Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          MZSCw+3bYHfLToomG2NGiJeDU0EQtpskvYqiz4ai8tY=
Subject key identifier:   B0:FA:8C:63:0A:26:1D:2A:A8:3A:EB:56:EA:A2:0D:A5:EF:41:B4:76
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       01A0D1930938F03630FC75AF09CBB1DF717E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          19D6
Signing time:             Thu 24 Sep 2026 04:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:09 +0000
Files and hashes:         1: ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa (hash: pYmIQYvBOAoLzP63yxZwD5AKPB0JekK4kO0OzrdUlpE=)
                          2: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: i86ho2POFh1SR3Qhh7GF4OX7aXzqOBN+1gbWOY8BaxU=)
                          3: lX8ec-kHtYQc2eYxJReNoElbToQ.roa (hash: 6QTzsEZgHNywYoD3IZ6Z740+HwWFg/g5EfVeUxTu8gQ=)
                          4: nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa (hash: eebZVUFclHYl/xNS3jIW8oNgi3gVg03bFj8wnZMugsg=)
                          5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:93:09:38:f0:36:30:fc:75:af:09:cb:b1:df:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Sep 24 04:01:09 2026 GMT
            Not After : Sep 25 04:01:09 2026 GMT
        Subject: CN=b0fa8c630a261d2aa83aeb56eaa20da5ef41b476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e5:68:d3:47:ae:7d:37:88:ca:62:35:55:6e:
                    fd:c7:b8:67:85:dc:e3:70:d2:6e:78:66:92:60:3b:
                    a9:2b:4c:d4:fb:65:09:58:92:9c:60:f3:4e:31:84:
                    b8:f8:be:bd:7c:49:c3:80:0b:70:8e:a3:12:ce:f5:
                    45:f1:de:c6:48:8b:ac:74:71:74:33:a9:6c:ff:d2:
                    db:48:60:b7:46:7b:4f:fb:c4:c3:b1:af:83:0f:c5:
                    c7:63:76:74:b8:95:5a:b0:8c:18:89:51:9c:62:2c:
                    66:0f:f9:8e:ee:12:d1:71:f2:df:14:63:c2:e4:ec:
                    a4:f6:37:c8:9b:94:1a:d8:38:9f:90:c8:63:49:ca:
                    5a:cc:4b:99:48:38:1e:f7:4c:20:85:c0:89:52:a5:
                    92:f5:5b:8f:fd:ac:de:2e:23:4f:bb:6b:b4:bb:55:
                    91:b0:bf:6d:3a:68:92:7f:10:ba:8e:3e:6c:cd:58:
                    9c:33:25:c0:6c:40:94:26:41:b8:0a:3f:01:f0:e9:
                    2d:97:aa:a0:80:f1:2c:00:bd:f4:ff:30:1a:8c:73:
                    3b:2f:95:c7:d1:28:ff:4c:d6:75:92:c4:e5:d4:ff:
                    9b:37:4a:c9:4b:77:2b:cc:34:98:cf:9c:15:95:db:
                    a7:a3:23:7d:d1:97:78:2c:ce:9a:b6:a0:2c:d0:dc:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FA:8C:63:0A:26:1D:2A:A8:3A:EB:56:EA:A2:0D:A5:EF:41:B4:76
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:f6:00:d9:39:06:ea:6e:70:01:69:3d:3c:a3:e8:1a:c7:
         40:40:dc:67:19:34:40:ba:56:55:db:51:e1:eb:39:69:63:9a:
         ee:17:40:62:32:fb:ec:c6:50:67:1c:c8:9a:94:b9:2b:3d:19:
         de:96:2c:a4:a2:47:41:2a:3b:3f:e7:86:52:f1:4d:7d:6d:96:
         0a:66:0f:de:ad:36:cc:66:a7:5c:c0:01:df:c0:e8:b6:a8:a1:
         d5:e3:09:64:3b:f4:f0:48:71:db:f6:1c:37:36:b4:4b:10:e4:
         64:1b:3e:4a:92:06:a7:a1:09:f1:36:a5:e0:bd:62:83:c9:d7:
         92:42:28:ac:73:cb:7d:5f:ac:40:00:3d:7d:f4:70:8a:56:3c:
         b1:dc:9e:74:38:de:3e:45:ae:a6:54:43:5d:8b:e0:49:16:ae:
         57:67:b1:b9:d3:a3:88:9e:b6:9a:8e:40:3f:2d:d4:d3:46:17:
         95:bd:37:c1:be:47:44:ee:29:d1:56:48:1a:5f:b8:92:2e:f1:
         cd:b6:ea:6c:dd:0c:4a:a4:34:d6:6f:cd:52:87:5c:42:46:4e:
         ff:d9:17:98:74:ea:d9:94:ac:38:92:ac:a9:73:be:78:cb:63:
         99:03:ad:68:fe:73:f8:1a:e3:d0:ea:ba:c6:d2:a9:d6:f6:12:
         cd:7c:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:55 2026 by rpki-client