Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File:                     1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier:          kSK7Xs0G2oYm4QH8mfl7l9MUN1OcduTlbcmaqGDcYpA=
Subject key identifier:   C2:71:0F:17:90:0B:6A:01:E9:7B:40:FA:1C:9B:31:65:A9:73:52:26
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer:       /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial:       01A174A66F98406C9B8AF3A993EB41F4E1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number:          068D
Signing time:             Sun 25 Oct 2026 20:00:26 +0000
Manifest this update:     Sun 25 Oct 2026 20:00:26 +0000
Manifest next update:     Mon 26 Oct 2026 20:00:26 +0000
Files and hashes:         1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: WM3ZNSnFsl1tqyzN9V8QTw1I26puYfOjxOXyq5/OMt4=)
                          2: 5lw0Z8fN3yFK1pB9OZyXHQLW53k.roa (hash: WDVA9Lawkmj9ZCv4AbTYoBdoLfCfWXIwbeGfqru0gP8=)
                          3: q2x6Xc8ZZACW9fJu899MsKHJMM8.roa (hash: pwMpRh3wZ+J+ajZgUW7mCK8jkEGxvenqPQjzyuBapnU=)
                          4: rzIgn7Bc7AW1MuiRL3XQ-BG4jx0.roa (hash: arDjnmmejpgyaF8cmbFn6SUiXjaKhcHxmQG+SV3R6fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a6:6f:98:40:6c:9b:8a:f3:a9:93:eb:41:f4:e1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
        Validity
            Not Before: Oct 25 20:00:26 2026 GMT
            Not After : Oct 26 20:00:26 2026 GMT
        Subject: CN=c2710f17900b6a01e97b40fa1c9b3165a9735226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:39:46:36:e8:34:62:31:a1:83:16:ba:9a:
                    4c:c3:38:4e:89:00:5c:c2:3f:17:a5:21:e2:39:33:
                    f3:59:19:76:a3:48:31:38:be:d3:20:62:0f:54:5b:
                    bf:6e:c1:75:b1:a1:0f:50:e7:f7:0b:fc:80:9b:91:
                    45:20:5a:e0:c4:69:d1:62:b6:a7:00:90:a8:24:d4:
                    16:fe:50:e1:28:ac:34:63:e3:34:ef:96:ae:87:11:
                    81:a8:a3:eb:36:46:8b:f9:e5:94:8b:01:df:e4:5c:
                    80:19:15:44:d5:76:1b:e9:6b:ec:b1:b2:c5:71:30:
                    94:00:f9:b9:24:48:71:55:15:54:86:99:b1:37:cf:
                    3f:95:31:ba:a3:34:38:4e:7b:23:29:b4:c2:09:2f:
                    65:6b:b1:de:4b:df:c0:49:a3:3f:57:4e:ac:73:1b:
                    d8:25:ad:16:5e:8a:5c:d5:b5:42:03:a0:c7:06:da:
                    7c:cf:00:ce:b1:ab:46:f1:1a:d8:5b:72:bf:16:cc:
                    ce:67:c6:93:bf:38:55:18:e2:40:50:c8:d7:60:ea:
                    fc:66:3b:87:ad:53:ad:bf:41:2d:40:bc:f5:f7:7b:
                    09:ae:f6:6c:f1:f8:d4:dc:64:22:e3:71:45:29:62:
                    44:b0:1a:fb:5f:ab:74:fc:68:a7:5a:1c:ab:e0:8c:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:0F:17:90:0B:6A:01:E9:7B:40:FA:1C:9B:31:65:A9:73:52:26
            X509v3 Authority Key Identifier:
                keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:5e:45:18:8e:60:92:76:92:66:f0:08:93:32:b9:06:b4:
         96:ee:66:9d:f1:3a:8f:3e:bf:46:9c:e9:0a:a2:b2:88:10:c8:
         b3:61:ee:2e:f5:77:46:be:59:6e:2c:68:c5:7c:5b:76:31:a1:
         96:69:bf:6f:80:12:a8:8d:90:1a:f8:53:77:f2:65:cf:08:e0:
         68:bd:b7:e8:2b:af:6a:9d:f9:e1:92:f0:a1:00:c4:b2:9b:a0:
         3a:f3:25:62:07:a1:b8:fe:a6:22:91:aa:5e:40:a7:ae:a4:c4:
         5e:35:8b:97:40:f9:93:90:fa:c7:b6:8b:c6:82:89:b3:46:12:
         4b:c2:81:5e:f4:cc:67:c9:75:3a:f5:3a:5f:d5:c7:b6:7a:76:
         e7:72:45:07:e9:1d:63:fc:e0:37:4d:0f:7d:58:74:06:2b:09:
         1c:68:42:1d:fa:0b:af:f8:96:41:ad:51:72:77:ef:90:f9:f7:
         bf:33:e0:b6:75:60:97:11:8b:ae:d7:a3:52:7c:7f:76:ff:72:
         23:22:05:1e:a1:47:98:b3:81:2a:20:83:c4:73:3c:8e:cb:0d:
         46:43:ec:5f:57:47:64:44:20:a7:3c:9c:70:e0:f8:c7:bb:b6:
         58:29:6a:1b:3e:e1:a6:af:a9:f7:4b:e1:f7:d4:b5:3b:a1:33:
         9b:fb:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:00:24 2026 by rpki-client