Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File:                     kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier:          ul5Iq30HjcwuvO74N65zn0baSBYXKSIr1gIYXMZXV8o=
Subject key identifier:   4E:9F:F1:53:78:C1:4C:F8:11:76:27:08:2A:0D:58:4A:B7:8F:77:EE
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer:       /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial:       01A1355A38D110FDDC245BE00AC6C1E218EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number:          16B0
Signing time:             Tue 13 Oct 2026 13:01:07 +0000
Manifest this update:     Tue 13 Oct 2026 13:01:07 +0000
Manifest next update:     Wed 14 Oct 2026 13:01:07 +0000
Files and hashes:         1: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (hash: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ=)
                          2: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: L/Ed6LIBqIzzGnZIOFNk6wpJJ1IeMr91xJpfnuQybi0=)
                          3: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (hash: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o=)
                          4: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (hash: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:5a:38:d1:10:fd:dc:24:5b:e0:0a:c6:c1:e2:18:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
        Validity
            Not Before: Oct 13 13:01:07 2026 GMT
            Not After : Oct 14 13:01:07 2026 GMT
        Subject: CN=4e9ff15378c14cf8117627082a0d584ab78f77ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:81:59:70:9f:5c:b2:ef:40:db:d4:39:68:
                    22:ec:e2:b7:21:3b:07:65:03:28:7a:a9:10:27:d5:
                    ac:c0:c8:2b:4c:55:83:66:94:61:fc:17:2e:84:bc:
                    b7:52:2f:ad:78:20:f7:85:e9:a7:2d:06:7f:2f:f9:
                    02:b2:85:32:77:cf:6e:55:52:71:d5:24:31:08:a4:
                    59:67:5a:ae:85:47:e4:b2:4e:75:cb:6e:3d:08:6c:
                    35:df:03:34:c2:e2:0b:2f:cb:fe:94:71:de:ed:30:
                    cd:ac:c4:64:41:7f:c7:a3:16:49:81:92:f2:4a:47:
                    6b:11:5b:ab:23:a2:5c:07:41:9f:58:62:c6:0b:03:
                    18:5c:41:35:15:ac:c0:ca:63:a7:2f:40:87:3c:db:
                    c0:0b:67:1e:06:27:a0:d8:62:a2:31:31:1f:69:1d:
                    ea:dd:8e:48:5f:8a:e2:a1:67:7a:77:3b:11:34:45:
                    06:a2:b9:01:93:c2:d0:97:d3:ba:72:d7:3e:62:57:
                    2c:08:43:96:74:54:20:2c:79:c9:4a:ac:87:06:8b:
                    7a:52:82:06:b0:73:fa:92:4f:91:0a:6f:2a:d3:a2:
                    58:08:be:ad:f1:a9:d7:62:5b:ab:c4:bd:f6:64:f1:
                    eb:52:a2:b1:0c:a8:04:96:17:f3:0f:f0:57:58:81:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9F:F1:53:78:C1:4C:F8:11:76:27:08:2A:0D:58:4A:B7:8F:77:EE
            X509v3 Authority Key Identifier:
                keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:02:b1:f9:fd:74:61:49:c6:66:ac:9e:31:67:fc:1b:35:57:
         9a:37:cb:6a:33:d1:62:6b:ac:55:b7:06:74:c1:2d:fa:4c:b6:
         16:61:0e:e0:7d:af:37:bd:7c:80:3b:69:37:65:11:ce:3f:9c:
         4f:72:bc:a3:ac:9e:2d:25:48:14:86:3e:9d:d8:e4:f7:d2:65:
         48:c7:f1:58:99:12:8d:50:56:fd:55:35:e8:a8:68:7b:d9:ef:
         60:31:cf:d4:ed:62:40:93:29:8f:ec:70:f6:0b:05:06:71:f2:
         89:58:1d:02:e3:d8:88:36:77:80:a4:45:5f:86:3f:e7:b0:c4:
         dd:2b:75:45:ec:7e:7d:fc:4f:5f:b6:0e:46:0d:4e:8a:1d:b6:
         9a:af:ab:c2:b4:e5:ff:ed:2f:b5:2b:ce:78:17:9f:64:54:73:
         d9:e3:32:5a:df:a9:3c:ce:a0:93:42:ab:d0:4d:35:6a:ce:49:
         a5:f9:1d:29:25:c1:25:61:c6:d7:e7:f3:98:e3:36:b5:00:65:
         43:3f:da:b7:d6:2a:f3:ea:c9:17:08:2e:ae:2a:8d:89:b4:92:
         8a:8d:7f:ac:9a:2f:b2:07:8f:ac:12:86:a0:8d:f2:e6:30:3e:
         e1:6b:7a:03:ae:c1:cc:12:b2:de:d8:94:6f:b0:ff:1f:59:ac:
         56:d8:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:34:19 2026 by rpki-client