Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File:                     kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier:          y86hj8k8ioV/badq7b83fQJwEggeeruhgyocDKxMM4M=
Subject key identifier:   82:01:18:93:BA:92:D0:BC:93:11:06:BE:C5:A4:07:2B:59:0F:7C:16
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer:       /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial:       01A17FCF906E68DF9D100973D267E5D61195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number:          0B13
Signing time:             Wed 28 Oct 2026 00:01:11 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:11 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:11 +0000
Files and hashes:         1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
                          2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: qUsONkk3aSX00u5zYZrx73cy2nsDxzhz9N/cnMBKVt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:90:6e:68:df:9d:10:09:73:d2:67:e5:d6:11:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
        Validity
            Not Before: Oct 28 00:01:11 2026 GMT
            Not After : Oct 29 00:01:11 2026 GMT
        Subject: CN=82011893ba92d0bc931106bec5a4072b590f7c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:e7:4a:a3:35:1a:c5:88:d8:c2:cb:4f:63:
                    95:e2:0f:11:40:6e:7f:57:1d:34:4e:7d:b2:f0:aa:
                    43:92:6f:8b:26:1d:b2:9f:44:26:b5:74:a5:c5:4e:
                    bc:54:77:b4:3c:ee:00:89:e0:1c:dc:07:41:83:a4:
                    6d:8b:de:7e:08:cd:9c:8b:b6:c7:28:4c:d2:73:6e:
                    31:4a:8c:a8:e9:63:45:4b:5b:ac:d2:50:1a:01:df:
                    ff:c2:c5:a5:a4:07:2f:2e:ed:b7:45:97:dc:4f:18:
                    69:e7:00:2e:c7:e1:96:ed:27:4a:4c:9f:41:3a:7b:
                    4a:11:fb:63:ab:4a:4c:d9:b7:c0:81:2e:f2:9c:7a:
                    7d:ec:30:e6:42:7b:d7:88:ab:08:61:89:e9:f4:ae:
                    49:b4:40:b3:a2:c7:8f:44:fe:17:29:a6:bc:7b:12:
                    4b:9c:bd:ad:1c:9e:c3:07:43:9f:12:d9:9e:8c:2f:
                    ec:06:78:04:3b:65:13:88:f1:13:7e:9e:e4:0f:65:
                    eb:20:f9:31:3c:b3:f5:58:42:b4:51:8a:84:09:4d:
                    c8:08:6e:2e:63:e9:1e:c3:fb:c0:81:45:8d:06:88:
                    eb:6c:f9:a2:93:05:21:41:b6:74:65:6b:42:67:16:
                    d8:20:82:1d:8d:a1:0e:99:3d:b3:0d:ee:8b:8f:05:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:18:93:BA:92:D0:BC:93:11:06:BE:C5:A4:07:2B:59:0F:7C:16
            X509v3 Authority Key Identifier:
                keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5b:57:56:1e:93:33:af:79:8e:8a:e1:5e:c9:4f:8b:98:02:
         a4:ce:7c:35:19:e6:61:d4:f9:78:7c:0c:3d:83:13:2b:47:95:
         7e:36:33:5c:40:fa:b8:42:2e:f1:1c:a5:eb:d9:56:fe:e1:53:
         9a:95:aa:0f:f1:e4:6d:a9:2d:c0:b7:9d:dd:32:b3:f1:e1:a7:
         13:70:4e:49:9e:7b:ed:cf:4e:8a:19:91:09:d9:6f:a8:80:a5:
         41:c8:f8:c7:b4:f8:6a:36:33:1b:19:d1:f0:66:a6:77:fb:58:
         5a:4c:6d:e5:b6:64:40:c0:ea:34:47:38:21:66:36:82:0e:44:
         66:c1:9b:4c:83:ef:9d:7f:69:6a:c7:05:d4:60:38:5d:4c:62:
         23:7e:b9:b8:4b:8d:df:8f:bc:fe:25:48:50:53:19:d0:c2:21:
         60:2e:8b:0d:ac:8a:4f:d0:16:b5:63:ea:c7:ec:e4:b5:5d:77:
         3d:2b:14:bb:43:eb:78:6b:a5:f4:98:b4:a6:b1:bd:9b:1e:d7:
         27:04:85:22:b8:05:80:60:e1:0b:31:ef:be:73:7e:3e:0f:5c:
         e0:fe:06:bb:fb:a4:bd:b5:e6:73:29:f5:01:37:c7:a6:4a:fd:
         4c:8a:8c:9b:ea:ed:14:ea:3e:bf:bd:8b:84:ce:28:82:4e:70:
         45:ce:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:14:11 2026 by rpki-client