Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          vFjAgJxIx/vmB2zW2piAkohApe5SFRVmbsyFKk+rxY8=
Subject key identifier:   14:7C:C6:74:C2:A2:57:21:A5:84:46:81:BA:18:89:30:A1:87:A5:97
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       01A17394183E0C9B3A94B1541F3D56AE811A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          1711
Signing time:             Sun 25 Oct 2026 15:00:47 +0000
Manifest this update:     Sun 25 Oct 2026 15:00:47 +0000
Manifest next update:     Mon 26 Oct 2026 15:00:47 +0000
Files and hashes:         1: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (hash: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE=)
                          2: 4i9ivIesCHsbnVrZP6Me_46hnOo.roa (hash: qu7/9ByyUg/pGlPFs771pDMBYsdYL5/jWLiIBXBq/us=)
                          3: 5NyfZtZq8I_a22w9fqIDYQ8J3zo.roa (hash: ZXAkN8Owpsubs84/gjn1dQB9OdgtJ+vDayAhe4jgKik=)
                          4: 9bdi8ZcArF7uIVM_PWOWOKzHAwM.roa (hash: ksm5o6Brqb84qifDdWrqQOIBVSbPQo+Iqz+ko5JrdDE=)
                          5: AJc1n1WlM_uViiz8P-Q_ZGlrmkI.roa (hash: 5BjqoTSt8ivKeTgUMxzWvODvEYATsy/sKY0BmzBKn2k=)
                          6: F2qeHQTP3YKUfyoMJ2I6cHyrIBk.roa (hash: FVx/e+sO+XB2wvTGriWONMagJGCQ6hVxISJ0xlebzr0=)
                          7: GQccrYsGeyc_jz14ZkRPvffaEMY.roa (hash: iZxmpGm8fTch7x8Mf4u1f0OmBwCOdgCfCEjgwepuDV8=)
                          8: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: KsTcmsT13CpVB95Sm08WKCzvHswRNLGoy4Bbl9q5nOk=)
                          9: QtPx4ap949xN5arcMJRpZvFzTfM.roa (hash: KaudJcjJFvIdlbff02gWZxLZI4bRcA90hXhml9h/ITE=)
                          10: khYS0lYDwiX9lTkfE55JUXtp8-s.roa (hash: bmf6tC0bXLVB4qb1Vl64CHJZEDbU89NkLDTPf7Yci6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:94:18:3e:0c:9b:3a:94:b1:54:1f:3d:56:ae:81:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Oct 25 15:00:47 2026 GMT
            Not After : Oct 26 15:00:47 2026 GMT
        Subject: CN=147cc674c2a25721a5844681ba188930a187a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:34:57:0d:3d:9f:43:7a:01:c0:6a:fe:b2:
                    14:c2:17:58:d1:d8:52:f0:3f:34:42:fd:50:99:c5:
                    0b:cd:23:98:71:3d:56:2b:f8:2b:fe:97:94:a8:fa:
                    15:6c:0b:49:d3:9e:ae:c9:2f:5e:e1:36:81:eb:8c:
                    d3:76:4d:1f:b8:32:91:67:fa:90:15:11:ef:3d:d9:
                    60:eb:e3:5a:a6:40:d2:7f:32:c3:3c:6e:2d:ae:88:
                    fa:34:f1:e8:4f:65:fe:44:bc:32:06:6f:93:10:57:
                    69:26:57:3e:01:f6:a9:7e:29:65:c5:7f:91:05:02:
                    8e:5c:61:db:07:38:22:6a:19:7f:e7:c5:66:3b:d3:
                    1d:56:f4:3d:61:77:e2:2d:5e:a9:20:f5:ba:7a:6d:
                    57:bf:a8:99:bb:b5:d4:07:97:53:e9:09:d5:1d:39:
                    33:70:a3:fc:0f:a5:c5:ad:b1:9b:8f:88:2d:25:d5:
                    8d:df:04:3f:e4:66:48:99:fa:75:85:eb:97:64:96:
                    fc:48:42:fd:cd:dd:6f:e3:54:ff:18:03:6a:9f:cd:
                    0d:d5:5b:20:f3:8d:dc:35:e4:15:20:bb:f3:9f:27:
                    ba:75:b8:81:69:a4:ab:cb:d8:02:69:05:b7:3b:c3:
                    3a:99:7e:af:d2:d8:d9:52:0f:81:ab:d9:cc:cd:23:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7C:C6:74:C2:A2:57:21:A5:84:46:81:BA:18:89:30:A1:87:A5:97
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:4a:73:2b:1d:01:22:26:9b:57:25:fd:93:18:12:39:f9:
         2c:6a:72:30:6c:d8:c5:e5:a9:d5:ce:a4:e8:52:24:a7:76:c6:
         71:69:10:ff:e4:46:c3:2f:80:fe:f8:6a:5c:10:60:47:5d:ab:
         de:e0:0c:87:9b:33:53:e7:88:6d:12:a3:10:05:53:da:f6:ac:
         fd:e2:87:ef:df:15:87:a6:96:06:7e:27:ec:df:df:28:c9:12:
         50:a1:29:dd:70:8d:7e:0b:aa:c1:2d:6c:61:65:d1:7e:c2:d0:
         f8:15:90:80:79:ad:f5:ca:d3:51:9a:5e:8d:75:a6:88:31:b6:
         7d:d4:88:72:6f:54:88:b4:3f:fe:25:10:f3:4f:fc:25:04:65:
         fc:21:d8:d5:4b:b4:08:88:b3:06:d3:5f:6d:45:72:f2:32:c8:
         67:f4:b6:e0:45:12:2d:00:b7:bc:3d:25:7e:0c:ed:36:2e:6c:
         81:ee:0c:fa:2f:ee:1d:2f:b2:16:a5:f1:49:cb:f7:58:1e:3a:
         71:f2:b8:a6:51:6b:f5:e1:f8:c0:a0:9b:6f:4e:02:13:51:88:
         5c:f3:e0:12:12:f0:a6:e2:c9:2f:b6:cd:65:bf:63:96:f5:ee:
         94:db:94:ac:89:bc:31:73:7e:6e:d3:21:3d:b0:4a:20:a6:58:
         76:36:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:41:57 2026 by rpki-client