Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          Gxy8geB7vJhHdhWbzAJdiLAZ5S6juAkJgPaSipU32d4=
Subject key identifier:   0F:0E:48:20:DF:80:12:16:E9:1C:03:3F:47:9B:FD:47:5C:10:7C:23
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       01A08B9ECCB76AD2264F65702F9D0D8715F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          1A6E
Signing time:             Thu 10 Sep 2026 14:00:35 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:35 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:35 +0000
Files and hashes:         1: Ey-dQQ-b6D2JxAtl1tAirq1PpoM.asa (hash: B5MNhEwcfTqjF8H4A+QQFdaliNoWUEp7gf/35pg9Rbk=)
                          2: TNljeYPXxYIj5lo4d5l5EQLTZdU.roa (hash: CfzLFBITnlNK1XZxNhkSFtNXwo43Z88uKiUP3w2UsN0=)
                          3: UxN_iPmj1i5VVwJh2wPj2iaUaVM.asa (hash: +kSZr95TCNO+Jxjrh8oERrLS0jlz5ECdtQ/K2vdi+cQ=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: j4GsNg39bhBJg3hr1kMrc99AM8QyyIM8u+hUpBA7cag=)
                          5: pvrzZs8nm8ie9zDZhpBcHaIBCCY.asa (hash: iIYioZLzMA8MH9b2racO6xb3a/8R+kHNVUc/GDc8+W4=)
                          6: snlFadvdcM00ncJFWRG-pTa8eHA.roa (hash: 9LDuoi+waDnjJ5h6Bt5yAaxEDStiyfH1brajFG+wFiQ=)
                          7: ujd_58sugEeAoF5jMpUipoqtW4s.roa (hash: EUJlvM7IyZpw1wssBYGFhzm/HlXJCYuSLXzoCbLldiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:cc:b7:6a:d2:26:4f:65:70:2f:9d:0d:87:15:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Sep 10 14:00:35 2026 GMT
            Not After : Sep 11 14:00:35 2026 GMT
        Subject: CN=0f0e4820df801216e91c033f479bfd475c107c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:04:f2:89:e2:6b:c4:1c:32:62:90:9c:ad:
                    4e:df:21:8c:e6:64:31:d7:27:22:a0:de:8b:6a:a1:
                    e1:2a:44:20:ff:bd:53:12:e5:23:df:13:8c:35:76:
                    e7:77:6f:23:94:8a:e2:a9:c1:23:af:7f:13:e3:41:
                    ac:57:8e:86:9c:96:e7:7f:df:41:cb:67:78:1c:55:
                    61:4b:e1:ff:9a:c7:8e:e8:88:00:f2:f9:c1:6b:ce:
                    25:c9:b8:7a:d6:05:36:c2:bf:84:2f:b4:e0:48:0c:
                    d5:52:51:28:92:2f:de:55:20:3b:ec:f3:7a:a5:17:
                    8b:fb:59:30:44:da:2c:02:d1:62:35:5e:53:18:26:
                    0b:3c:91:55:8f:ce:9c:82:31:01:32:2b:44:fd:60:
                    fc:8a:be:22:95:8e:52:da:0c:99:d3:e9:dc:9c:94:
                    77:92:05:aa:e9:87:0d:70:83:e1:a8:a6:5d:57:ea:
                    e2:3b:aa:cc:a5:de:67:b8:84:5d:c1:cc:ad:06:b0:
                    3a:8b:78:03:da:85:22:a6:2a:65:f3:bc:dc:35:5e:
                    e0:70:7a:b0:f7:f8:df:22:aa:78:1e:05:41:b6:dc:
                    01:28:6e:cf:32:f4:24:13:b4:d8:d2:b6:73:64:83:
                    e5:e3:de:d1:fb:4a:a3:2c:69:a4:5a:d9:e8:5f:20:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0E:48:20:DF:80:12:16:E9:1C:03:3F:47:9B:FD:47:5C:10:7C:23
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e7:65:e5:97:90:11:30:ab:41:50:39:f3:d8:e5:b5:be:22:
         14:2e:b9:84:79:b1:3e:55:04:3e:af:10:b0:4f:53:0a:cd:3c:
         9d:ce:52:82:4b:23:af:14:23:80:5d:5e:44:28:eb:f0:67:f0:
         9a:80:36:e6:fb:6d:02:df:b1:5a:ea:9e:cd:4d:86:b6:18:3b:
         4d:53:7d:ec:d4:da:80:e9:c3:f8:a4:69:37:cd:87:cd:5d:ea:
         0a:60:51:96:9a:98:d5:a9:e9:db:2b:bd:53:54:6b:5f:a3:98:
         0f:67:7a:03:b6:9f:73:cc:8d:c3:25:d9:bb:8b:00:e8:54:13:
         7d:13:b2:ed:c6:fb:69:90:f1:81:0b:bb:a9:87:d1:de:83:33:
         bf:95:5b:a4:59:b6:44:12:f4:a0:91:8c:ad:af:83:98:61:86:
         02:76:59:3e:6c:69:76:27:a8:54:57:e3:89:fd:f1:78:06:c3:
         8f:96:02:6c:9c:99:10:bc:89:aa:4e:44:23:71:32:a5:f3:f0:
         ab:73:77:4c:5b:80:e1:36:9f:88:47:0a:2a:09:d4:8f:45:16:
         22:93:8c:e1:21:f0:45:0c:bf:f1:db:da:fd:6a:21:66:35:81:
         36:7f:ad:c2:a4:0f:06:c4:6c:f0:bd:82:a4:04:62:2b:34:7a:
         74:72:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:41:22 2026 by rpki-client