Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          QM3mYn72Y2jJVEmTBqFgCLVClo0MddQhedrtss5xb28=
Subject key identifier:   A1:A8:0D:8C:27:83:F2:55:D3:30:13:50:3D:37:72:CF:A4:28:9B:E7
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       01A0B0BE3553CAED9C53E9ED9FB1908EB445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          128C
Signing time:             Thu 17 Sep 2026 19:00:50 +0000
Manifest this update:     Thu 17 Sep 2026 19:00:50 +0000
Manifest next update:     Fri 18 Sep 2026 19:00:50 +0000
Files and hashes:         1: GW786ZAo9o6aG6R8or6IyYUM610.roa (hash: 5S3yILVPVQsvYnYYATkA7sNaoSvTWdIxhm26IIo2wDM=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: 3+eSrQ1wpihe1f5ZgrvXhEQDXcJnZOcYi3vxkvJ1cto=)
                          3: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (hash: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w=)
                          4: oidyzZNtucuXDORhUnc_enodjqc.roa (hash: DRv8W7PqvucKqgRhrWT7C5z20IqpO4qn8uXxa3BmMhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:be:35:53:ca:ed:9c:53:e9:ed:9f:b1:90:8e:b4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Sep 17 19:00:50 2026 GMT
            Not After : Sep 18 19:00:50 2026 GMT
        Subject: CN=a1a80d8c2783f255d33013503d3772cfa4289be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:33:85:2d:f3:78:85:e3:2b:54:2e:76:93:
                    ac:35:9d:05:82:f4:c7:1f:5b:e9:9c:4e:f2:b1:01:
                    a3:0e:a2:77:cb:6a:7d:ed:91:33:cc:85:de:5d:a1:
                    17:56:f3:3a:78:55:0c:53:4f:2c:31:dc:88:d6:9d:
                    6d:e1:54:eb:1b:11:96:0f:e6:2d:23:ca:36:76:3b:
                    0c:9a:cc:fb:4a:42:ab:c5:06:74:31:6a:52:f7:b6:
                    be:cc:f2:9f:c1:c1:61:1e:3f:1f:0e:10:6d:50:2f:
                    c0:26:f6:f7:ed:a9:27:d4:dc:a1:20:a8:cf:5d:b2:
                    ce:dd:f4:d0:d8:03:c9:7b:89:72:e7:73:2c:7b:81:
                    3a:f8:84:60:9c:72:4c:1a:6d:6b:0f:f2:53:43:dc:
                    5d:0f:04:4f:a2:0e:b2:1c:ad:49:0d:c1:6e:87:f6:
                    71:9f:0c:ba:40:df:29:43:4f:6a:4d:e1:7e:d3:3a:
                    fd:75:41:d3:e5:b2:5c:32:51:ad:f1:60:4b:c3:19:
                    12:2c:ba:ac:1c:e7:94:18:38:02:f1:49:27:3b:67:
                    6f:fc:13:0d:f5:43:4a:ec:a8:93:0d:0a:ab:26:6c:
                    2f:c5:92:b1:7c:9e:b9:19:4a:ca:1d:72:26:a5:ae:
                    5d:ef:03:f7:fd:6e:21:b9:e9:fc:a0:6f:42:5d:11:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:0D:8C:27:83:F2:55:D3:30:13:50:3D:37:72:CF:A4:28:9B:E7
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:69:67:ab:ee:57:4e:7d:51:6e:b1:e3:3b:9d:bf:37:b9:ba:
         f7:9c:32:bd:ea:91:f6:9f:22:08:ff:68:50:4c:91:2d:2a:5f:
         80:78:53:6d:0f:d5:4e:89:f9:b6:5c:98:fc:fa:61:7c:fd:06:
         e9:af:6f:0c:25:e2:0e:e2:f0:1c:31:f1:ab:36:50:33:2e:57:
         3b:dc:e6:3b:66:ec:65:21:fd:88:f9:c7:e3:a5:43:2d:5c:08:
         8f:eb:63:24:c9:04:f0:8f:d6:bf:0c:7b:72:0f:10:c4:d0:a1:
         6b:34:55:00:bf:7e:fc:95:41:86:8f:1e:21:9f:05:04:2c:f8:
         4a:b8:0e:97:f1:c0:32:17:55:33:34:53:66:65:d8:cd:1d:27:
         76:27:83:8b:fd:67:58:c7:46:93:5d:db:9a:cc:33:cc:86:af:
         90:36:4c:d8:e1:63:7c:5b:53:b4:f3:cf:bb:82:ad:37:62:43:
         c0:2a:5d:9d:55:2b:5b:c6:35:f4:84:02:53:98:42:37:6b:13:
         83:c4:82:75:c6:f8:06:89:74:46:6a:b2:e8:0e:2c:1d:0e:fc:
         6c:11:67:a5:94:c7:88:18:32:c3:04:b0:84:5d:7a:e7:af:89:
         48:93:96:26:fe:2f:ba:27:79:96:2e:b5:93:41:fe:92:e6:43:
         26:34:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:50:05 2026 by rpki-client