Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
File:                     KuLHRej2hPuArBnM3AierFgUZUo.mft (raw, json)
Hash identifier:          X4W3qTvAcSgEqj0m0ZxBy37CRxsl12pG+v6RYzzi1go=
Subject key identifier:   13:3F:73:2B:8D:F2:74:0C:B3:4E:D9:7F:25:79:08:67:3A:3F:4B:09
Authority key identifier: 2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A
Certificate issuer:       /CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
Certificate serial:       01A0D5DE0F32AB8C681017BFC8886E121C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 00:01:34 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:34 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:34 +0000
Files and hashes:         1: C7BgJU1RJsS8-1WKTqX6V7kq4y0.roa (hash: SGtJrPMic2ON9eWUe2+fmPnOCxoU1rHwRo66TB4f67w=)
                          2: KuLHRej2hPuArBnM3AierFgUZUo.crl (hash: dByLHfPtoy+i+7p3afEiB6zhnquR4d1F2cr6HJz3mfM=)
                          3: WgjIu8S97FBry8IBJX7BijRh0UE.asa (hash: plmhVkPEVtHqmyaviSWaVdRoyVEm1YYRYzj6w9pBiLw=)
                          4: sXYBYOzWape5FZOss1s2gbpkzzU.roa (hash: KREfilkta372D7Yqg/hHtPffqvz0AiEw0qbCO9glSQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:0f:32:ab:8c:68:10:17:bf:c8:88:6e:12:1c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae2c745e8f684fb80ac19ccdc089eac5814654a
        Validity
            Not Before: Sep 25 00:01:34 2026 GMT
            Not After : Sep 26 00:01:34 2026 GMT
        Subject: CN=133f732b8df2740cb34ed97f257908673a3f4b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:cb:aa:8e:6a:06:20:47:3e:92:3f:39:9c:
                    53:46:a5:50:80:39:aa:23:40:c2:aa:e1:1d:e1:95:
                    ce:ed:b2:0e:b0:d1:51:d2:99:7f:bf:37:6d:5b:31:
                    69:1f:53:37:53:c2:af:b3:57:6c:c3:c2:0f:ff:45:
                    84:79:26:6a:e8:4e:8b:fe:83:60:2c:f6:d3:a8:48:
                    45:36:a6:01:6d:f5:fa:08:0b:68:43:b4:8a:99:6e:
                    aa:ff:d4:03:47:ae:af:c9:67:da:a7:c4:4e:ff:79:
                    3c:7b:01:d9:c3:a3:fa:77:84:6b:10:59:dd:3c:38:
                    4f:40:a1:1e:92:d9:16:86:8f:fa:9a:17:6a:4e:3a:
                    4b:c0:91:1c:f7:0c:a4:f2:5a:72:d5:32:55:e2:b1:
                    bc:48:1a:00:5b:d7:55:00:fa:0d:01:99:ec:a3:85:
                    2d:79:08:f6:56:0b:b0:b3:cc:5f:b8:0a:6a:88:53:
                    f2:b2:ee:f7:92:7e:0f:4a:0f:48:f2:6c:ca:e7:3c:
                    69:8e:ba:c6:1d:62:6b:04:61:cb:5e:c8:d4:01:30:
                    aa:92:2e:0e:55:b9:dc:71:f2:f6:79:01:c0:6f:c4:
                    9b:c3:5f:0a:b2:23:53:53:e1:fc:88:0e:39:8a:7d:
                    00:3f:a1:13:00:e0:05:84:07:7e:9e:fe:33:85:10:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:73:2B:8D:F2:74:0C:B3:4E:D9:7F:25:79:08:67:3A:3F:4B:09
            X509v3 Authority Key Identifier:
                keyid:2A:E2:C7:45:E8:F6:84:FB:80:AC:19:CC:DC:08:9E:AC:58:14:65:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLHRej2hPuArBnM3AierFgUZUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/KuLHRej2hPuArBnM3AierFgUZUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:90:9a:89:a7:33:a4:b9:d7:93:1e:94:ec:b6:57:66:71:
         67:b2:b1:72:3a:8b:ee:fa:b2:0b:84:26:ca:13:77:85:4b:a6:
         8f:10:7a:34:07:ad:3d:a2:22:95:ef:a9:c8:63:95:44:48:9b:
         51:51:9b:8e:5c:bc:42:c7:c4:c0:15:95:93:aa:9d:0e:ba:4f:
         f6:71:76:93:f1:6b:1f:9b:4a:fb:23:fd:1d:d2:a5:03:e4:8e:
         b3:1c:1c:fd:2c:ec:b2:fd:9f:09:dd:b1:6f:32:c0:d8:b1:8b:
         8d:be:94:44:69:1c:af:7d:66:42:f7:1c:5b:55:a1:97:59:fb:
         b7:3d:cd:0b:af:ac:53:cf:66:17:06:71:32:fc:bc:be:15:c1:
         a8:a9:c3:85:4c:68:57:c0:51:c5:af:88:76:76:02:a9:99:54:
         7c:bb:3b:ca:6e:5c:3a:40:c0:74:3c:d2:ea:5a:79:04:0c:4a:
         16:a5:2b:c1:ec:5c:0b:5d:51:99:75:b3:89:e9:d9:84:ba:23:
         81:b9:6f:c7:65:ae:b7:df:ef:4b:69:49:33:7e:48:c9:4f:9a:
         c3:71:c6:0a:1d:39:cd:dc:44:43:af:b2:3c:ad:74:b1:73:9f:
         8e:33:2a:cf:14:70:07:54:4b:ad:5f:c7:77:b1:c1:48:12:b1:
         b2:91:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:07:22 2026 by rpki-client