Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File:                     kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier:          5p57+lXnn1LCEfQJsWnnuQMPgiV9HnLFtOfbTe9mtKk=
Subject key identifier:   6D:4E:5F:D4:13:8B:50:08:C7:C2:5C:38:7A:C8:31:48:CE:B3:C5:71
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer:       /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial:       01A1502C754390C45E79B30F0CF4385FFC9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number:          1ABE
Signing time:             Sun 18 Oct 2026 18:00:53 +0000
Manifest this update:     Sun 18 Oct 2026 18:00:53 +0000
Manifest next update:     Mon 19 Oct 2026 18:00:53 +0000
Files and hashes:         1: 1-AOMCdmeoYbt2ya7aina0jr4jtY.asa (hash: xTwHqHanvk0kgMpXCUgJVeavuxMbD2EF+e+t7yaNRxM=)
                          2: 3W7usHsAz5z3pRj0N-iDHGm2czc.roa (hash: E4GnjrWRndz3AnBRx+9OaWV9XAb0zCBKRFe07lFMNTM=)
                          3: F_BgJOvocs04aWFuQm0POmDC4qk.asa (hash: 8pzNWyrC83klHScR8mmfAawPECea/FNnp40sU7XiI9U=)
                          4: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (hash: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4=)
                          5: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: xKedDAo00Vz30m3iFaIx/EV0mda9CMxEYWTss9QrVAA=)
                          6: m0G5GX11-PLi8Cf5dbRKsch6VxU.roa (hash: B5VOYp4J4pteli5ym2in+54bvDMlgr4itugyDjzngoo=)
                          7: o1nw85DsZ7czict7FbvJ_kQ779I.roa (hash: SMVCZ8WXzySWtmomiDw5Tx85wLb4riJVskzdAhjKnkA=)
                          8: s8RwLaAcYW-FcVFkTHdO592EBJw.roa (hash: 23Vx3ChhQtBmCL55miGjdzYucRN+3e2NsCi7uSICISw=)
                          9: x7z3-WlmNr2YUSTC3PV3TWqKNuE.roa (hash: WjqVws7+vV9QS4+QUh1ff5JcBRwxUgUec5H+AxoP0GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:50:2c:75:43:90:c4:5e:79:b3:0f:0c:f4:38:5f:fc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
        Validity
            Not Before: Oct 18 18:00:53 2026 GMT
            Not After : Oct 19 18:00:53 2026 GMT
        Subject: CN=6d4e5fd4138b5008c7c25c387ac83148ceb3c571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:88:85:99:74:1c:c7:3e:21:51:2a:eb:45:
                    99:d5:de:81:5f:88:1e:97:b2:f4:62:2f:c1:b3:22:
                    b2:fd:7f:62:67:19:bc:23:cb:a4:c4:b8:59:5b:27:
                    c0:70:69:df:16:ae:1a:db:4b:79:45:63:90:d9:f1:
                    78:f5:6e:e3:a3:d0:4a:06:2f:71:e8:64:b2:5a:ef:
                    5c:99:6a:d8:d6:2a:09:91:24:23:67:3f:ae:4a:3b:
                    4d:15:5a:cf:f4:4d:03:f0:8d:c4:3e:c8:16:eb:4e:
                    bd:38:c5:16:10:d5:02:fc:d0:0d:a9:2b:10:85:fb:
                    7a:f3:50:92:d7:ca:37:44:1c:37:ea:63:7b:a8:dc:
                    42:77:08:90:2f:ec:1d:01:03:5d:ed:a7:e8:5b:c1:
                    8f:70:20:49:56:a3:ee:7b:85:8e:8d:a3:79:17:32:
                    a6:59:31:d6:d4:6e:f7:db:7c:f0:fd:70:36:1f:0c:
                    4c:8c:c0:18:90:cd:7a:22:7a:f8:f8:40:ca:be:82:
                    d6:4a:fd:6c:5a:dd:8f:e5:02:ce:39:7f:bc:e8:61:
                    30:77:eb:7f:a3:a5:be:a6:4d:c9:39:91:d5:ac:02:
                    32:03:3c:2a:86:93:cc:63:16:2d:96:58:9c:b0:c3:
                    8c:dd:ec:ba:d9:c4:41:be:ad:6f:64:b6:28:84:5f:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:5F:D4:13:8B:50:08:C7:C2:5C:38:7A:C8:31:48:CE:B3:C5:71
            X509v3 Authority Key Identifier:
                keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:15:07:9e:49:d2:e5:5a:7d:b4:58:bb:61:bd:4c:65:b3:
         ac:6a:16:00:95:20:32:b5:ed:0e:99:1d:b6:43:7e:0e:f2:9c:
         c9:b5:ca:d0:39:b2:ff:3f:97:14:f6:8c:fa:6f:02:d0:5d:f5:
         b1:76:7a:60:38:a8:e0:0d:ac:09:2f:27:89:95:bf:8c:0b:8f:
         6b:28:db:aa:89:42:9a:c2:63:b8:77:f0:17:4d:a5:95:00:c8:
         fc:1e:87:4c:61:f8:b2:69:5f:ca:ca:ca:16:0e:10:4f:dc:2b:
         09:01:d4:fa:09:fc:d2:3c:53:ae:8a:1e:88:86:4a:8c:ec:a8:
         f4:66:e3:02:87:60:16:18:a7:d7:99:c2:7b:b7:c1:e7:83:51:
         8f:92:92:77:41:4e:d4:69:b3:30:90:f0:4b:2b:a5:5e:be:2a:
         53:81:0f:bf:8d:b2:32:22:4d:08:87:e1:6c:61:f5:0f:01:3d:
         5c:bd:fe:da:e0:23:64:02:be:a6:6f:2f:35:3e:27:35:c1:d2:
         59:96:79:02:cb:90:7c:5f:48:09:c0:56:82:b1:7d:ee:7c:cc:
         1c:16:c6:2d:9e:f4:3c:d4:25:41:18:3a:e6:1a:ce:34:83:98:
         69:d7:94:ca:7a:7c:b3:ef:c2:32:de:8e:30:fa:6a:43:56:f5:
         e3:16:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:51 2026 by rpki-client