8:d7:32:b5:
         8b:a1:d1:6a:5d:80:1b:47:3d:de:d2:16:4a:4d:97:74:99:57:
         a8:c7:2d:3d:c6:3d:2a:29:08:06:4f:e0:5c:ba:dd:34:ab:cb:
         3e:62:78:3c:e3:ef:c6:7b:b7:9b:18:f1:cb:83:9b:19:f5:4c:
         5f:ad:68:c1:6f:60:e6:31:71:19:ca:e6:52:c3:51:fd:42:2c:
         7f:8e:c1:de:ac:e3:04:cc:e0:f2:5e:20:35:78:2f:de:06:08:
         cc:95:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:23 2026 by rpki-client