Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          jNNZYOi56Z+MeMVHLoUEkmlXS+94Xj5yZoJCdjDM54M=
Subject key identifier:   3A:77:E6:01:B7:EB:9B:FC:43:A3:F0:BB:58:EE:87:24:36:AC:38:D1
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       01A10512590C0307D7750CF8C6D51666B717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          075B
Signing time:             Sun 04 Oct 2026 04:00:50 +0000
Manifest this update:     Sun 04 Oct 2026 04:00:50 +0000
Manifest next update:     Mon 05 Oct 2026 04:00:50 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: Tus1+CyBewZbvA1UvKgSRrPrf/XGWB9NOLROv8hvRsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:12:59:0c:03:07:d7:75:0c:f8:c6:d5:16:66:b7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Oct  4 04:00:50 2026 GMT
            Not After : Oct  5 04:00:50 2026 GMT
        Subject: CN=3a77e601b7eb9bfc43a3f0bb58ee872436ac38d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:7f:06:0e:b2:5d:0d:7d:f5:8b:a6:99:5a:
                    51:97:32:b0:bb:68:17:64:80:04:a5:3f:9e:24:cf:
                    7f:17:75:7e:5b:e4:32:76:aa:b9:a5:7c:2d:bc:e6:
                    ae:ed:0e:0e:47:be:b8:51:99:29:7b:c3:43:e9:d6:
                    4f:27:97:f7:b0:ec:e1:14:31:eb:58:0d:df:b9:00:
                    62:c1:c9:7c:85:ad:cc:a4:85:15:03:ee:87:9f:88:
                    0d:b7:61:7a:21:dc:48:48:2a:50:3a:e4:f7:a1:56:
                    ef:ba:0b:17:5e:94:46:ee:1a:35:f7:95:f5:64:c1:
                    68:79:9b:2e:0e:81:7c:6a:5d:8a:de:fd:f5:72:26:
                    13:01:8c:27:5b:ff:6c:98:76:4e:c8:7f:59:53:99:
                    8e:62:08:36:cd:53:76:f0:82:70:4e:21:1d:a9:61:
                    91:62:23:2b:f0:8a:c5:d5:8a:f3:4e:d7:89:42:7c:
                    4e:9f:7a:f3:34:8b:8f:b7:8a:f9:bc:72:b2:a5:fa:
                    0e:94:50:25:e8:e9:97:a1:03:f4:d6:6c:ce:95:df:
                    74:0d:24:01:a3:e1:c5:5e:03:b4:59:40:28:99:44:
                    13:ac:b9:e6:a4:21:95:86:83:b3:8d:4d:6a:28:b4:
                    0c:12:b7:a4:ba:6a:6a:0c:b8:06:d4:a7:79:18:1c:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:E6:01:B7:EB:9B:FC:43:A3:F0:BB:58:EE:87:24:36:AC:38:D1
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:48:c8:49:7b:b9:49:1d:87:60:fe:b8:e0:32:b1:48:22:95:
         19:80:9f:43:ee:18:27:ff:90:e6:f4:41:2d:9e:90:a9:73:66:
         52:9c:9c:22:25:e3:b7:24:39:dc:2f:ce:65:af:4a:4f:08:07:
         0e:1d:23:ec:e6:d0:a6:49:01:27:f7:83:64:4f:5d:47:ef:d5:
         41:5b:c5:66:5c:e0:4a:86:93:8c:42:a2:fa:28:07:f0:44:63:
         3b:f6:53:7b:5c:f0:2c:41:a5:ef:7e:3d:73:bb:cb:bb:a0:ab:
         12:07:2a:d3:19:d3:b8:f5:ef:04:1c:70:ad:28:73:b0:86:07:
         d2:37:67:bc:54:ac:7c:ce:26:c2:b9:5c:68:ba:80:c1:fe:07:
         c9:61:ae:75:b1:be:fc:43:61:0e:f9:a4:9f:a9:e1:2d:94:f0:
         c7:88:c4:5b:7d:21:81:03:a2:c3:21:6d:ff:6e:6b:3c:0b:17:
         fc:ba:10:55:87:5b:ee:2b:e5:32:3e:ba:51:25:8d:7c:a1:cd:
         f4:b0:71:db:e2:f9:39:5c:9e:1b:ee:a2:a8:ed:02:74:59:48:
         2d:1c:5e:ae:ff:80:1e:78:1e:dd:e9:82:3b:a1:b1:9d:c9:a5:
         13:1c:f6:ce:40:c7:57:85:a6:fb:ef:10:5f:76:65:af:1b:b9:
         98:16:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:50:32 2026 by rpki-client