Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          wJ2bD6dkHtxDLQmV7NKLy69VBBLyhcp6yJGSfaPj9h8=
Subject key identifier:   2E:E2:3E:61:0B:B9:F8:83:22:43:FE:C0:83:FD:25:7C:90:BC:7A:EC
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       01A174A74F77732ABCE086D968D90E91C1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          1784
Signing time:             Sun 25 Oct 2026 20:01:24 +0000
Manifest this update:     Sun 25 Oct 2026 20:01:24 +0000
Manifest next update:     Mon 26 Oct 2026 20:01:24 +0000
Files and hashes:         1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: ZGhN4BUPPz0m/9JslxpwpbGuS185L9wTWl6TKeR4i8Y=)
                          2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
                          3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
                          4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
                          5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a7:4f:77:73:2a:bc:e0:86:d9:68:d9:0e:91:c1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Oct 25 20:01:24 2026 GMT
            Not After : Oct 26 20:01:24 2026 GMT
        Subject: CN=2ee23e610bb9f8832243fec083fd257c90bc7aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:a2:67:2d:83:96:e8:de:93:75:07:8c:d8:
                    81:2c:6c:c7:a1:ce:ff:38:90:c8:b0:59:32:ff:49:
                    88:16:2d:5f:a3:29:a3:f7:91:52:2e:28:e0:3f:87:
                    89:94:63:62:7f:f2:fc:48:fd:e9:d9:9a:9f:3a:ed:
                    88:64:56:23:4e:d5:55:b2:c6:c2:19:9b:37:e4:39:
                    e9:85:5a:cb:13:63:b9:0e:4b:27:1b:0e:2d:96:74:
                    ca:0f:69:6f:76:5d:0e:45:88:4c:a5:03:ec:aa:ac:
                    4c:de:cb:9b:c9:66:84:1b:ea:e2:71:12:82:fe:be:
                    96:94:8e:a4:ca:27:b8:f6:92:33:75:e8:8b:8b:dd:
                    fe:94:1b:79:83:d3:76:99:91:ab:42:50:e4:df:68:
                    6a:5e:42:52:8c:b7:f8:b6:92:ed:05:98:16:b0:27:
                    29:19:5f:25:eb:51:36:c5:fb:c5:91:d0:a9:33:a1:
                    a5:80:ac:8b:50:c2:93:6e:62:bd:f3:a2:45:4f:f8:
                    ef:b6:e6:41:c5:26:96:d1:24:28:63:30:67:38:79:
                    95:2d:98:42:60:14:54:01:ce:58:58:c4:0b:de:2d:
                    a0:0b:a1:a6:0a:da:00:f2:60:60:e1:91:4a:37:3c:
                    0b:66:40:70:6a:4d:ce:5a:b7:4a:f7:1c:1a:ea:8d:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:3E:61:0B:B9:F8:83:22:43:FE:C0:83:FD:25:7C:90:BC:7A:EC
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:34:35:4e:01:d0:ac:db:6d:73:e5:77:1d:f9:ed:97:61:
         7b:e4:36:93:69:fc:1e:8b:4b:7e:ba:af:d3:79:1d:99:45:c1:
         2f:69:a6:ae:24:42:8d:f8:71:ba:92:48:22:c4:b5:ea:e6:fe:
         89:b1:3d:ee:a8:55:bb:10:f6:04:9a:db:70:86:6e:61:87:d7:
         d8:20:9f:2a:7d:86:4d:d0:37:de:6a:49:d4:ff:b7:61:aa:2d:
         db:f1:34:aa:ae:e8:d5:5a:b4:2b:fe:5f:99:cc:a3:42:d6:39:
         88:49:3f:a1:21:5c:86:d7:c4:89:86:db:51:a5:a2:4b:10:b0:
         8a:50:b4:11:c6:cd:28:35:35:4d:92:a9:93:9f:85:ed:cc:40:
         8d:cb:08:69:e5:4a:63:cf:69:af:61:96:b2:dc:af:99:b2:3b:
         80:f0:ca:48:37:17:19:6e:49:29:69:0d:d6:85:df:12:ea:11:
         38:18:83:c4:5a:ce:64:da:13:09:0e:e7:da:e5:a3:01:8b:65:
         cd:e9:90:76:e8:4f:00:fd:0d:db:47:ee:97:60:fe:8c:b9:34:
         79:7c:40:4b:46:ce:8a:22:3f:da:2d:db:ba:0e:0d:c1:80:a7:
         75:c0:d5:04:72:f8:1b:4f:63:c4:ee:af:d2:69:49:2d:30:71:
         52:f2:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:15 2026 by rpki-client